This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.cer
File:                     oh-Zw_Spb2y0E06bmYKgkvBgBUQ.cer (raw, json)
Hash identifier:          c32ahEqBSJsQ7cHbfxecBRz+oBa3Kg/QIHQB9kkEioo=
Subject key identifier:   A2:1F:99:C3:F4:A9:6F:6C:B4:13:4E:9B:99:82:A0:92:F0:60:05:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BF9F0090597F55299A272A6F4648AA91A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 26 Jan 2026 10:53:36 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:9d0::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:f0:09:05:97:f5:52:99:a2:72:a6:f4:64:8a:a9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 26 10:53:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a21f99c3f4a96f6cb4134e9b9982a092f0600544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:1a:76:92:5f:95:ee:b3:f5:c1:82:96:72:
                    70:0d:76:b0:48:5b:97:6f:95:88:6e:a5:9a:6c:dd:
                    85:ce:ee:0f:82:1d:ee:a8:cf:14:9d:2e:02:93:3f:
                    04:06:21:7d:77:a5:ac:56:05:a7:e6:fa:38:03:79:
                    a6:f1:e2:46:f8:ec:09:ee:03:7d:48:00:6c:b5:66:
                    8f:8c:80:80:09:fe:a6:03:2f:76:5c:02:0e:38:dc:
                    dc:e7:45:1d:ba:ce:de:fc:e1:09:89:a8:bb:1a:3c:
                    fe:35:07:73:bb:26:70:6c:54:93:45:07:c9:17:3e:
                    48:17:18:b3:ee:f2:64:0c:eb:04:61:97:ac:ed:27:
                    30:ad:b1:fd:df:c0:a4:73:62:df:6e:46:67:de:48:
                    64:31:45:3a:5d:f8:ab:73:b1:db:ae:7a:79:c7:5e:
                    ab:67:ce:33:02:3e:ed:0e:43:1c:bd:de:60:20:ac:
                    62:33:71:60:d6:e4:5f:27:a1:2d:9a:61:36:ce:43:
                    28:77:15:fd:79:28:e1:f7:5b:b6:09:65:c1:be:15:
                    d4:88:05:ee:a3:40:7e:49:ca:80:17:0d:df:ec:19:
                    fe:f7:db:ff:f4:57:6e:4b:fd:4d:23:a2:54:58:bb:
                    a0:34:f5:40:eb:f6:97:81:df:65:13:0e:3a:7b:37:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1F:99:C3:F4:A9:6F:6C:B4:13:4E:9B:99:82:A0:92:F0:60:05:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:9d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:6c:a1:8e:1d:e4:ad:c1:d8:42:c4:32:87:e7:2a:65:a6:d8:
         7b:36:4e:31:49:35:20:9a:0c:a8:db:59:af:49:c7:74:9e:71:
         96:bd:a2:ba:df:67:ac:2c:f8:00:5c:7f:39:6d:c8:cd:af:30:
         21:11:36:19:fc:a1:1c:3b:ed:2c:5e:b9:6d:45:14:dd:b7:a3:
         70:17:47:ec:0d:97:81:1f:ed:46:a9:bd:ef:f0:90:d3:77:c0:
         1b:30:d4:38:3a:e9:21:a6:fd:09:ca:9a:f7:a1:e6:99:db:5f:
         41:d4:ee:09:25:e4:c9:94:17:6b:fa:64:83:1b:d2:bd:13:f1:
         7d:83:e1:e4:c6:9b:c8:64:9b:50:28:d8:41:fb:2f:d8:61:1d:
         93:e8:82:df:c3:ec:1a:8e:79:aa:72:5d:30:50:19:14:67:51:
         88:51:8b:ba:92:b9:5a:fc:bf:6e:8f:7a:d8:f2:42:7c:ef:34:
         aa:eb:25:0d:42:ed:bd:e0:94:33:b8:f4:48:dc:16:30:32:d4:
         0b:09:65:5b:9f:eb:37:ea:30:0b:37:ae:5b:54:e1:6a:3f:d0:
         9b:54:1a:54:7a:9c:cd:36:bb:a2:1f:ac:d6:e9:f0:be:4d:7f:
         af:85:70:fe:23:57:f0:e1:0f:14:19:21:96:5d:82:ff:f7:e8:
         44:be:9f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----