This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer (raw, json) Hash identifier: WpIu+p4HEi3knrR1G0hx76oomC0Bdj/2xvzhYO1hYWc= Subject key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4276B0A51CACA783BCEA3D7914637 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51647 IP: 46.17.24.0/21 IP: 193.176.253.0/24 IP: 194.13.133.0/24 IP: 194.104.80.0 -- 194.104.84.255 IP: 2a04:9fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:27:6b:0a:51:ca:ca:78:3b:ce:a3:d7:91:46:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:da:f4:ec:08:69:f6:96:c8:39:fd:35:0d: 6a:61:b1:7f:cc:52:30:d4:f0:83:0c:7a:b7:5a:d0: 88:ed:eb:b9:35:ad:c7:5d:93:b0:e8:af:fb:7c:12: 72:46:a2:af:dc:86:18:7d:18:59:46:7d:bf:8d:7a: 72:41:04:4d:96:bc:a2:cc:68:20:3f:6a:98:1c:97: bb:90:c4:44:b5:70:9d:1c:69:c6:fe:2a:55:68:e1: 90:94:8d:9d:24:5d:f9:46:cd:f3:ed:2f:ee:c9:9c: 7d:6d:b7:86:7b:05:bd:d6:50:2c:07:60:2c:2a:ef: a7:04:47:3c:a9:30:4a:29:7a:c8:b6:34:c6:d3:eb: bc:94:ba:a2:88:e8:60:2f:45:cf:47:7c:e9:af:e2: 1f:de:0c:3f:20:c4:62:e5:1f:25:58:6c:8b:94:df: c8:45:32:04:e7:5f:c2:28:15:d4:5f:6a:53:b4:0b: ec:94:aa:c3:d0:de:cb:87:9d:ce:df:e4:a2:e2:5e: 0d:f7:69:aa:7a:4b:92:66:f1:68:b7:09:35:10:67: ce:5a:80:c5:3a:19:2c:07:5e:a4:91:fa:a0:b7:bb: ea:3d:9e:ad:a5:77:0d:02:59:b3:18:62:79:df:70: 17:fc:61:fa:d7:51:28:fe:c5:30:be:21:bb:6d:99: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.24.0/21 193.176.253.0/24 194.13.133.0/24 194.104.80.0-194.104.84.255 IPv6: 2a04:9fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51647 Signature Algorithm: sha256WithRSAEncryption 14:8e:fa:c4:3c:a1:6f:f1:56:89:0e:c7:0d:a5:96:54:19:b1: e4:d1:bd:46:cd:6f:6b:77:5f:f3:7c:f0:e5:ba:ed:24:15:31: 00:b2:c8:13:24:12:28:0e:64:f5:a3:49:d9:ce:cf:9b:6c:4a: e7:68:44:05:67:92:91:95:3d:21:8d:d7:d4:e2:14:ee:31:72: c3:00:4d:fa:0f:a5:c3:b2:7a:8a:d1:6b:f3:0e:62:78:0d:a3: a7:c1:7d:97:d0:10:7d:41:a5:2d:6c:b4:fe:5c:35:87:40:09: 14:f8:41:8b:3b:04:2b:f6:c9:d7:40:15:4d:75:53:e6:00:a8: 3f:15:ef:f4:8d:09:43:74:c7:0d:bb:4e:a6:e3:1b:fd:55:00: fa:0f:0d:af:5e:fa:05:e1:3e:e9:ae:3c:21:c1:5f:89:a2:93: ce:eb:1d:e8:d3:62:c9:a9:50:94:6e:be:c3:31:10:e7:22:af: f4:ff:93:d8:41:3e:05:e4:d8:f3:d8:af:93:49:4b:b5:1c:67: ea:04:b9:53:ce:9e:e6:17:1f:9f:42:75:36:18:8b:a5:55:39: ef:cd:93:4f:26:cc:2f:f9:12:d4:26:7f:34:59:bb:96:ef:97: 95:50:cf:65:1f:65:44:b7:a0:93:2c:57:42:5a:63:84:d0:2c: 79:88:b5:23 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt7pCdrClHKyng7zqPXkUY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzAzMGFmOGM3NTM4YjljNWFmODUyZjFjNDJhMTc1YWFmNDZmN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJXa9OwIafaWyDn9NQ1qYbF/zFIw 1PCDDHq3WtCI7eu5Na3HXZOw6K/7fBJyRqKv3IYYfRhZRn2/jXpyQQRNlryizGgg P2qYHJe7kMREtXCdHGnG/ipVaOGQlI2dJF35Rs3z7S/uyZx9bbeGewW91lAsB2As Ku+nBEc8qTBKKXrItjTG0+u8lLqiiOhgL0XPR3zpr+If3gw/IMRi5R8lWGyLlN/I RTIE51/CKBXUX2pTtAvslKrD0N7Lh53O3+Si4l4N92mqekuSZvFotwk1EGfOWoDF OhksB16kkfqgt7vqPZ6tpXcNAlmzGGJ533AX/GH611Eo/sUwviG7bZn/ZQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFNwDCvjHU4ucWvhS8cQqF1qvRvfgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzhmNWU3 NS0xMzM0LTRmYjAtOWY2YS1iZGRjMThjN2EzZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvOGY1ZTc1 LTEzMzQtNGZiMC05ZjZhLWJkZGMxOGM3YTNmMy8xLzNBTUstTWRUaTV4YS1GTHh4 Q29YV3E5RzktQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQDLhEYAwQAwbD9AwQAwg2FMAwDBATCaFADBADC aFQwDQQCAAIwBwMFAyoEn8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMm/MA0G CSqGSIb3DQEBCwUAA4IBAQAUjvrEPKFv8VaJDscNpZZUGbHk0b1GzW9rd1/zfPDl uu0kFTEAssgTJBIoDmT1o0nZzs+bbErnaEQFZ5KRlT0hjdfU4hTuMXLDAE36D6XD snqK0WvzDmJ4DaOnwX2X0BB9QaUtbLT+XDWHQAkU+EGLOwQr9snXQBVNdVPmAKg/ Fe/0jQlDdMcNu06m4xv9VQD6Dw2vXvoF4T7prjwhwV+JopPO6x3o02LJqVCUbr7D MRDnIq/0/5PYQT4F5Njz2K+TSUu1HGfqBLlTzp7mFx+fQnU2GIulVTnvzZNPJswv +RLUJn80WbuW75eVUM9lH2VEt6CTLFdCWmOE0Cx5iLUj -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:28 2026 by rpki-client