This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer File: olSp86JmUT3caTXYvgIuflIw6hA.cer (raw, json) Hash identifier: L8J1747L9plQYgZMPpFtN69uqn6006To4FKG0+0Hj5o= Subject key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759373A9DFDB708AFF1044AA3589ED6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8486 AS: 15440 AS: 42549 AS: 42979 AS: 47929 AS: 209989 AS: 213772 IP: 5.133.64.0/22 IP: 45.82.32.0/22 IP: 45.95.32.0/22 IP: 45.146.200.0/22 IP: 77.241.192.0/20 IP: 79.142.112.0/20 IP: 89.249.80.0/20 IP: 92.62.128.0/20 IP: 185.11.24.0/22 IP: 185.65.48.0/22 IP: 185.216.208.0/22 IP: 195.14.160.0/19 IP: 213.197.128.0/18 IP: 217.117.16.0/20 IP: 2001:1ab8::/30 IP: 2a03:1960::/32 IP: 2a0d:5000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:37:3a:9d:fd:b7:08:af:f1:04:4a:a3:58:9e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:29:2b:b5:99:a5:92:af:d6:7b:c2:56:73:57: 3e:72:94:02:e2:11:7b:0a:a6:85:c3:0a:fc:2a:e3: d5:ef:25:17:05:bf:2e:ac:7c:8c:e0:98:7e:5b:35: f8:0a:da:e6:43:8a:9e:9f:16:93:24:47:8c:12:2d: 2b:ce:4b:08:73:06:15:43:3c:ef:9b:bd:81:58:98: 22:e6:ce:f9:40:f2:54:8a:09:92:c3:4b:48:ff:6e: 2a:b0:da:de:75:8a:27:eb:63:ad:c7:74:8d:72:dd: f7:79:a0:26:e3:b0:4c:54:ac:39:67:5d:db:bf:c3: 9d:93:fc:09:23:f2:b7:56:c0:a2:2e:ec:aa:30:fb: 20:74:ed:dc:e5:9a:63:ef:26:3c:0e:8b:09:bc:f5: cf:f1:d5:95:fd:8e:ab:c0:f7:d3:36:ad:8c:47:d8: e9:f7:77:c7:2f:d4:12:82:f1:41:29:a5:b9:f4:a8: a7:c7:09:be:71:03:7c:a3:b2:25:39:2b:57:fb:6d: 82:23:1d:e5:fa:8d:98:0d:ee:57:28:bd:ba:f7:9c: e4:fa:78:c3:9a:40:ce:f1:10:58:07:d4:85:06:46: 3c:e1:ea:e3:ed:b6:4f:13:7f:e4:93:87:6b:18:f4: a8:5f:fd:4b:55:b6:24:a3:9f:33:83:7b:2d:d7:0a: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.64.0/22 45.82.32.0/22 45.95.32.0/22 45.146.200.0/22 77.241.192.0/20 79.142.112.0/20 89.249.80.0/20 92.62.128.0/20 185.11.24.0/22 185.65.48.0/22 185.216.208.0/22 195.14.160.0/19 213.197.128.0/18 217.117.16.0/20 IPv6: 2001:1ab8::/30 2a03:1960::/32 2a0d:5000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8486 15440 42549 42979 47929 209989 213772 Signature Algorithm: sha256WithRSAEncryption 23:0a:ff:78:13:83:b4:a7:00:28:a5:38:a8:dc:23:a3:d8:e3: 1d:3a:6a:e5:bb:41:67:5b:88:3a:7b:dd:86:77:96:65:e3:9c: d0:f6:c9:a4:f9:8a:de:0d:70:45:3e:3d:c9:f1:04:ee:59:d4: 46:69:ca:65:5b:e6:e8:ec:ca:12:16:00:f5:74:01:ac:38:18: f2:94:fb:e9:b9:17:1d:75:7e:7a:50:13:fc:94:fb:74:38:cb: da:27:a9:47:29:45:1c:96:64:ff:15:e7:6f:25:93:4c:27:06: 8a:c0:95:8d:3f:ff:61:d6:b2:bd:ed:db:3a:eb:1a:60:a7:b2: e9:ff:3f:fd:82:d0:4e:80:f3:f9:5d:b8:d1:ae:f1:fc:16:b0: a4:33:4e:00:bb:e9:1b:74:fb:ac:20:93:97:d8:a8:e9:0e:6b: 44:7f:9b:da:68:68:49:63:3a:95:37:f9:f5:32:c5:6f:d0:0b: 46:6b:e1:67:0d:98:a1:25:cc:8d:c6:5e:42:e4:46:1b:26:65: cc:31:d0:d9:dc:a0:8a:a4:89:c9:2a:14:c0:99:bb:9e:0a:d6: 60:b5:1f:19:6e:14:2d:62:5a:69:78:e9:d5:e0:c0:5d:f0:81: 07:58:72:d6:b9:8d:ce:8f:3c:86:da:8e:f7:91:d8:27:1c:31: e3:6f:df:e5 -----BEGIN CERTIFICATE----- MIIGHDCCBQSgAwIBAgISAZt3WTc6nf23CK/xBEqjWJ7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjU0YTlmM2EyNjY1MTNkZGM2OTM1ZDhiZTAyMmU3ZTUyMzBlYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CkrtZmlkq/We8JWc1c+cpQC4hF7 CqaFwwr8KuPV7yUXBb8urHyM4Jh+WzX4CtrmQ4qenxaTJEeMEi0rzksIcwYVQzzv m72BWJgi5s75QPJUigmSw0tI/24qsNredYon62Otx3SNct33eaAm47BMVKw5Z13b v8Odk/wJI/K3VsCiLuyqMPsgdO3c5Zpj7yY8DosJvPXP8dWV/Y6rwPfTNq2MR9jp 93fHL9QSgvFBKaW59Kinxwm+cQN8o7IlOStX+22CIx3l+o2YDe5XKL2695zk+njD mkDO8RBYB9SFBkY84erj7bZPE3/kk4drGPSoX/1LVbYko58zg3st1woWmwIDAQAB o4IDKDCCAyQwHQYDVR0OBBYEFKJUqfOiZlE93Gk12L4CLn5SMOoQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2I2MDM3 My04MThlLTQwYTktOTMxOS1hZGRmMGUxODQ5ZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvYjYwMzcz LTgxOGUtNDBhOS05MzE5LWFkZGYwZTE4NDllYi8xL29sU3A4NkptVVQzY2FUWFl2 Z0l1ZmxJdzZoQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGKBggrBgEF BQcBBwEB/wR7MHkwWgQCAAEwVAMEAgWFQAMEAi1SIAMEAi1fIAMEAi2SyAMEBE3x wAMEBE+OcAMEBFn5UAMEBFw+gAMEArkLGAMEArlBMAMEArnY0AMEBcMOoAMEBtXF gAMEBNl1EDAbBAIAAjAVAwUCIAEauAMFACoDGWADBQMqDVAAMDYGCCsGAQUFBwEI AQH/BCcwJaAjMCECAiEmAgI8UAIDAKY1AgMAp+MCAwC7OQIDAzRFAgMDQwwwDQYJ KoZIhvcNAQELBQADggEBACMK/3gTg7SnACilOKjcI6PY4x06auW7QWdbiDp73YZ3 lmXjnND2yaT5it4NcEU+PcnxBO5Z1EZpymVb5ujsyhIWAPV0Aaw4GPKU++m5Fx11 fnpQE/yU+3Q4y9onqUcpRRyWZP8V528lk0wnBorAlY0//2HWsr3t2zrrGmCnsun/ P/2C0E6A8/lduNGu8fwWsKQzTgC76Rt0+6wgk5fYqOkOa0R/m9poaEljOpU3+fUy xW/QC0Zr4WcNmKElzI3GXkLkRhsmZcwx0NncoIqkickqFMCZu54K1mC1HxluFC1i Wml46dXgwF3wgQdYcta5jc6PPIbajveR2CccMeNv3+U= -----END CERTIFICATE-----Generated at Wed Feb 4 02:17:41 2026 by rpki-client