This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer File: x2omXKitcnOooTChdjKD0v8bTdo.cer (raw, json) Hash identifier: cVdPL476cUr1vE+KL1GOHdKpr/3paBRRZbVeu92JHmo= Subject key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAFF2BC7617127381F12A0F5EAEFA1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208016 IP: 45.85.48.0/22 IP: 2a0e:b680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ff:2b:c7:61:71:27:38:1f:12:a0:f5:ea:ef:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:e7:3c:ff:33:b5:94:a8:a6:1c:2f:bd:b0: 02:54:2e:f0:8c:35:4d:38:69:62:bc:7c:13:2e:a0: b6:32:04:9d:66:7d:e4:d3:69:c0:04:cb:e8:3c:4a: 77:be:de:2f:e9:10:c6:82:bc:6e:0d:55:d2:69:2a: 8b:0c:ff:7a:68:f5:61:bc:15:e6:62:d3:df:ae:80: 74:7d:2b:1a:71:3b:04:1a:82:2f:2f:da:4c:0f:09: 1c:ec:c5:40:c0:0b:ee:01:57:96:d3:19:db:0d:6f: 38:6b:a6:dc:0b:54:2c:8a:53:11:d7:d1:ec:b2:f2: 62:14:c4:38:12:35:c4:b6:f0:45:57:3b:15:cf:f3: 2e:bc:af:fe:9b:13:a1:a0:45:d4:70:3b:9e:61:d3: 11:d6:8e:69:e4:a7:85:52:11:54:18:b1:8d:4e:79: a7:c5:99:6a:cf:cc:28:7c:d5:17:0b:d1:07:65:08: 6c:64:39:1e:34:66:df:02:61:21:b3:88:2f:12:df: 28:dc:df:16:f8:ec:f9:d7:4a:83:36:b1:db:0e:2a: 0f:73:9a:68:3c:1d:04:5a:dc:cb:fc:9a:b9:28:11: 42:30:d0:7d:0f:db:f6:c0:8f:15:39:9d:db:21:5a: c6:bd:a2:f7:75:0d:c1:6a:fa:05:3c:33:6b:07:e0: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.48.0/22 IPv6: 2a0e:b680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208016 Signature Algorithm: sha256WithRSAEncryption 27:2e:29:29:b4:e9:94:95:29:4f:f3:56:ff:db:3b:65:bd:81: ed:e9:19:2a:15:7c:ea:6f:98:1c:df:b3:e0:e0:4c:3c:de:06: 93:ef:bc:ce:3b:37:bf:a6:03:5f:6c:b5:af:aa:21:12:2e:5f: 07:69:7b:f4:af:1c:e1:f6:86:d8:1f:9a:50:cd:10:b5:49:7e: 24:87:e5:6c:7b:f0:f7:77:a9:35:03:8b:cd:a8:10:a6:8a:61: 5f:70:98:92:10:e1:d0:62:14:62:a7:1b:3c:06:33:79:6a:8d: db:e5:c7:67:00:74:85:db:b9:dd:31:31:de:67:b5:03:87:5a: 66:c3:c1:38:e3:b9:a7:e9:88:b6:37:a9:2b:fa:84:26:7d:2b: 7c:bb:65:04:fe:28:36:0f:2e:1a:e4:36:34:8e:de:6e:fa:5d: 5a:a9:5d:0e:df:ed:8a:f4:de:30:bb:1c:54:99:59:71:7e:64: 57:2f:91:76:61:bb:38:ce:02:64:a4:ed:41:39:c8:02:dd:63: 00:80:df:5a:27:c3:43:9f:75:88:f0:97:e0:b8:0e:78:c2:be: cc:8c:50:97:91:65:88:49:95:23:1a:95:71:3b:11:33:a5:35: ee:99:4d:89:f4:11:f0:cd:07:c4:52:00:66:2e:98:67:4d:d3: 22:72:9c:4d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yv8rx2FxJzgfEqD16u+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzZhMjY1Y2E4YWQ3MjczYThhMTMwYTE3NjMyODNkMmZmMWI0ZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozXnPP8ztZSophwvvbACVC7wjDVN OGlivHwTLqC2MgSdZn3k02nABMvoPEp3vt4v6RDGgrxuDVXSaSqLDP96aPVhvBXm YtPfroB0fSsacTsEGoIvL9pMDwkc7MVAwAvuAVeW0xnbDW84a6bcC1QsilMR19Hs svJiFMQ4EjXEtvBFVzsVz/MuvK/+mxOhoEXUcDueYdMR1o5p5KeFUhFUGLGNTnmn xZlqz8wofNUXC9EHZQhsZDkeNGbfAmEhs4gvEt8o3N8W+Oz510qDNrHbDioPc5po PB0EWtzL/Jq5KBFCMNB9D9v2wI8VOZ3bIVrGvaL3dQ3BavoFPDNrB+Bd8wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMdqJlyorXJzqKEwoXYyg9L/G03aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzAyYzI1 NC0zNmJmLTRjOGMtOThkOS03ZTk4MzdhOTIyOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMDJjMjU0 LTM2YmYtNGM4Yy05OGQ5LTdlOTgzN2E5MjI4Yy8xL3gyb21YS2l0Y25Pb29UQ2hk aktEMHY4YlRkby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVUwMA0EAgACMAcDBQMqDraAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMskDANBgkqhkiG9w0BAQsFAAOCAQEAJy4pKbTplJUp T/NW/9s7Zb2B7ekZKhV86m+YHN+z4OBMPN4Gk++8zjs3v6YDX2y1r6ohEi5fB2l7 9K8c4faG2B+aUM0QtUl+JIflbHvw93epNQOLzagQpophX3CYkhDh0GIUYqcbPAYz eWqN2+XHZwB0hdu53TEx3me1A4daZsPBOOO5p+mItjepK/qEJn0rfLtlBP4oNg8u GuQ2NI7ebvpdWqldDt/tivTeMLscVJlZcX5kVy+RdmG7OM4CZKTtQTnIAt1jAIDf WifDQ591iPCX4LgOeMK+zIxQl5FliEmVIxqVcTsRM6U17plNifQR8M0HxFIAZi6Y Z03TInKcTQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:10:47 2026 by rpki-client