This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer (raw, json) Hash identifier: mmKst2fo/Vkt1MDXU1iChdkoP0Yk5tAwRpsuvE5vNNA= Subject key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA71AEA4D84455DFAC17D3D9E1FBFDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41982 IP: 89.104.160.0/21 IP: 2a00:1708::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1a:ea:4d:84:45:5d:fa:c1:7d:3d:9e:1f:bf:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:cd:79:36:61:bf:28:0c:4b:d8:d2:34:4a: eb:5d:74:1b:be:31:c2:52:67:f2:26:ca:d2:af:72: 7b:bf:f9:ad:17:d4:0f:d5:84:e0:52:95:f9:6a:21: e3:51:54:c3:8d:30:b8:62:b8:76:60:8e:d7:c6:ff: 80:f0:71:61:13:4a:10:0b:1e:7f:09:35:cd:b7:61: fb:c0:7a:49:25:d1:51:db:18:97:61:89:e8:94:ac: 54:43:40:38:dd:b1:8a:f6:70:96:db:78:43:62:58: 18:3e:2d:fa:33:27:fa:52:68:70:04:c5:3b:d0:fb: 09:04:97:ff:8b:81:16:34:cc:09:4a:39:25:1e:30: 40:00:e5:04:e8:f1:33:e0:51:4c:04:ef:30:8f:86: 75:09:fc:64:19:de:1e:7c:eb:2b:7e:39:8e:bb:37: 35:b0:95:ae:42:8a:d4:bf:2e:16:88:63:34:27:95: b9:1d:ad:b7:ab:d1:fb:b0:72:0a:70:f4:27:11:cd: 29:8a:0d:7d:94:66:2b:88:da:96:8c:13:a4:a8:89: 6c:76:af:d4:29:80:af:86:3c:19:27:47:7f:a0:16: 28:d3:49:aa:3d:01:2d:a3:c6:fd:70:22:8b:9a:d9: b2:cc:8f:da:b2:cf:a4:32:cc:c5:f7:3b:fa:37:8e: 2c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.104.160.0/21 IPv6: 2a00:1708::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41982 Signature Algorithm: sha256WithRSAEncryption 7d:2e:d9:41:c0:88:a5:17:05:b4:d3:26:04:53:55:6e:12:3e: a0:80:42:b3:15:cc:00:76:6b:54:6f:17:4a:c4:7b:45:a1:c0: c7:f7:97:0b:fd:07:7d:d1:67:f9:6a:bb:4b:28:d3:92:ed:55: b8:c8:c2:77:3c:cc:ca:3b:27:5a:64:2e:ae:ce:bc:38:ef:f5: a8:d3:0b:f8:64:23:70:a0:e2:50:83:8f:f2:76:f0:2e:db:f7: 0a:46:90:5e:5f:17:36:59:3c:fa:2b:0e:62:f8:6b:67:e7:97: 08:ea:32:72:0f:ad:95:5e:01:f2:74:88:95:35:2b:f1:87:8d: 3b:e1:4a:c3:3b:75:7b:de:3d:5a:26:95:ac:6b:be:83:c2:62: 1a:ee:46:3f:31:72:ce:19:50:95:86:ab:c0:b8:23:dc:73:9a: 5f:64:eb:a5:11:59:44:1f:6c:e1:92:70:3a:06:70:63:d9:53: 8f:7b:07:e4:4e:5e:36:01:e8:bf:5a:4b:2f:0f:09:26:95:53: cf:cb:ec:65:7b:ae:6a:02:26:e8:82:49:60:f0:5c:18:36:be: e2:3e:c0:eb:e1:36:38:51:37:3f:c8:dd:d4:fb:84:e8:1d:c6: d7:6d:1f:9e:9a:69:89:ca:71:a2:37:0a:8a:ed:4d:11:af:74: 55:df:51:68 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pxrqTYRFXfrBfT2eH7/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjE0ZmFiZmVmMjAzYThlZTA4Y2NiNDdkZDY0NzNmY2U3OTlhMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU3NeTZhvygMS9jSNErrXXQbvjHC UmfyJsrSr3J7v/mtF9QP1YTgUpX5aiHjUVTDjTC4Yrh2YI7Xxv+A8HFhE0oQCx5/ CTXNt2H7wHpJJdFR2xiXYYnolKxUQ0A43bGK9nCW23hDYlgYPi36Myf6UmhwBMU7 0PsJBJf/i4EWNMwJSjklHjBAAOUE6PEz4FFMBO8wj4Z1CfxkGd4efOsrfjmOuzc1 sJWuQorUvy4WiGM0J5W5Ha23q9H7sHIKcPQnEc0pig19lGYriNqWjBOkqIlsdq/U KYCvhjwZJ0d/oBYo00mqPQEto8b9cCKLmtmyzI/ass+kMszF9zv6N44s/wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKIU+r/vIDqO4IzLR91kc/znmaKPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3L2ViYTQ1 OS0wM2QzLTRjZDUtODYwNi0yNWM1ZjcxMjNlMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvZWJhNDU5 LTAzZDMtNGNkNS04NjA2LTI1YzVmNzEyM2UzNS8xL29oVDZ2LThnT283Z2pNdEgz V1J6X09lWm9vOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDWWigMA0EAgACMAcDBQAqABcIMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCj/jANBgkqhkiG9w0BAQsFAAOCAQEAfS7ZQcCIpRcF tNMmBFNVbhI+oIBCsxXMAHZrVG8XSsR7RaHAx/eXC/0HfdFn+Wq7SyjTku1VuMjC dzzMyjsnWmQurs68OO/1qNML+GQjcKDiUIOP8nbwLtv3CkaQXl8XNlk8+isOYvhr Z+eXCOoycg+tlV4B8nSIlTUr8YeNO+FKwzt1e949WiaVrGu+g8JiGu5GPzFyzhlQ lYarwLgj3HOaX2TrpRFZRB9s4ZJwOgZwY9lTj3sH5E5eNgHov1pLLw8JJpVTz8vs ZXuuagIm6IJJYPBcGDa+4j7A6+E2OFE3P8jd1PuE6B3G120fnpppicpxojcKiu1N Ea90Vd9RaA== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:35 2026 by rpki-client