This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer File: oE3odQHH0wgsdmWfTevZQohDtMs.cer (raw, json) Hash identifier: vdh6wrQ3uphRkFRy/iLu9t6ySYGNXoQLTb/PyCh9Myo= Subject key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB584ACC87F15E0C2FD0307C53012B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41529 IP: 45.131.84.0/22 IP: 2a0e:5f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:58:4a:cc:87:f1:5e:0c:2f:d0:30:7c:53:01:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a04de87501c7d3082c76659f4debd9428843b4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:d7:81:6a:2f:68:0b:79:1f:e5:53:be:17: 37:15:7c:d4:77:3d:41:79:65:28:a2:1f:34:5b:5d: 56:50:6b:9c:4f:46:5e:c6:8c:d6:05:72:f2:bf:35: f5:a8:09:00:95:11:91:da:87:a2:12:a4:d6:51:3f: 5a:c4:df:fe:2e:33:1a:40:15:0b:5e:9c:2c:29:6d: a9:86:6c:fb:f1:3f:58:e2:b7:bb:3a:fc:b6:0e:05: 37:ff:e3:cf:a1:c8:a3:30:53:d1:cc:eb:7b:db:4d: d9:18:1f:74:e3:73:d0:c6:6b:8c:4f:67:26:87:fa: 52:60:d3:b1:c6:1d:d7:98:98:60:ab:70:b9:38:b8: 36:48:2a:a2:58:9b:9f:1c:a5:90:b2:62:4d:6a:e5: 5e:85:1e:0e:55:e7:20:a1:e9:01:5c:d7:63:be:50: b0:1d:ba:dc:51:48:14:06:dc:13:4a:4b:de:24:e0: 62:d1:1f:06:6a:5b:d5:97:51:9b:be:0a:fb:8c:fc: f7:df:94:99:8a:08:ad:70:5b:86:ec:61:28:b7:ad: e7:c8:54:d2:0b:51:43:c3:43:df:be:50:b4:64:a6: 4a:76:a5:4f:05:9e:15:f2:1f:0b:e4:9c:fe:7f:db: fd:74:c4:ff:7f:e8:e0:15:34:33:c3:00:a7:2f:ee: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.84.0/22 IPv6: 2a0e:5f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41529 Signature Algorithm: sha256WithRSAEncryption 21:05:b8:04:6b:f6:d8:41:e3:ec:6f:a3:31:e8:3e:fc:85:4b: cf:87:19:3a:cb:e8:05:37:84:07:12:de:57:dd:c0:0a:c8:10: ce:6b:96:8e:8f:cc:76:67:f9:aa:6d:1b:50:fd:f9:04:c9:fd: 35:8d:03:c6:a6:34:2a:ec:8e:96:de:6d:a2:40:f1:91:c5:a4: 2a:4e:d2:5c:11:c1:8e:78:13:28:2a:44:50:eb:af:73:7a:17: b5:81:77:c5:8d:bb:6b:59:f6:42:b3:9f:7c:cf:24:34:d9:10: 96:84:b8:91:49:a8:c6:d2:86:f0:50:65:64:c8:eb:ad:75:d2: 9b:2b:86:05:d9:a9:4c:9f:7c:78:4c:22:16:25:b5:de:c5:12: c9:79:78:c5:f1:30:0a:a1:e2:b2:50:50:70:de:e3:02:86:2b: 85:2b:2f:a6:84:a2:ad:08:5b:45:7b:e4:56:a2:78:a4:bb:21: ed:f3:07:65:86:d4:57:b4:99:33:5f:8b:a0:ac:2f:da:a9:49: 95:38:3c:cc:ff:3b:8e:7e:df:b2:89:46:7c:8a:53:28:db:a9: f4:1b:c6:12:36:55:94:2a:64:e0:e3:ef:1a:84:72:7d:e5:45: 6a:f9:07:8e:77:4f:94:d6:74:52:1b:09:72:e8:5a:16:dd:34: 20:50:eb:42 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt261hKzIfxXgwv0DB8UwErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDRkZTg3NTAxYzdkMzA4MmM3NjY1OWY0ZGViZDk0Mjg4NDNiNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1XXgWovaAt5H+VTvhc3FXzUdz1B eWUooh80W11WUGucT0ZexozWBXLyvzX1qAkAlRGR2oeiEqTWUT9axN/+LjMaQBUL XpwsKW2phmz78T9Y4re7Ovy2DgU3/+PPocijMFPRzOt7203ZGB9043PQxmuMT2cm h/pSYNOxxh3XmJhgq3C5OLg2SCqiWJufHKWQsmJNauVehR4OVecgoekBXNdjvlCw HbrcUUgUBtwTSkveJOBi0R8GalvVl1Gbvgr7jPz335SZigitcFuG7GEot63nyFTS C1FDw0PfvlC0ZKZKdqVPBZ4V8h8L5Jz+f9v9dMT/f+jgFTQzwwCnL+7DXwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKBN6HUBx9MILHZln03r2UKIQ7TLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzQ2NWM5 MC03MGZiLTQwMTUtYjk2OS03NDhmNzg3ODM4OGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNDY1Yzkw LTcwZmItNDAxNS1iOTY5LTc0OGY3ODc4Mzg4YS8xL29FM29kUUhIMHdnc2RtV2ZU ZXZaUW9oRHRNcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYNUMA0EAgACMAcDBQMqDl9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCiOTANBgkqhkiG9w0BAQsFAAOCAQEAIQW4BGv22EHj 7G+jMeg+/IVLz4cZOsvoBTeEBxLeV93ACsgQzmuWjo/Mdmf5qm0bUP35BMn9NY0D xqY0KuyOlt5tokDxkcWkKk7SXBHBjngTKCpEUOuvc3oXtYF3xY27a1n2QrOffM8k NNkQloS4kUmoxtKG8FBlZMjrrXXSmyuGBdmpTJ98eEwiFiW13sUSyXl4xfEwCqHi slBQcN7jAoYrhSsvpoSirQhbRXvkVqJ4pLsh7fMHZYbUV7SZM1+LoKwv2qlJlTg8 zP87jn7fsolGfIpTKNup9BvGEjZVlCpk4OPvGoRyfeVFavkHjndPlNZ0UhsJcuha Ft00IFDrQg== -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:15 2026 by rpki-client