This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer (raw, json) Hash identifier: K9b3rByDhysTxxF3/ntr1XdTm7FtBnqcWlRTkqpcoSE= Subject key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E379CFC14AE056B1A5BE4471AA7CE7B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204470 IP: 185.248.212.0/22 IP: 2a0d:d780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9c:fc:14:ae:05:6b:1a:5b:e4:47:1a:a7:ce:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68c21560b12219cf8eab55f74d98f2e9aed51746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:42:a4:a9:94:7b:3f:3b:7b:71:11:ac:be: 00:36:82:b6:c3:b4:88:12:b8:8a:cc:36:7a:63:2c: 08:69:8e:0f:a4:86:fb:04:58:ca:79:01:d5:4e:ec: 84:06:74:69:c9:51:fc:e9:16:56:64:e3:2f:34:26: 74:03:64:48:92:e2:4f:f5:38:2c:d6:81:cc:99:36: 82:6a:a5:db:06:29:64:dc:50:89:68:8a:73:bb:f5: cb:4b:36:f6:0d:74:b3:23:db:be:66:c0:c0:b7:f2: 76:a3:17:18:f1:17:0d:2b:6d:a7:d9:b0:4e:e3:d9: 88:3f:2b:82:92:2d:d3:90:c9:8a:98:ec:26:26:bb: 9c:18:d7:ac:25:9f:3d:60:00:46:00:05:86:f3:8c: 26:50:de:1a:2f:c1:4d:3f:c0:be:14:dc:c0:8a:d3: 1f:46:4a:04:1a:58:55:97:c2:b3:b3:0d:79:68:2d: aa:40:54:68:b9:36:bd:f9:61:ee:8b:16:42:0e:aa: 97:b9:2e:99:97:90:00:91:f2:30:3c:f3:0b:2a:93: e9:56:c6:3d:4e:3b:08:c2:68:be:65:a5:a8:5d:39: 65:3e:f7:f1:1c:e5:43:1c:80:2c:f9:ea:0d:a5:4b: 2d:aa:a6:b1:ab:51:08:48:0c:65:21:8d:e2:1a:b6: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.212.0/22 IPv6: 2a0d:d780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204470 Signature Algorithm: sha256WithRSAEncryption 55:c0:2a:ba:b7:c4:66:aa:09:f1:93:a3:a4:1a:7f:0a:c1:e5: 32:59:38:19:a0:3c:02:a8:65:3b:ce:6b:27:5d:30:f0:25:fb: 1d:8f:09:a8:aa:e3:4d:09:39:12:71:c0:b4:71:55:c0:15:22: 96:a8:a3:42:b0:c9:c3:d8:39:3c:8d:ef:df:2a:86:4c:6d:a5: af:aa:e4:ce:d8:b5:ed:85:2f:ad:30:d3:67:b4:cc:77:4f:84: 32:56:03:5d:29:e4:e2:ea:7b:24:da:34:67:de:5c:16:09:89: 22:f3:8d:f9:c6:15:d7:2e:ec:62:8c:ec:10:37:34:a6:cb:a8: 4d:6c:25:e9:e4:d7:fa:af:46:ee:03:e6:69:c2:fa:4e:af:1f: e1:5a:16:47:a5:56:3b:5d:d3:78:08:05:84:f8:53:41:96:7e: dc:28:55:16:62:5c:5d:8a:c1:fc:2c:2f:04:25:a4:64:65:45: 77:2a:04:e7:54:ef:1c:a4:84:ae:1e:ec:67:d6:e0:ad:74:aa: ae:72:af:2f:c0:c0:82:d9:e3:9f:eb:a5:40:7e:1e:d8:06:9f: cf:2a:6e:7a:cc:95:5b:16:f6:a4:3e:00:93:af:6e:96:36:fd: 4e:02:7b:c8:97:23:7f:51:69:e4:a7:62:3c:c9:6e:7f:88:7d: 5d:3d:3b:11 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N5z8FK4Faxpb5Ecap857MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGMyMTU2MGIxMjIxOWNmOGVhYjU1Zjc0ZDk4ZjJlOWFlZDUxNzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKpCpKmUez87e3ERrL4ANoK2w7SI EriKzDZ6YywIaY4PpIb7BFjKeQHVTuyEBnRpyVH86RZWZOMvNCZ0A2RIkuJP9Tgs 1oHMmTaCaqXbBilk3FCJaIpzu/XLSzb2DXSzI9u+ZsDAt/J2oxcY8RcNK22n2bBO 49mIPyuCki3TkMmKmOwmJrucGNesJZ89YABGAAWG84wmUN4aL8FNP8C+FNzAitMf RkoEGlhVl8Kzsw15aC2qQFRouTa9+WHuixZCDqqXuS6Zl5AAkfIwPPMLKpPpVsY9 TjsIwmi+ZaWoXTllPvfxHOVDHIAs+eoNpUstqqaxq1EISAxlIY3iGraUMQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGjCFWCxIhnPjqtV902Y8umu1RdGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2JjNTAz NC02MDBhLTQ5YjMtODRiOS1hYzFlZGJiNDc3YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvYmM1MDM0 LTYwMGEtNDliMy04NGI5LWFjMWVkYmI0NzdjMC8xL2FNSVZZTEVpR2MtT3ExWDNU Wmp5NmE3VkYwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufjUMA0EAgACMAcDBQMqDdeAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMetjANBgkqhkiG9w0BAQsFAAOCAQEAVcAqurfEZqoJ 8ZOjpBp/CsHlMlk4GaA8AqhlO85rJ10w8CX7HY8JqKrjTQk5EnHAtHFVwBUilqij QrDJw9g5PI3v3yqGTG2lr6rkzti17YUvrTDTZ7TMd0+EMlYDXSnk4up7JNo0Z95c FgmJIvON+cYV1y7sYozsEDc0psuoTWwl6eTX+q9G7gPmacL6Tq8f4VoWR6VWO13T eAgFhPhTQZZ+3ChVFmJcXYrB/CwvBCWkZGVFdyoE51TvHKSErh7sZ9bgrXSqrnKv L8DAgtnjn+ulQH4e2AafzypuesyVWxb2pD4Ak69uljb9TgJ7yJcjf1Fp5KdiPMlu f4h9XT07EQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:30 2026 by rpki-client