This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer File: o6VWBFl7BrDqzoivsakP_5N9l-o.cer (raw, json) Hash identifier: DEjEASNVtXuH4Ili6nf8vdkbkvibBmi/LAIVP8u+wm0= Subject key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A34629EFB14FDA661253CD1A1F0828 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.132.88.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:46:29:ef:b1:4f:da:66:12:53:cd:1a:1f:08:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3a55604597b06b0eace88afb1a90fff937d97ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:2c:1e:92:d4:64:bc:5e:e3:23:c6:0a:af: ab:0e:d1:b5:c2:1f:8c:5f:81:fd:f6:69:68:ef:79: ce:05:7b:56:74:1c:41:54:85:6e:e1:0e:5f:09:4a: b3:90:6c:a7:ed:b8:6b:c1:69:89:2a:22:82:03:a3: b1:ca:39:da:3c:8e:46:ce:2b:63:27:21:50:5b:c9: 4b:32:47:47:d0:ad:ec:6f:98:e7:05:82:e7:27:02: 54:8e:81:0f:48:21:0b:f4:c2:29:6d:67:58:13:5a: a3:e7:07:d1:1f:ad:87:ef:a6:65:c8:b7:c0:ba:72: 97:03:2a:cb:5a:44:33:ae:de:40:3e:d8:94:65:ee: 3e:13:2b:ce:ae:b5:5c:12:8c:0d:95:08:63:3f:2b: 17:c4:8c:de:e8:84:fa:61:9c:2f:d7:15:3d:7e:58: c9:c8:34:83:f0:e3:7b:6d:4f:8b:17:24:fe:d0:fb: 62:f3:93:32:7c:48:ef:3a:76:5a:e2:2f:44:9a:b8: 25:ba:00:b5:0b:55:f5:a7:14:0c:02:e8:b9:4a:05: ed:05:84:ce:de:4a:45:53:09:80:42:f5:6f:fe:33: c1:a7:33:d7:7d:d2:86:71:e4:75:ba:9e:62:ca:d0: 42:30:5e:66:2e:40:ba:c7:0f:74:ef:50:ba:8c:28: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.88.0/22 Signature Algorithm: sha256WithRSAEncryption 85:26:84:96:5a:ab:5f:1a:24:92:03:13:8e:08:43:7b:6a:fa: 51:83:45:a7:a6:7c:62:24:3d:60:c6:60:ee:6f:8a:37:c7:81: 73:0a:2b:2e:5e:0a:d7:ce:84:58:1a:15:ee:9d:42:60:80:34: 68:0e:cf:85:98:58:3f:51:a6:39:fb:32:a8:ee:f8:93:5f:08: bb:ee:e5:9a:2a:f3:0f:58:3d:6a:96:a8:b0:47:b5:c2:43:14: 8b:0b:e8:36:17:6c:0f:2a:89:02:eb:77:42:7b:df:64:0b:f3: 43:59:65:82:a5:51:56:ff:4c:1a:cb:d3:22:f4:a9:c7:84:b7: b9:31:32:f5:4f:6f:fe:15:0d:e7:57:9c:af:ec:d2:43:27:cd: 35:48:82:10:1c:dd:96:ce:18:eb:cd:8a:a3:77:9c:03:79:b8: f8:5a:57:61:d3:0f:ac:78:21:9e:ec:4c:8f:24:5a:11:f7:5a: db:8d:c7:b1:f2:1b:27:02:04:a2:0f:b2:7e:ec:86:f2:33:e6: 32:14:43:a5:7d:7b:f7:9f:b9:d7:2e:a2:96:59:0b:20:d7:b7: 53:f8:ff:e1:6c:d4:ea:35:41:0b:f0:31:53:04:62:6d:39:6a: ac:d8:da:8d:03:d7:c3:d8:e3:6b:ed:23:84:bf:24:5f:34:ad: 89:24:e5:59 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o0Yp77FP2mYSU80aHwgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2E1NTYwNDU5N2IwNmIwZWFjZTg4YWZiMWE5MGZmZjkzN2Q5N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkIsHpLUZLxe4yPGCq+rDtG1wh+M X4H99mlo73nOBXtWdBxBVIVu4Q5fCUqzkGyn7bhrwWmJKiKCA6OxyjnaPI5Gzitj JyFQW8lLMkdH0K3sb5jnBYLnJwJUjoEPSCEL9MIpbWdYE1qj5wfRH62H76ZlyLfA unKXAyrLWkQzrt5APtiUZe4+EyvOrrVcEowNlQhjPysXxIze6IT6YZwv1xU9fljJ yDSD8ON7bU+LFyT+0Pti85MyfEjvOnZa4i9EmrglugC1C1X1pxQMAui5SgXtBYTO 3kpFUwmAQvVv/jPBpzPXfdKGceR1up5iytBCMF5mLkC6xw9071C6jCgH0wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKOlVgRZewaw6s6Ir7GpD/+TfZfqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2Y5ZmYx Yi04Mzc5LTQ5ZDEtYjgwYS1mYWM0YmI4M2VkMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvZjlmZjFi LTgzNzktNDlkMS1iODBhLWZhYzRiYjgzZWQyOC8xL282VldCRmw3QnJEcXpvaXZz YWtQXzVOOWwtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW4RYMA0GCSqGSIb3DQEBCwUAA4IBAQCFJoSW WqtfGiSSAxOOCEN7avpRg0WnpnxiJD1gxmDub4o3x4FzCisuXgrXzoRYGhXunUJg gDRoDs+FmFg/UaY5+zKo7viTXwi77uWaKvMPWD1qlqiwR7XCQxSLC+g2F2wPKokC 63dCe99kC/NDWWWCpVFW/0way9Mi9KnHhLe5MTL1T2/+FQ3nV5yv7NJDJ801SIIQ HN2WzhjrzYqjd5wDebj4Wldh0w+seCGe7EyPJFoR91rbjcex8hsnAgSiD7J+7Iby M+YyFEOlfXv3n7nXLqKWWQsg17dT+P/hbNTqNUEL8DFTBGJtOWqs2NqNA9fD2ONr 7SOEvyRfNK2JJOVZ -----END CERTIFICATE-----Generated at Thu Jan 8 13:46:43 2026 by rpki-client