This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer File: aM_hqssnjBMjGzEORe5XaTL-m04.cer (raw, json) Hash identifier: CyK/xdaT+fnLbM1vfKLbf1GLihIUs9tJ7VYjpQs7a7c= Subject key identifier: 68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBB8FCD4A2D16D92FC011F2E9F141B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12840 IP: 212.109.96.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b8:fc:d4:a2:d1:6d:92:fc:01:1f:2e:9f:14:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68cfe1aacb278c13231b310e45ee576932fe9b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:5b:b7:b1:dd:f6:a3:45:a9:6a:33:72:06: e8:5b:66:90:2a:c1:a8:4a:9d:60:49:2f:e5:56:dc: a4:c0:02:a5:b2:dd:b8:4f:5b:6e:30:b7:17:b1:69: e7:7a:d6:06:c6:0e:2f:d2:b8:3b:1a:21:4c:b4:53: 53:52:a4:22:4d:78:43:59:3a:9a:56:cb:86:6a:a7: ff:08:98:41:7d:35:89:82:48:e8:d8:9a:61:a3:51: 28:e5:3d:12:85:58:f5:cc:82:3c:81:56:fc:74:47: e4:b5:87:cf:82:ba:c5:32:a2:35:5a:a3:0f:eb:d5: c7:94:aa:53:09:fa:23:3f:b1:dd:5e:c4:86:1a:80: 11:d1:42:e6:94:3a:84:60:61:02:27:b0:72:86:1e: 15:69:9b:a0:aa:0c:27:9b:74:00:2f:0c:a0:49:80: 3c:36:4d:41:90:24:ed:d4:4c:18:e2:90:fc:8b:d1: a0:47:6d:7b:3b:c1:86:0a:48:c9:b5:e8:66:db:7e: ea:1a:74:68:c3:cf:c1:93:63:72:39:4c:89:c9:42: 28:63:00:3f:47:87:37:dd:2d:ed:87:bc:c9:79:6d: a0:89:78:ae:4b:98:d1:49:da:dd:d4:b7:75:56:dc: 2d:ea:c3:4a:8c:53:56:d8:21:57:5f:7d:f1:1d:6f: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.109.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12840 Signature Algorithm: sha256WithRSAEncryption 67:70:c7:f0:0d:52:79:b3:e2:3f:79:fe:40:ed:e2:bf:a8:76: 52:2a:ee:7a:56:9e:a8:87:56:0b:b6:bb:0f:bb:f6:af:5c:a3: 54:c9:29:c0:3f:03:50:86:02:b0:42:3d:44:38:e9:e1:a0:90: f0:25:78:64:c9:a6:16:eb:d7:b9:9f:88:e7:61:68:02:cb:13: 14:89:fe:1e:f7:5d:7e:94:ef:09:d9:0e:56:75:42:c7:09:8a: 70:b6:88:a7:5f:1f:5d:59:6f:98:5f:f2:eb:84:d9:c7:32:42: 2c:3a:51:3a:a8:ce:1f:d9:d3:44:4a:ca:a7:ec:c5:47:7e:e9: ba:1f:d6:42:f9:04:c5:65:60:b3:20:c8:5e:9c:c6:7d:c0:80: 2b:f6:3c:e3:a4:15:43:55:22:4c:f2:04:03:61:c6:43:65:1d: 53:e6:7f:b0:5d:4d:ec:70:f8:81:58:c0:a3:78:5b:d6:71:d6: ef:42:1c:34:19:8f:e4:bf:da:76:e5:d1:a3:a4:d3:27:4a:39: 99:df:83:71:10:ab:7c:72:97:f9:56:38:9c:d1:f2:42:4d:21: a4:df:5f:97:59:7e:03:06:68:6d:84:65:31:92:68:38:e8:97: 86:f2:fb:a5:8b:78:4a:6a:0d:a0:bc:cb:db:75:50:45:1c:6c: b9:ab:54:19 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt567j81KLRbZL8AR8unxQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGNmZTFhYWNiMjc4YzEzMjMxYjMxMGU0NWVlNTc2OTMyZmU5YjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXJbt7Hd9qNFqWozcgboW2aQKsGo Sp1gSS/lVtykwAKlst24T1tuMLcXsWnnetYGxg4v0rg7GiFMtFNTUqQiTXhDWTqa VsuGaqf/CJhBfTWJgkjo2Jpho1Eo5T0ShVj1zII8gVb8dEfktYfPgrrFMqI1WqMP 69XHlKpTCfojP7HdXsSGGoAR0ULmlDqEYGECJ7Byhh4VaZugqgwnm3QALwygSYA8 Nk1BkCTt1EwY4pD8i9GgR217O8GGCkjJtehm237qGnRow8/Bk2NyOUyJyUIoYwA/ R4c33S3th7zJeW2giXiuS5jRSdrd1Ld1Vtwt6sNKjFNW2CFXX33xHW9jIwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFGjP4arLJ4wTIxsxDkXuV2ky/ptOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1L2JlOWU4 OC01MTJmLTRiMDYtYjE5Ni04OWMyZjY2NmU5MDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvYmU5ZTg4 LTUxMmYtNGIwNi1iMTk2LTg5YzJmNjY2ZTkwNS8xL2FNX2hxc3NuakJNakd6RU9S ZTVYYVRMLW0wNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQF1G1gMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjIoMA0GCSqGSIb3DQEBCwUAA4IBAQBncMfwDVJ5s+I/ef5A7eK/qHZSKu56Vp6o h1YLtrsPu/avXKNUySnAPwNQhgKwQj1EOOnhoJDwJXhkyaYW69e5n4jnYWgCyxMU if4e911+lO8J2Q5WdULHCYpwtoinXx9dWW+YX/LrhNnHMkIsOlE6qM4f2dNESsqn 7MVHfum6H9ZC+QTFZWCzIMhenMZ9wIAr9jzjpBVDVSJM8gQDYcZDZR1T5n+wXU3s cPiBWMCjeFvWcdbvQhw0GY/kv9p25dGjpNMnSjmZ34NxEKt8cpf5Vjic0fJCTSGk 31+XWX4DBmhthGUxkmg46JeG8vuli3hKag2gvMvbdVBFHGy5q1QZ -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:00 2026 by rpki-client