This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer (raw, json) Hash identifier: d6I7rkCt651P3D+88qil+GvL8lcdn1gWpWwVA08XNQY= Subject key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5794B395C2C822569696D26D8C14D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207285 IP: 185.117.96.0/24 IP: 2a10:640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:79:4b:39:5c:2c:82:25:69:69:6d:26:d8:c1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbe026ef26920909d931ea4dac9d9390486b4153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:09:f7:9f:90:6a:b2:4c:9a:19:d9:d1:ca: 5f:5f:5c:95:6e:36:42:7f:a3:4b:f7:87:b4:d1:ce: d4:e9:19:2f:40:98:4c:89:25:a3:56:20:33:4e:e1: ff:b9:f2:46:ea:cd:23:90:a2:14:ec:5a:97:7c:a3: fc:11:29:99:4a:1a:fa:5b:d1:aa:90:1f:92:ff:ab: 81:e4:b6:93:75:dd:d1:3c:39:5a:59:d0:be:3b:37: 1a:cb:c9:38:61:85:75:d4:5d:e2:f5:61:2b:3c:fe: 29:8a:b1:4d:ea:cb:2f:0d:42:9d:91:ff:53:d3:0e: d1:b9:f6:ae:0e:b7:ba:49:1c:c2:fa:8e:5e:88:34: e1:f7:a9:bc:85:06:e0:c3:49:db:fa:f7:da:04:79: 92:21:1c:16:68:05:90:cc:67:7c:89:a7:c7:75:d5: 0a:de:49:19:54:4e:75:ac:c5:ac:7f:43:13:98:2c: 47:01:32:4e:53:a1:d7:ed:48:44:58:02:71:21:5f: 20:dc:01:55:44:50:5b:9e:fb:cb:db:57:09:03:91: 3b:64:89:42:15:33:7e:8b:37:bf:51:ae:6b:d5:e7: 4b:f0:1c:01:63:58:59:c6:47:de:94:b6:1c:18:fc: 17:c9:7b:aa:1d:8c:33:86:d8:b0:cf:61:68:c6:8e: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.96.0/24 IPv6: 2a10:640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207285 Signature Algorithm: sha256WithRSAEncryption 18:12:af:d4:2e:05:6a:e9:fb:13:e8:53:ae:c8:be:87:ce:ce: 03:d9:d5:ed:54:ed:56:cd:f3:d2:11:3b:ed:ca:07:97:ee:a9: cb:a1:21:da:35:82:1f:79:de:1d:ec:af:e6:49:d2:a8:22:55: ab:f8:48:5b:36:1f:00:28:66:a3:54:09:fa:a3:81:36:70:c2: 26:14:7e:13:b2:62:2a:72:bd:b9:23:d6:4c:fd:4b:9c:f5:97: 29:c9:8b:ac:c0:6a:4d:e2:65:db:ba:af:32:3f:55:c9:db:07: 82:99:aa:ce:89:d4:93:2b:33:e2:63:fe:1b:21:ca:0d:63:48: 49:79:62:d3:bb:4a:26:d4:0a:23:7d:55:31:1f:8f:46:62:ba: 29:0f:bf:11:05:7d:e2:08:80:9f:e1:2d:9c:06:52:1c:62:42: 7b:58:58:cd:08:16:1e:fa:f6:0b:ca:fd:09:37:73:e0:c1:ea: e0:f5:ab:e0:32:d4:a5:62:e3:7d:a1:6b:f2:4e:d8:d6:bc:64: 1d:dd:07:77:85:31:b1:1a:cd:51:ce:24:f1:77:8b:27:ea:e8: f9:87:75:34:98:c5:b3:09:01:97:89:88:81:93:5e:80:2d:aa: 1b:76:41:33:f3:d4:fe:30:d0:0d:94:c3:00:b3:81:c7:ff:41: 6d:a6:b1:fb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pXlLOVwsgiVpaW0m2MFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmUwMjZlZjI2OTIwOTA5ZDkzMWVhNGRhYzlkOTM5MDQ4NmI0MTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/AJ95+QarJMmhnZ0cpfX1yVbjZC f6NL94e00c7U6RkvQJhMiSWjViAzTuH/ufJG6s0jkKIU7FqXfKP8ESmZShr6W9Gq kB+S/6uB5LaTdd3RPDlaWdC+Ozcay8k4YYV11F3i9WErPP4pirFN6ssvDUKdkf9T 0w7RufauDre6SRzC+o5eiDTh96m8hQbgw0nb+vfaBHmSIRwWaAWQzGd8iafHddUK 3kkZVE51rMWsf0MTmCxHATJOU6HX7UhEWAJxIV8g3AFVRFBbnvvL21cJA5E7ZIlC FTN+ize/Ua5r1edL8BwBY1hZxkfelLYcGPwXyXuqHYwzhtiwz2Foxo5v6wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLvgJu8mkgkJ2THqTaydk5BIa0FTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkL2I3M2Fk ZC1lYTBmLTRjMjItOTgwZS0wNTliYWIwMTVjYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvYjczYWRk LWVhMGYtNGMyMi05ODBlLTA1OWJhYjAxNWNjMy8xL3UtQW03eWFTQ1FuWk1lcE5y SjJUa0VoclFWTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuXVgMA0EAgACMAcDBQMqEAZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMptTANBgkqhkiG9w0BAQsFAAOCAQEAGBKv1C4Faun7 E+hTrsi+h87OA9nV7VTtVs3z0hE77coHl+6py6Eh2jWCH3neHeyv5knSqCJVq/hI WzYfAChmo1QJ+qOBNnDCJhR+E7JiKnK9uSPWTP1LnPWXKcmLrMBqTeJl27qvMj9V ydsHgpmqzonUkysz4mP+GyHKDWNISXli07tKJtQKI31VMR+PRmK6KQ+/EQV94giA n+EtnAZSHGJCe1hYzQgWHvr2C8r9CTdz4MHq4PWr4DLUpWLjfaFr8k7Y1rxkHd0H d4UxsRrNUc4k8XeLJ+ro+Yd1NJjFswkBl4mIgZNegC2qG3ZBM/PU/jDQDZTDALOB x/9Bbaax+w== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:47 2026 by rpki-client