This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer File: amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer (raw, json) Hash identifier: G6Co+xzKAYe07ZxNLPAH5dbQsgsjHcjDf3SFTaR6fZQ= Subject key identifier: 6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6811803998ACA2463F90439E875C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43293 IP: 77.93.64.0/20 IP: 2a01:350::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:81:18:03:99:8a:ca:24:63:f9:04:39:e8:75:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:e4:4f:de:0c:6b:1d:7b:d1:b0:97:61:06: 4e:30:52:4d:71:ed:4d:0d:47:14:d8:4c:1d:0f:1a: ef:fe:78:45:00:71:24:af:98:f1:3b:89:0f:ec:85: fc:ed:34:5c:e0:d4:b6:47:a4:d8:b1:60:b2:a6:96: 3d:27:93:85:dc:17:d5:93:e5:bf:32:3c:f2:a5:e2: 6f:e2:b2:4b:52:ce:10:6f:ec:3b:8e:0e:f4:e7:df: 8e:0f:52:32:99:2c:a4:6b:73:ed:71:11:8c:f8:5b: 48:69:51:79:6f:8c:aa:cc:e4:fc:ec:c9:9c:86:ab: c7:7c:a6:01:69:98:3f:bb:af:71:4f:f6:71:8e:61: 0a:f2:14:71:26:80:35:23:4d:b7:3a:1f:6b:bd:fa: 6f:23:7a:68:56:47:33:2d:2a:75:4d:a4:ab:0c:8b: 01:fa:fc:79:04:f7:7f:97:a1:af:b2:a2:da:30:eb: 8b:5e:cf:1c:eb:a4:9f:59:8b:e8:e4:a8:48:40:5d: 13:f2:5d:91:16:a1:79:3f:18:25:57:64:46:5e:ac: ae:ea:e3:c8:ae:cb:56:db:34:0f:1b:6b:11:06:4d: 7b:10:1e:34:c1:c8:eb:a2:db:42:d5:fb:c7:24:b7: 8a:df:85:bb:0b:2e:dc:0e:89:66:38:97:6b:88:b4: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.64.0/20 IPv6: 2a01:350::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43293 Signature Algorithm: sha256WithRSAEncryption af:aa:74:dc:d9:e4:61:7a:e5:9e:f3:85:bc:1f:24:0a:a3:9a: f7:c2:01:1f:11:36:4a:9e:f7:4a:1e:3d:88:17:b5:58:35:38: 8c:51:3c:e0:47:bf:de:ab:03:bd:f1:19:40:34:9b:11:b9:08: f4:86:81:e4:f7:ef:bd:c7:c9:3e:23:9c:7d:45:ac:89:48:61: ff:6f:7c:c0:95:f0:50:5e:0f:0b:c4:77:6e:46:6a:ff:97:41: ee:23:bb:fe:c9:d3:8b:b1:18:a1:84:df:fe:8b:6a:35:4e:17: ce:ac:08:ac:36:ba:19:9f:cf:ef:45:ea:b7:d5:74:80:84:f8: 54:53:2e:67:b7:47:66:8d:a3:93:82:a9:d4:12:dd:04:b4:c2: d8:c2:c4:a3:7e:65:b2:20:69:47:07:ca:8f:24:df:45:23:2d: d5:36:37:a3:27:0f:25:57:9e:47:44:f9:7d:71:cf:bd:45:7b: 96:ad:13:54:7d:60:a3:16:76:fd:72:2f:7a:93:73:87:af:c6: d4:ce:20:96:dc:18:5d:9f:31:27:42:f6:64:63:49:ca:b0:89: a2:92:a5:e1:e4:60:fc:c8:d6:05:6f:07:2c:08:49:02:90:b5: b9:9e:28:7d:63:3f:ab:c8:4b:3b:2e:ad:8a:21:54:2d:59:39: ba:b3:99:4d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+poEYA5mKyiRj+QQ56HXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTZhMGM5ZjI3NzhhODg3ODY4Yjc0M2EyYjVmZmE4YzYyN2U1NWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS7kT94Max170bCXYQZOMFJNce1N DUcU2EwdDxrv/nhFAHEkr5jxO4kP7IX87TRc4NS2R6TYsWCyppY9J5OF3BfVk+W/ MjzypeJv4rJLUs4Qb+w7jg7059+OD1IymSyka3PtcRGM+FtIaVF5b4yqzOT87Mmc hqvHfKYBaZg/u69xT/ZxjmEK8hRxJoA1I023Oh9rvfpvI3poVkczLSp1TaSrDIsB +vx5BPd/l6GvsqLaMOuLXs8c66SfWYvo5KhIQF0T8l2RFqF5PxglV2RGXqyu6uPI rstW2zQPG2sRBk17EB40wcjrottC1fvHJLeK34W7Cy7cDolmOJdriLQVCwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGpqDJ8neKiHhot0Oitf+oxiflXzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzk4MGY3 Ny03ZDc1LTRmYzMtYjQ1ZS0xMTJhNDg1NzBmNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvOTgwZjc3 LTdkNzUtNGZjMy1iNDVlLTExMmE0ODU3MGY0MC8xL2Ftb01ueWQ0cUllR2kzUTZL MV82akdKLVZmTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQETV1AMA0EAgACMAcDBQAqAQNQMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCpHTANBgkqhkiG9w0BAQsFAAOCAQEAr6p03NnkYXrl nvOFvB8kCqOa98IBHxE2Sp73Sh49iBe1WDU4jFE84Ee/3qsDvfEZQDSbEbkI9IaB 5PfvvcfJPiOcfUWsiUhh/298wJXwUF4PC8R3bkZq/5dB7iO7/snTi7EYoYTf/otq NU4XzqwIrDa6GZ/P70Xqt9V0gIT4VFMuZ7dHZo2jk4Kp1BLdBLTC2MLEo35lsiBp RwfKjyTfRSMt1TY3oycPJVeeR0T5fXHPvUV7lq0TVH1goxZ2/XIvepNzh6/G1M4g ltwYXZ8xJ0L2ZGNJyrCJopKl4eRg/MjWBW8HLAhJApC1uZ4ofWM/q8hLOy6tiiFU LVk5urOZTQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:03 2026 by rpki-client