This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer File: om1GISmD2nHzGuV-WcOeCbM5ygI.cer (raw, json) Hash identifier: cpB5PUIK6L1qvlrmhjY6fhkoSiQ8HPzmVEC/JDx0tXY= Subject key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E6102C88D2B290FDA89EA19339CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47511 IP: 91.206.82.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e6:10:2c:88:d2:b2:90:fd:a8:9e:a1:93:39:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a26d46212983da71f31ae57e59c39e09b339ca02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:e6:18:cb:b0:3b:48:59:37:a3:99:29:63: 28:b6:df:d2:6e:cb:b1:9d:24:44:e1:fd:b2:0b:f6: a8:5d:c9:81:28:d8:06:50:07:1c:0a:f1:57:4e:a5: eb:30:52:1b:b7:e3:b3:1d:98:17:a2:cd:3c:a9:bb: e3:88:d7:49:2e:32:9a:fe:61:ee:68:d6:78:8f:87: 9a:4e:c2:da:d7:95:25:d4:58:2c:ca:45:7d:d4:cd: a9:11:81:de:cb:26:72:d9:a6:47:47:fd:98:7a:83: 3b:7b:2c:a3:44:43:48:18:a0:37:a2:68:5e:21:81: 73:c5:85:f2:0c:8e:02:d1:04:3d:83:05:ee:18:8c: fe:4b:c7:98:e7:5e:88:0b:08:1d:b4:45:6f:20:64: e9:9d:96:89:34:42:6b:bf:f1:e5:4b:e1:03:0a:aa: 71:21:18:fb:a1:d8:e3:ec:f7:6f:5e:09:41:45:7d: 79:ed:37:c2:84:dc:19:94:c9:ec:38:3f:de:62:c2: ee:c3:f4:18:17:8f:4f:f0:54:5d:06:cf:0e:d1:ff: 86:66:45:cb:35:9a:e4:eb:8c:7b:22:5f:65:af:03: ae:e9:72:17:e1:33:84:d9:b2:e9:67:4c:0a:44:29: 6b:c9:0f:96:2f:51:9f:f9:4e:26:fe:5a:96:f7:d9: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.82.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47511 Signature Algorithm: sha256WithRSAEncryption 15:2e:ab:41:67:9e:60:ba:c7:01:67:a6:48:ff:89:f5:2c:b6: 52:42:a7:03:73:1f:c4:dd:cb:0b:78:1f:d9:16:99:af:30:5e: d1:9e:ed:b1:31:b6:28:0c:3c:94:08:06:4c:5d:d0:eb:43:ab: 1e:bd:32:dd:12:dc:89:11:5e:57:3d:38:6f:21:fc:f8:2b:4d: 0d:77:8e:e8:bd:52:da:48:82:59:dd:8c:6d:e4:e6:67:65:a5: d7:43:fe:55:3e:e0:12:23:8e:62:10:7a:b4:cc:ec:e9:e0:84: 95:d9:e6:97:00:94:99:e9:fe:9f:65:2a:80:9a:5d:e1:94:f8: 31:c5:42:73:ee:d4:cc:2d:39:90:94:d5:97:09:73:4b:25:b5: 53:fb:4d:b5:ea:b6:e6:3c:63:be:9f:76:32:68:03:33:8f:39: 79:01:61:4f:b7:cd:30:26:e9:f1:60:c3:a9:a4:cc:2b:f9:4c: 2d:e3:be:f3:ae:8d:5e:7b:1a:59:5a:ee:35:f0:60:88:8b:3a: dd:22:83:c9:35:39:e6:2c:35:3c:f4:08:6f:4f:d8:d4:75:88: 15:76:1e:fb:0f:f6:c0:24:e3:88:dd:f7:6f:90:5b:c8:12:67: ca:3a:e7:e7:f1:a7:7e:a1:9e:e8:98:5d:a6:78:c0:50:8c:cc: 86:af:93:c3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OOYQLIjSspD9qJ6hkznMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjZkNDYyMTI5ODNkYTcxZjMxYWU1N2U1OWMzOWUwOWIzMzljYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodbmGMuwO0hZN6OZKWMott/Sbsux nSRE4f2yC/aoXcmBKNgGUAccCvFXTqXrMFIbt+OzHZgXos08qbvjiNdJLjKa/mHu aNZ4j4eaTsLa15Ul1FgsykV91M2pEYHeyyZy2aZHR/2YeoM7eyyjRENIGKA3omhe IYFzxYXyDI4C0QQ9gwXuGIz+S8eY516ICwgdtEVvIGTpnZaJNEJrv/HlS+EDCqpx IRj7odjj7PdvXglBRX157TfChNwZlMnsOD/eYsLuw/QYF49P8FRdBs8O0f+GZkXL NZrk64x7Il9lrwOu6XIX4TOE2bLpZ0wKRClryQ+WL1Gf+U4m/lqW99mO8wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKJtRiEpg9px8xrlflnDngmzOcoCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2I1MWQw Zi0zZGY5LTQ5MWQtYWY5MC1iZjJjN2EzOTA4ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYjUxZDBm LTNkZjktNDkxZC1hZjkwLWJmMmM3YTM5MDhkYS8xL29tMUdJU21EMm5Iekd1Vi1X Y09lQ2JNNXlnSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW85SMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC5lzANBgkqhkiG9w0BAQsFAAOCAQEAFS6rQWeeYLrHAWemSP+J9Sy2UkKnA3Mf xN3LC3gf2RaZrzBe0Z7tsTG2KAw8lAgGTF3Q60OrHr0y3RLciRFeVz04byH8+CtN DXeO6L1S2kiCWd2MbeTmZ2Wl10P+VT7gEiOOYhB6tMzs6eCEldnmlwCUmen+n2Uq gJpd4ZT4McVCc+7UzC05kJTVlwlzSyW1U/tNteq25jxjvp92MmgDM485eQFhT7fN MCbp8WDDqaTMK/lMLeO+866NXnsaWVruNfBgiIs63SKDyTU55iw1PPQIb0/Y1HWI FXYe+w/2wCTjiN33b5BbyBJnyjrn5/GnfqGe6JhdpnjAUIzMhq+Tww== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:47 2026 by rpki-client