This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer File: aMDy0Hdvfh00kHWIHDXp04dGNAU.cer (raw, json) Hash identifier: BDGSHzaVlXvF2Kyis+CGiXqKRQgDn7+t3igey1pRA1M= Subject key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA527B149079FDBD066D189523BD6B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.0.234.0/24 IP: 2a13:9600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:27:b1:49:07:9f:db:d0:66:d1:89:52:3b:d6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68c0f2d0776f7e1d349075881c35e9d387463405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:ca:7c:23:e7:62:89:66:ca:2f:a1:f5:2d: 81:6b:db:14:11:f2:22:53:64:0c:65:47:d1:8b:35: 05:2b:5b:cc:fa:4d:1a:93:ec:92:af:4e:7b:95:d4: ef:3c:80:96:78:44:a8:ac:91:73:b4:e3:d6:68:7b: 4e:f9:25:f6:2e:bf:e4:3e:5f:a4:a7:8a:1b:46:44: 1a:c7:55:12:fa:f3:ee:cd:b3:f5:c6:1f:8c:ec:7a: 95:87:ce:53:ee:0d:be:62:6c:e2:a7:f6:df:23:90: 91:f9:00:bb:dc:78:49:a6:21:ed:45:1d:b8:c7:5b: ed:1c:d3:49:53:d9:27:4d:9f:33:14:76:29:81:ac: 18:82:50:f2:75:33:72:ed:46:33:aa:f7:81:93:d0: 4b:2d:85:a8:9b:42:0b:b7:d3:6c:eb:5e:be:e0:1f: c8:d8:36:46:8c:9e:89:ca:4e:38:78:c4:e2:54:fa: 3f:d6:b4:e1:4c:71:3c:53:97:ce:70:eb:6a:97:59: 22:63:f2:bb:93:50:4a:05:12:e8:3a:95:03:fb:83: 5e:e5:5c:42:ed:34:28:78:aa:4a:ef:95:31:58:d2: dc:ff:16:ae:2b:bb:68:d5:7a:42:ba:b1:94:a9:e9: f5:35:07:82:6f:ce:12:d7:40:75:ee:82:8b:cf:63: c2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.234.0/24 IPv6: 2a13:9600::/29 Signature Algorithm: sha256WithRSAEncryption a7:b2:1b:47:b1:0b:65:89:26:a2:6a:6a:c0:f7:d6:28:06:5d: 7c:ab:2b:09:9e:89:06:4f:d8:aa:29:56:28:44:fa:f3:07:02: d7:3b:fb:2f:f5:39:d5:24:c4:4f:b9:9d:c3:93:a6:9a:5a:c9: d5:a9:6e:3f:9b:a8:2c:a6:b3:03:cb:a4:59:02:7f:78:40:5e: 93:f7:c4:5d:4c:6e:d5:7e:92:51:90:c7:03:91:86:e1:71:88: 0a:03:fb:68:f5:bd:28:d6:14:03:ca:29:ce:6e:f2:f7:88:42: 91:e6:d4:36:6d:70:0a:a1:51:47:6c:14:58:37:13:bf:78:da: 5d:15:42:40:b1:4a:38:e0:9d:82:c8:3a:28:1d:7e:de:3c:bd: a0:0f:34:c7:93:b2:27:05:d0:cc:be:1c:8c:88:c2:19:61:fb: a0:0f:7b:7c:51:48:ef:ee:1d:60:1a:54:8b:a5:91:48:72:92: ce:a1:3e:64:2d:1c:74:32:4e:ac:78:f1:f4:79:0b:a7:32:67: 61:d7:13:71:18:1a:a4:f9:f4:4b:7c:46:38:af:3a:2e:73:73: d9:0b:90:2a:13:8f:de:d2:24:a0:05:8e:2d:8b:7e:88:27:19: f0:05:63:01:5b:ae:e9:b6:b0:95:70:26:20:a3:ce:2c:b8:bf: 0f:4b:80:ad -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pSexSQef29Bm0YlSO9a3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGMwZjJkMDc3NmY3ZTFkMzQ5MDc1ODgxYzM1ZTlkMzg3NDYzNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5HKfCPnYolmyi+h9S2Ba9sUEfIi U2QMZUfRizUFK1vM+k0ak+ySr057ldTvPICWeESorJFztOPWaHtO+SX2Lr/kPl+k p4obRkQax1US+vPuzbP1xh+M7HqVh85T7g2+Ymzip/bfI5CR+QC73HhJpiHtRR24 x1vtHNNJU9knTZ8zFHYpgawYglDydTNy7UYzqveBk9BLLYWom0ILt9Ns616+4B/I 2DZGjJ6Jyk44eMTiVPo/1rThTHE8U5fOcOtql1kiY/K7k1BKBRLoOpUD+4Ne5VxC 7TQoeKpK75UxWNLc/xauK7to1XpCurGUqen1NQeCb84S10B17oKLz2PCdQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGjA8tB3b34dNJB1iBw16dOHRjQFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzg0ZWVk Yy1hMmY2LTRhMzktYTkxOC1mOWQ5YzAzZDRiNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvODRlZWRj LWEyZjYtNGEzOS1hOTE4LWY5ZDljMDNkNGI0Yy8xL2FNRHkwSGR2ZmgwMGtIV0lI RFhwMDRkR05BVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwgDqMA0EAgACMAcDBQMqE5YAMA0GCSqGSIb3 DQEBCwUAA4IBAQCnshtHsQtliSaiamrA99YoBl18qysJnokGT9iqKVYoRPrzBwLX O/sv9TnVJMRPuZ3Dk6aaWsnVqW4/m6gsprMDy6RZAn94QF6T98RdTG7VfpJRkMcD kYbhcYgKA/to9b0o1hQDyinObvL3iEKR5tQ2bXAKoVFHbBRYNxO/eNpdFUJAsUo4 4J2CyDooHX7ePL2gDzTHk7InBdDMvhyMiMIZYfugD3t8UUjv7h1gGlSLpZFIcpLO oT5kLRx0Mk6sePH0eQunMmdh1xNxGBqk+fRLfEY4rzouc3PZC5AqE4/e0iSgBY4t i36IJxnwBWMBW67ptrCVcCYgo84suL8PS4Ct -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:41 2026 by rpki-client