This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer (raw, json) Hash identifier: D0ELgoL3odtUGlvIFdakjzY/meFhhv5EyC2bIoLwO14= Subject key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7770B28354EB2EF9512D4E8E378DFE53 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 09:41:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 46.232.172.0/22 IP: 2a07:b740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:70:b2:83:54:eb:2e:f9:51:2d:4e:8e:37:8d:fe:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 09:41:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:67:5c:6f:1a:a8:28:ad:2a:ac:97:7b:aa: 4c:a0:65:b1:6f:f2:49:24:ec:7e:63:11:fe:30:4d: 95:fa:11:61:f8:36:9c:81:d7:0e:5a:5c:2c:d2:80: 72:a1:c9:9a:56:b5:65:3f:bf:e1:ad:80:f9:26:6c: 1f:ce:1a:90:67:88:51:fb:c0:14:b1:bf:13:6b:9f: af:bf:8c:94:38:45:ab:33:7c:52:95:94:1e:93:10: eb:2f:a2:17:77:27:f9:12:d1:c7:d0:93:fa:3f:01: d5:46:2b:1d:4c:60:c7:6c:1b:a6:17:56:46:34:ab: 8a:4f:fa:e2:c2:7a:0e:f2:2a:ca:d1:5d:05:36:18: 5c:88:b2:77:f7:a1:e2:b9:72:15:84:44:c4:db:3e: 55:a1:1a:b7:f9:2c:4b:3d:ba:7a:89:01:bc:6b:30: 36:0b:52:02:b9:f4:70:08:f7:9b:b8:0e:08:cf:64: b9:84:f3:1f:5a:90:9d:6b:19:6c:5f:c0:82:39:85: 47:6d:af:df:a9:a0:51:42:cf:69:26:19:ac:ea:36: 6a:28:bf:92:56:98:9c:7b:80:2e:d7:7e:a0:90:95: ef:92:76:fd:2b:d3:0c:f0:d7:e5:3d:73:f7:3b:68: bf:80:c0:63:1a:27:34:1c:ca:0c:10:cb:aa:96:55: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.172.0/22 IPv6: 2a07:b740::/29 Signature Algorithm: sha256WithRSAEncryption 2d:d8:f5:5a:95:9f:e1:7b:d2:5b:8c:40:27:fa:43:3c:db:a8: bc:ce:b5:50:27:5a:81:8f:83:90:e2:e4:c7:25:6a:b9:09:bd: a1:e5:6c:78:b7:f4:0e:42:da:56:53:28:ba:6a:17:b9:f5:b9: cd:55:1a:42:22:a9:d2:5c:b0:a9:6b:eb:c1:17:22:0a:72:24: d6:5b:75:80:fc:94:ad:d0:a2:58:fc:8c:66:fd:22:50:6d:78: 1d:d0:cc:4d:1d:e1:2f:07:01:6d:c1:6d:e9:4c:92:8b:8a:1b: 11:d7:d6:30:71:37:ac:d4:cf:77:be:91:41:eb:20:af:ff:1c: 09:9f:d3:1a:e7:48:ba:e9:b5:83:44:92:08:ec:f0:fb:5b:78: 95:1c:39:e0:3c:eb:c2:74:90:27:4e:d5:e8:48:6e:df:9b:ef: 58:cd:eb:6d:c0:34:05:b8:14:f6:86:57:f6:6a:2c:02:79:ee: 01:c2:7f:6d:8a:0b:6b:29:79:53:e8:86:7c:36:22:a0:70:e2: d4:d2:61:0c:cc:79:63:42:2c:5f:0b:34:45:36:0b:60:af:38: 9a:bd:f8:50:23:e4:ed:50:33:bc:36:48:be:7d:d5:bd:f9:91: fc:53:ae:be:af:7d:d3:57:6d:ea:ea:c8:0e:ec:ae:4d:ff:bb: 16:49:62:f9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZp3cLKDVOsu+VEtTo43jf5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMDk0MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjZkNTExY2UzYWY5MGM0ZDYwMWM3Y2NmODM2MDUyMzcxM2UyYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wtnXG8aqCitKqyXe6pMoGWxb/JJ JOx+YxH+ME2V+hFh+DacgdcOWlws0oByocmaVrVlP7/hrYD5JmwfzhqQZ4hR+8AU sb8Ta5+vv4yUOEWrM3xSlZQekxDrL6IXdyf5EtHH0JP6PwHVRisdTGDHbBumF1ZG NKuKT/riwnoO8irK0V0FNhhciLJ396HiuXIVhETE2z5VoRq3+SxLPbp6iQG8azA2 C1ICufRwCPebuA4Iz2S5hPMfWpCdaxlsX8CCOYVHba/fqaBRQs9pJhms6jZqKL+S Vpice4Au136gkJXvknb9K9MM8NflPXP3O2i/gMBjGic0HMoMEMuqllWvtQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAJtURzjr5DE1gHHzPg2BSNxPiyQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2IwYzQw Mi1lMDllLTRjNjktYWNjOS04NGRhNjIwNjZlOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYjBjNDAy LWUwOWUtNGM2OS1hY2M5LTg0ZGE2MjA2NmU4YS8xL0FtMVJIT092a01UV0FjZk0t RFlGSTNFLUxKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLuisMA0EAgACMAcDBQMqB7dAMA0GCSqGSIb3 DQEBCwUAA4IBAQAt2PValZ/he9JbjEAn+kM826i8zrVQJ1qBj4OQ4uTHJWq5Cb2h 5Wx4t/QOQtpWUyi6ahe59bnNVRpCIqnSXLCpa+vBFyIKciTWW3WA/JSt0KJY/Ixm /SJQbXgd0MxNHeEvBwFtwW3pTJKLihsR19YwcTes1M93vpFB6yCv/xwJn9Ma50i6 6bWDRJII7PD7W3iVHDngPOvCdJAnTtXoSG7fm+9YzettwDQFuBT2hlf2aiwCee4B wn9tigtrKXlT6IZ8NiKgcOLU0mEMzHljQixfCzRFNgtgrziavfhQI+TtUDO8Nki+ fdW9+ZH8U66+r33TV23q6sgO7K5N/7sWSWL5 -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:19 2025 by rpki-client