This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer File: otCM3GpDDvDaiCmRcla2rY0KNvk.cer (raw, json) Hash identifier: OwFWfMa6pXiLlB7Br06GCnPR5c/mKHscri9ljdTZpi0= Subject key identifier: A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECBC544C7709E386AB6B6890947B60 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60652 IP: 195.137.230.0/24 IP: 2a12:f1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bc:54:4c:77:09:e3:86:ab:6b:68:90:94:7b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:98:19:f6:cf:ad:97:90:8a:59:40:c7:9e: b8:fa:27:de:8b:f3:ee:df:0d:db:22:3e:fd:eb:b5: 54:e4:a5:96:38:78:5a:df:da:98:1f:1f:c2:74:f0: c5:10:04:b8:c7:4b:3b:1b:ed:5d:d9:5a:f0:fa:f9: 6a:0f:bd:93:7b:fe:c7:d0:fd:a2:7c:cc:a0:6a:52: ca:8a:6e:51:1d:39:fc:13:7d:71:cb:df:91:71:67: 8b:93:af:26:7d:f4:66:70:a1:9f:11:af:91:67:17: 6b:23:45:6a:a9:fc:94:5d:9f:36:10:12:96:f6:0f: 01:3a:73:80:d3:80:62:36:b9:43:88:b9:39:b0:ba: 60:78:92:0b:86:73:ec:9c:92:f8:22:43:db:a1:9d: b5:88:cf:ba:00:49:83:e3:d9:b0:d2:73:6c:bb:7c: f5:85:f7:ff:2c:68:6b:57:77:fa:2a:6f:09:f0:2a: 34:6e:06:bb:a8:ef:da:62:81:5e:8f:93:b7:c2:de: 88:cf:58:9b:20:e0:3f:69:6c:16:e9:ef:cf:fa:f1: 2a:aa:60:0d:b9:79:c2:1f:1e:25:67:66:31:00:e9: 14:21:db:f8:96:49:86:42:ff:51:c4:af:55:c9:2f: 62:8f:2e:7b:da:c9:c4:6a:b7:39:27:42:9d:08:34: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.230.0/24 IPv6: 2a12:f1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60652 Signature Algorithm: sha256WithRSAEncryption 9f:bd:64:d6:22:4b:24:e3:4d:29:36:c3:08:41:14:cf:f7:62: fe:9b:fb:c5:6e:ad:4b:27:b2:44:84:09:85:c0:50:85:fd:25: 80:99:2b:53:6f:46:c5:79:c7:19:33:38:b0:dd:6d:98:27:ff: b4:d7:ba:8b:a5:f6:dc:21:ef:f4:0d:94:8c:1f:14:5a:49:1a: c4:d7:aa:b8:fc:3c:83:a7:6d:d8:59:54:df:8a:5d:be:c6:2d: 54:a9:c5:78:fa:8b:82:9f:91:1b:c2:81:19:96:75:c2:44:5a: dc:e9:2c:2b:fc:0b:07:b3:b3:5b:44:39:0c:80:e6:2f:b1:be: d7:9f:a0:3e:a4:9a:7e:f0:c3:87:4a:c2:1d:a5:43:cd:2e:44: 89:a9:35:2f:bb:12:00:e5:d8:1b:bf:fe:4b:e0:7e:10:ee:4b: 44:6a:88:04:b6:fb:2e:8e:df:03:fe:59:d5:7b:03:62:51:d5: 37:78:91:a1:da:e2:ba:8d:74:cb:ec:bb:33:c5:c6:e9:96:05: 8a:fe:39:3f:ea:8f:c3:b4:1a:97:eb:94:bb:18:88:81:65:2d: 5d:56:fc:87:4b:6d:9b:8e:b8:82:8f:94:74:39:ca:6a:36:3b: 23:4f:27:a1:1c:69:31:36:96:a8:d2:18:e0:0c:f0:c8:9c:c5: 21:58:a9:c0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57LxUTHcJ44ara2iQlHtgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmQwOGNkYzZhNDMwZWYwZGE4ODI5OTE3MjU2YjZhZDhkMGEzNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVWYGfbPrZeQillAx564+ifei/Pu 3w3bIj7967VU5KWWOHha39qYHx/CdPDFEAS4x0s7G+1d2Vrw+vlqD72Te/7H0P2i fMygalLKim5RHTn8E31xy9+RcWeLk68mffRmcKGfEa+RZxdrI0VqqfyUXZ82EBKW 9g8BOnOA04BiNrlDiLk5sLpgeJILhnPsnJL4IkPboZ21iM+6AEmD49mw0nNsu3z1 hff/LGhrV3f6Km8J8Co0bga7qO/aYoFej5O3wt6Iz1ibIOA/aWwW6e/P+vEqqmAN uXnCHx4lZ2YxAOkUIdv4lkmGQv9RxK9VyS9ijy572snEarc5J0KdCDT0IwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKLQjNxqQw7w2ogpkXJWtq2NCjb5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2JjMTlj Yy0wZjUzLTRkMTAtYWY5My1kYzAxYTE5YjI4NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvYmMxOWNj LTBmNTMtNGQxMC1hZjkzLWRjMDFhMTliMjg1Ni8xL290Q00zR3BERHZEYWlDbVJj bGEyclkwS052ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAw4nmMA0EAgACMAcDBQMqEvHAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDs7DANBgkqhkiG9w0BAQsFAAOCAQEAn71k1iJLJONN KTbDCEEUz/di/pv7xW6tSyeyRIQJhcBQhf0lgJkrU29GxXnHGTM4sN1tmCf/tNe6 i6X23CHv9A2UjB8UWkkaxNequPw8g6dt2FlU34pdvsYtVKnFePqLgp+RG8KBGZZ1 wkRa3OksK/wLB7OzW0Q5DIDmL7G+15+gPqSafvDDh0rCHaVDzS5Eiak1L7sSAOXY G7/+S+B+EO5LRGqIBLb7Lo7fA/5Z1XsDYlHVN3iRodriuo10y+y7M8XG6ZYFiv45 P+qPw7Qal+uUuxiIgWUtXVb8h0ttm464go+UdDnKajY7I08noRxpMTaWqNIY4Azw yJzFIVipwA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:40 2026 by rpki-client