This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer File: oLalsaFMhtTPtGxOhuzUBmgEzJA.cer (raw, json) Hash identifier: TjUSrsWutLJ08audL0DeUk35VILdNtGagEYys/I9wzk= Subject key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B311080F11EF5662D4559411E36C67964 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 10:45:23 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 39812 IP: 5.44.0.0/20 IP: 78.139.64.0/18 IP: 89.107.112.0/21 IP: 109.202.32.0/19 IP: 130.255.32.0/19 IP: 185.12.252.0/22 IP: 185.106.56.0/22 IP: 185.137.160.0/22 IP: 2a03:58c0::/32 IP: 2a0f:1d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:10:80:f1:1e:f5:66:2d:45:59:41:1e:36:c6:79:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 10:45:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:e0:c4:c6:83:2d:db:62:83:46:d6:ec:ed: 22:24:f5:2c:2a:7a:fc:de:4e:22:d2:78:18:18:3c: a5:69:19:e8:57:22:6c:fe:9f:ad:02:54:95:6b:97: 5a:51:cd:bb:59:18:45:8f:c6:f7:15:95:a6:84:7e: d9:3a:a4:9f:36:d8:a9:5d:95:cf:87:09:1c:1d:2f: e0:bc:4a:e3:17:29:07:b8:a2:91:b4:0d:9c:3f:bd: 01:b9:6a:26:9a:88:2f:b3:1e:9e:2d:24:3d:3c:3e: 5a:8e:59:6c:de:a3:e1:29:77:23:c2:5e:62:8b:3b: cc:7f:49:93:0a:76:2a:f2:80:33:b2:5f:75:dc:56: 9b:6f:d4:0b:78:aa:0a:21:5f:e1:73:e0:81:21:8a: 6b:8d:4c:b0:07:e9:1f:d8:38:91:2e:92:84:b3:04: 92:e3:42:75:67:f3:f5:92:9f:12:53:3e:dd:5b:44: 19:8b:1f:8c:ca:72:6f:db:90:16:2f:92:89:35:b5: 99:aa:95:b0:86:13:fd:dd:86:62:c4:50:7e:4e:93: a9:ec:60:fe:c5:21:96:16:a1:6a:9f:94:16:43:7e: 21:d8:a3:de:93:c9:ce:f1:de:60:d5:fb:24:5c:bd: 6c:ac:be:e5:0f:17:83:df:e0:63:9c:61:36:99:ed: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.0.0/20 78.139.64.0/18 89.107.112.0/21 109.202.32.0/19 130.255.32.0/19 185.12.252.0/22 185.106.56.0/22 185.137.160.0/22 IPv6: 2a03:58c0::/32 2a0f:1d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39812 Signature Algorithm: sha256WithRSAEncryption 34:44:e9:f2:65:f4:1c:40:0d:c8:46:93:d7:5c:91:47:dd:8f: 30:e8:0f:29:bd:eb:a8:b1:db:01:0f:d8:53:52:e2:59:d6:52: d7:dc:db:32:1c:70:68:8f:10:35:98:96:35:e4:19:e7:f6:66: 75:2a:97:b0:b5:05:7b:67:18:00:58:09:c7:49:0e:50:4e:ed: 21:e7:02:72:76:78:70:0f:1c:88:ad:2a:38:7f:b5:8e:ef:36: 25:11:0d:a1:88:91:17:cd:e2:45:48:41:ac:18:c0:ae:ef:01: a4:44:da:38:1d:24:25:50:92:53:85:33:13:d5:78:15:24:38: 8a:3d:36:d3:2e:bb:08:f8:1b:9f:2d:f4:bb:fd:da:7b:ac:37: 33:65:d9:1d:e6:1e:be:96:35:5e:2d:8c:3e:d8:ae:f8:e5:7c: 33:8e:d6:08:d1:3d:ae:b1:17:34:6d:e0:91:3d:fc:58:7b:89: 8e:26:e4:8e:4f:39:4e:91:af:c6:b1:66:08:d0:bc:66:d0:e4: c3:c3:db:81:36:08:cf:f2:bb:4b:1e:90:1f:80:00:dd:f1:e9: 97:29:23:b7:21:7a:96:9b:5f:ba:ea:11:66:fe:15:2e:d3:fa: f2:a9:c3:25:4b:c8:fc:d0:31:fd:b3:c0:3b:10:07:fb:a9:69: 45:a8:8e:0f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZsxEIDxHvVmLUVZQR42xnlkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTA0NTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGI2YTViMWExNGM4NmQ0Y2ZiNDZjNGU4NmVjZDQwNjY4MDRjYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcrgxMaDLdtig0bW7O0iJPUsKnr8 3k4i0ngYGDylaRnoVyJs/p+tAlSVa5daUc27WRhFj8b3FZWmhH7ZOqSfNtipXZXP hwkcHS/gvErjFykHuKKRtA2cP70BuWommogvsx6eLSQ9PD5ajlls3qPhKXcjwl5i izvMf0mTCnYq8oAzsl913Fabb9QLeKoKIV/hc+CBIYprjUywB+kf2DiRLpKEswSS 40J1Z/P1kp8SUz7dW0QZix+MynJv25AWL5KJNbWZqpWwhhP93YZixFB+TpOp7GD+ xSGWFqFqn5QWQ34h2KPek8nO8d5g1fskXL1srL7lDxeD3+BjnGE2me2cYwIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFKC2pbGhTIbUz7RsTobs1AZoBMyQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2UxZmI1 Mi05NzlkLTQ0MzYtYmU1MS04NTg0YmVmMGI3ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZTFmYjUy LTk3OWQtNDQzNi1iZTUxLTg1ODRiZWYwYjdkNS8xL29MYWxzYUZNaHRUUHRHeE9o dXpVQm1nRXpKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQEBSwAAwQGTotAAwQDWWtwAwQFbcogAwQFgv8g AwQCuQz8AwQCuWo4AwQCuYmgMBQEAgACMA4DBQAqA1jAAwUDKg8dADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAm4QwDQYJKoZIhvcNAQELBQADggEBADRE6fJl9BxA DchGk9dckUfdjzDoDym966ix2wEP2FNS4lnWUtfc2zIccGiPEDWYljXkGef2ZnUq l7C1BXtnGABYCcdJDlBO7SHnAnJ2eHAPHIitKjh/tY7vNiURDaGIkRfN4kVIQawY wK7vAaRE2jgdJCVQklOFMxPVeBUkOIo9NtMuuwj4G58t9Lv92nusNzNl2R3mHr6W NV4tjD7YrvjlfDOO1gjRPa6xFzRt4JE9/Fh7iY4m5I5POU6Rr8axZgjQvGbQ5MPD 24E2CM/yu0sekB+AAN3x6ZcpI7chepabX7rqEWb+FS7T+vKpwyVLyPzQMf2zwDsQ B/upaUWojg8= -----END CERTIFICATE-----Generated at Sat Dec 20 19:11:19 2025 by rpki-client