This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ohv-an3Hf0ADcofKevZeOEhfxuk.cer File: ohv-an3Hf0ADcofKevZeOEhfxuk.cer (raw, json) Hash identifier: vrRQZFw2SICM4pXRaGxGSIMCBsPfiOZcghrTPlwocZ8= Subject key identifier: A2:1B:FE:6A:7D:C7:7F:40:03:72:87:CA:7A:F6:5E:38:48:5F:C6:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910B5C7E051114CDEE284F49505258A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ohv-an3Hf0ADcofKevZeOEhfxuk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43785 IP: 91.198.149.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b5:c7:e0:51:11:4c:de:e2:84:f4:95:05:25:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a21bfe6a7dc77f40037287ca7af65e38485fc6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:f8:16:41:cd:7f:0b:92:7a:1f:f6:38:23: 0e:4e:33:6f:12:99:0c:94:bd:2b:97:65:34:0f:23: 5b:f0:33:9e:81:8d:f1:3d:00:76:b8:21:04:93:a5: 43:5b:3e:42:5a:e0:ee:bf:8c:b8:d3:59:a4:d4:2f: d7:b5:1b:6a:c8:52:42:4a:8b:74:5b:51:92:b2:98: 6f:9e:da:5b:6f:db:80:2b:0d:e9:9d:ce:78:13:89: e6:7a:59:b1:c9:3b:2d:f0:04:e6:40:ea:ef:48:ba: 2b:53:af:d8:2d:ac:c5:81:1d:ff:8f:35:0b:13:cc: bd:91:7a:ba:16:28:4b:c2:0f:be:87:be:7a:5d:d5: d9:23:e4:7c:b4:10:ad:07:e3:84:22:29:00:48:15: 8b:25:88:9f:99:d4:ea:fe:3b:5d:e6:b1:d8:1f:b3: bd:ea:df:0f:b2:87:8b:a7:c9:7f:01:55:c3:39:51: e5:ca:a8:ad:f8:c5:63:a2:55:0e:f8:13:92:35:2a: d9:de:2a:69:67:e5:0c:27:f0:ad:54:ad:7d:38:50: 1e:9b:2d:c3:ce:9c:96:b7:3e:f0:41:fb:d5:b9:ca: 78:b3:4e:b4:0d:1b:43:81:fc:cb:eb:88:80:2b:b3: 55:21:cb:05:fc:2a:d5:66:23:58:08:96:8b:0d:e4: 0f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1B:FE:6A:7D:C7:7F:40:03:72:87:CA:7A:F6:5E:38:48:5F:C6:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ohv-an3Hf0ADcofKevZeOEhfxuk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.149.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43785 Signature Algorithm: sha256WithRSAEncryption 06:e6:66:a0:7b:e3:08:e8:c5:10:db:3c:a3:be:9c:c6:73:c0: aa:ad:cf:d8:d5:67:6c:ef:84:89:07:34:c9:ea:b3:79:c5:aa: 52:d3:0e:14:61:c1:b3:9e:25:34:8f:92:2b:7d:74:7f:df:86: ae:24:67:35:a7:99:da:15:26:d4:19:25:12:25:34:0c:ba:c2: 42:88:28:1c:a5:34:19:55:35:e9:6a:5b:08:11:c7:cd:48:79: 54:e9:ae:bc:3e:69:f7:69:c0:15:b3:35:2d:c8:5b:21:07:92: 1d:24:e6:91:09:f1:9a:72:d5:08:6d:23:ae:d2:0e:12:80:e3: 6f:b3:cf:84:4a:cf:9d:a3:9e:7f:67:1d:ee:ab:82:b2:c5:69: bd:79:03:44:ec:ad:ec:93:67:e4:79:b4:9e:47:ba:54:88:b9: bc:6a:7b:d5:bc:d2:27:d3:21:06:d1:16:84:a1:25:7a:15:71: e3:77:5b:75:c8:ee:5a:3e:a8:f0:52:f1:10:41:3e:9a:0d:7a: 12:ed:8d:75:f0:04:df:be:86:39:8a:eb:1c:42:b5:e3:44:89: 4a:d9:4e:b3:50:79:93:23:04:bb:11:fa:c1:17:2b:a3:63:e4: 0f:92:3e:c2:b7:64:01:49:14:f4:5e:4d:81:51:59:f4:dd:09: 3a:75:06:9c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ELXH4FERTN7ihPSVBSWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjFiZmU2YTdkYzc3ZjQwMDM3Mjg3Y2E3YWY2NWUzODQ4NWZjNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5b4FkHNfwuSeh/2OCMOTjNvEpkM lL0rl2U0DyNb8DOegY3xPQB2uCEEk6VDWz5CWuDuv4y401mk1C/XtRtqyFJCSot0 W1GSsphvntpbb9uAKw3pnc54E4nmelmxyTst8ATmQOrvSLorU6/YLazFgR3/jzUL E8y9kXq6FihLwg++h756XdXZI+R8tBCtB+OEIikASBWLJYifmdTq/jtd5rHYH7O9 6t8PsoeLp8l/AVXDOVHlyqit+MVjolUO+BOSNSrZ3ippZ+UMJ/CtVK19OFAemy3D zpyWtz7wQfvVucp4s060DRtDgfzL64iAK7NVIcsF/CrVZiNYCJaLDeQPoQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKIb/mp9x39AA3KHynr2XjhIX8bpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2NmYjU0 ZC1hNTUzLTQzMjQtYjU0MS0wYjUzNTEyMGYzMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvY2ZiNTRk LWE1NTMtNDMyNC1iNTQxLTBiNTM1MTIwZjMyNy8xL29odi1hbjNIZjBBRGNvZktl dlplT0VoZnh1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8aVMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCrCTANBgkqhkiG9w0BAQsFAAOCAQEABuZmoHvjCOjFENs8o76cxnPAqq3P2NVn bO+EiQc0yeqzecWqUtMOFGHBs54lNI+SK310f9+GriRnNaeZ2hUm1BklEiU0DLrC QogoHKU0GVU16WpbCBHHzUh5VOmuvD5p92nAFbM1LchbIQeSHSTmkQnxmnLVCG0j rtIOEoDjb7PPhErPnaOef2cd7quCssVpvXkDROyt7JNn5Hm0nke6VIi5vGp71bzS J9MhBtEWhKElehVx43dbdcjuWj6o8FLxEEE+mg16Eu2NdfAE376GOYrrHEK140SJ StlOs1B5kyMEuxH6wRcro2PkD5I+wrdkAUkU9F5NgVFZ9N0JOnUGnA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:32 2026 by rpki-client