This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer (raw, json) Hash identifier: fsJ8X782L+HJUIqjsLBqHNC/sFUDI655GlUhuMpCGLU= Subject key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6FBC2B947133D918A056A9DF698DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.232.172.0/22 IP: 2a07:b740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fb:c2:b9:47:13:3d:91:8a:05:6a:9d:f6:98:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:67:5c:6f:1a:a8:28:ad:2a:ac:97:7b:aa: 4c:a0:65:b1:6f:f2:49:24:ec:7e:63:11:fe:30:4d: 95:fa:11:61:f8:36:9c:81:d7:0e:5a:5c:2c:d2:80: 72:a1:c9:9a:56:b5:65:3f:bf:e1:ad:80:f9:26:6c: 1f:ce:1a:90:67:88:51:fb:c0:14:b1:bf:13:6b:9f: af:bf:8c:94:38:45:ab:33:7c:52:95:94:1e:93:10: eb:2f:a2:17:77:27:f9:12:d1:c7:d0:93:fa:3f:01: d5:46:2b:1d:4c:60:c7:6c:1b:a6:17:56:46:34:ab: 8a:4f:fa:e2:c2:7a:0e:f2:2a:ca:d1:5d:05:36:18: 5c:88:b2:77:f7:a1:e2:b9:72:15:84:44:c4:db:3e: 55:a1:1a:b7:f9:2c:4b:3d:ba:7a:89:01:bc:6b:30: 36:0b:52:02:b9:f4:70:08:f7:9b:b8:0e:08:cf:64: b9:84:f3:1f:5a:90:9d:6b:19:6c:5f:c0:82:39:85: 47:6d:af:df:a9:a0:51:42:cf:69:26:19:ac:ea:36: 6a:28:bf:92:56:98:9c:7b:80:2e:d7:7e:a0:90:95: ef:92:76:fd:2b:d3:0c:f0:d7:e5:3d:73:f7:3b:68: bf:80:c0:63:1a:27:34:1c:ca:0c:10:cb:aa:96:55: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.172.0/22 IPv6: 2a07:b740::/29 Signature Algorithm: sha256WithRSAEncryption 65:26:81:1a:90:c9:31:7f:8d:bf:4a:9c:d4:a9:46:f2:73:34: d6:b4:cd:19:76:96:c6:ce:3b:dd:a3:4b:57:48:fd:70:e1:c5: 8b:8b:78:fa:4e:22:71:93:44:99:43:a1:95:a4:bb:c5:21:47: 48:86:c1:6a:67:48:00:bf:c7:0a:b1:b8:51:fd:8b:d1:e6:78: 85:7a:b6:79:3b:3c:c4:72:e7:4e:41:88:13:40:88:c4:32:72: 7a:7e:a6:fc:19:35:b5:e3:7f:25:44:32:31:d7:7f:62:be:6b: a3:cb:8f:a0:e6:5a:45:5e:6f:d7:cb:bd:a9:14:b8:ba:1b:3c: 6b:82:07:90:e9:43:94:c5:66:89:4e:ce:f3:37:33:29:69:c2: c8:ac:40:39:ca:71:10:39:c9:6c:0a:92:68:ce:cf:ff:90:5a: 27:d7:2e:27:fe:8e:58:3d:d5:d6:b2:27:ac:76:0b:e6:af:dc: 4b:19:aa:57:77:36:e5:8c:8b:7b:34:1c:f7:b3:3e:ba:6d:75: 4f:a9:fa:61:68:66:5b:8d:31:fa:38:ca:0f:aa:d9:fd:31:33: 1f:e4:e9:e1:24:03:9f:51:81:63:f6:ff:e3:ed:89:8d:e7:0a: c4:02:d5:c5:b3:14:ac:b3:ec:93:b7:05:fd:7c:5a:4f:a0:46: 41:f2:d2:87 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pvvCuUcTPZGKBWqd9pjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjZkNTExY2UzYWY5MGM0ZDYwMWM3Y2NmODM2MDUyMzcxM2UyYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wtnXG8aqCitKqyXe6pMoGWxb/JJ JOx+YxH+ME2V+hFh+DacgdcOWlws0oByocmaVrVlP7/hrYD5JmwfzhqQZ4hR+8AU sb8Ta5+vv4yUOEWrM3xSlZQekxDrL6IXdyf5EtHH0JP6PwHVRisdTGDHbBumF1ZG NKuKT/riwnoO8irK0V0FNhhciLJ396HiuXIVhETE2z5VoRq3+SxLPbp6iQG8azA2 C1ICufRwCPebuA4Iz2S5hPMfWpCdaxlsX8CCOYVHba/fqaBRQs9pJhms6jZqKL+S Vpice4Au136gkJXvknb9K9MM8NflPXP3O2i/gMBjGic0HMoMEMuqllWvtQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAJtURzjr5DE1gHHzPg2BSNxPiyQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2IwYzQw Mi1lMDllLTRjNjktYWNjOS04NGRhNjIwNjZlOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYjBjNDAy LWUwOWUtNGM2OS1hY2M5LTg0ZGE2MjA2NmU4YS8xL0FtMVJIT092a01UV0FjZk0t RFlGSTNFLUxKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLuisMA0EAgACMAcDBQMqB7dAMA0GCSqGSIb3 DQEBCwUAA4IBAQBlJoEakMkxf42/SpzUqUbyczTWtM0ZdpbGzjvdo0tXSP1w4cWL i3j6TiJxk0SZQ6GVpLvFIUdIhsFqZ0gAv8cKsbhR/YvR5niFerZ5OzzEcudOQYgT QIjEMnJ6fqb8GTW1438lRDIx139ivmujy4+g5lpFXm/Xy72pFLi6GzxrggeQ6UOU xWaJTs7zNzMpacLIrEA5ynEQOclsCpJozs//kFon1y4n/o5YPdXWsiesdgvmr9xL GapXdzbljIt7NBz3sz66bXVPqfphaGZbjTH6OMoPqtn9MTMf5OnhJAOfUYFj9v/j 7YmN5wrEAtXFsxSss+yTtwX9fFpPoEZB8tKH -----END CERTIFICATE-----Generated at Mon Jan 26 01:28:19 2026 by rpki-client