This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer File: rAmEUBCEpHIgxczPVHi4l8KCLH8.cer (raw, json) Hash identifier: kjDiJfXe6KGHbEjjxjqFfF+gCrmTr1GVOQPLdtAbQIA= Subject key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA455D7ABE0FAEC91F93F0F807500F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.13.120.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:55:d7:ab:e0:fa:ec:91:f9:3f:0f:80:75:00:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac0984501084a47220c5cccf5478b897c2822c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:e1:cf:b0:87:d0:eb:81:ef:39:38:f8:8f: c4:be:fe:da:1e:30:9a:20:2c:75:8c:f6:0c:11:16: 0d:5d:fa:a8:e0:bd:dc:92:68:3c:2a:56:de:f0:b4: 6d:85:fc:40:c1:a9:1a:e7:ff:9a:28:b0:f5:e2:23: 13:43:5d:fa:c1:7f:69:6b:aa:8e:32:07:e3:be:c5: 0e:fc:7f:1f:54:f0:33:eb:70:0b:50:53:cf:fa:87: 2b:c4:22:a6:f5:ea:44:9c:87:b1:0d:d5:0f:18:a4: 32:fc:bf:d0:ec:09:2f:b6:58:58:b1:42:0a:9f:b5: 86:d7:b1:ee:e8:43:c4:79:f6:96:a4:ad:89:a3:90: 50:04:7a:b4:28:c0:17:7a:73:53:26:26:1f:f0:99: 30:c4:e3:63:28:ce:20:8b:5e:dc:83:13:0a:71:54: 19:6d:45:36:5c:c4:5f:65:6b:c0:22:f8:88:e6:2f: 5b:08:b1:85:d5:ea:a0:d0:67:16:aa:50:0a:e5:62: c2:65:76:a5:39:30:ce:7d:c4:20:41:2a:39:bf:d8: 89:51:45:a9:9c:18:8f:da:db:09:3e:76:b1:60:11: bd:e0:12:d9:15:40:6b:96:6a:56:f0:af:53:9b:de: dc:65:a1:c9:2b:9b:43:24:ae:06:14:65:8d:c7:78: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.120.0/22 Signature Algorithm: sha256WithRSAEncryption 66:63:90:a6:98:ae:46:3d:14:a0:3c:53:ec:ef:36:3a:d0:54: d0:fa:a9:d1:ce:6d:63:49:8a:c2:d3:ac:f2:58:98:e1:49:d4: 5e:e1:53:57:bf:f5:6c:62:79:8e:a2:d0:66:fd:45:1a:e1:55: 19:fc:7b:b8:ff:ea:17:4e:ce:2d:9b:62:b3:57:6c:ca:e5:1b: e8:32:85:be:27:f6:51:67:f1:3d:fa:b0:40:35:64:b8:cc:4b: 1d:ec:ed:f8:f6:d4:8e:ef:b6:43:90:b6:88:a6:d1:da:b5:37: 2a:f5:3f:ae:5b:60:78:42:0c:72:77:a4:c1:50:94:c9:9e:20: 92:a1:75:09:6a:c0:31:a3:3c:2c:8c:01:84:61:5f:da:df:b5: 0c:44:c3:65:15:d1:65:45:c6:89:1f:bb:8b:72:2e:2f:51:ca: 65:55:dd:60:59:ca:5a:e6:5e:00:c8:23:67:e5:48:e0:86:17: 5c:0f:67:42:1c:0e:a8:06:e3:50:cb:45:62:fd:ce:9b:a0:a8: bf:26:75:14:c6:0f:26:50:f4:11:dc:ae:17:8f:5e:3e:0f:d3: 9b:6e:20:f0:d6:f8:da:39:71:a0:18:2b:98:39:06:28:99:42: e4:bd:9b:fc:32:db:78:14:e0:12:b5:81:1e:38:d6:db:d3:f9: df:c4:bf:9c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pFXXq+D67JH5Pw+AdQDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzA5ODQ1MDEwODRhNDcyMjBjNWNjY2Y1NDc4Yjg5N2MyODIyYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIvhz7CH0OuB7zk4+I/Evv7aHjCa ICx1jPYMERYNXfqo4L3ckmg8Klbe8LRthfxAwaka5/+aKLD14iMTQ136wX9pa6qO MgfjvsUO/H8fVPAz63ALUFPP+ocrxCKm9epEnIexDdUPGKQy/L/Q7AkvtlhYsUIK n7WG17Hu6EPEefaWpK2Jo5BQBHq0KMAXenNTJiYf8JkwxONjKM4gi17cgxMKcVQZ bUU2XMRfZWvAIviI5i9bCLGF1eqg0GcWqlAK5WLCZXalOTDOfcQgQSo5v9iJUUWp nBiP2tsJPnaxYBG94BLZFUBrlmpW8K9Tm97cZaHJK5tDJK4GFGWNx3g5YwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKwJhFAQhKRyIMXMz1R4uJfCgix/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzI5M2Vj Mi1iMTQ0LTRiY2MtOGE0OC00YmM3MDM0ZjI4ZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvMjkzZWMy LWIxNDQtNGJjYy04YTQ4LTRiYzcwMzRmMjhkOC8xL3JBbUVVQkNFcEhJZ3hjelBW SGk0bDhLQ0xIOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLQ14MA0GCSqGSIb3DQEBCwUAA4IBAQBmY5Cm mK5GPRSgPFPs7zY60FTQ+qnRzm1jSYrC06zyWJjhSdRe4VNXv/VsYnmOotBm/UUa 4VUZ/Hu4/+oXTs4tm2KzV2zK5RvoMoW+J/ZRZ/E9+rBANWS4zEsd7O349tSO77ZD kLaIptHatTcq9T+uW2B4Qgxyd6TBUJTJniCSoXUJasAxozwsjAGEYV/a37UMRMNl FdFlRcaJH7uLci4vUcplVd1gWcpa5l4AyCNn5UjghhdcD2dCHA6oBuNQy0Vi/c6b oKi/JnUUxg8mUPQR3K4Xj14+D9ObbiDw1vjaOXGgGCuYOQYomULkvZv8Mtt4FOAS tYEeONbb0/nfxL+c -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:33 2026 by rpki-client