This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
File:                     fAMRalBjzm8X_OpTUcneSgxosN0.cer (raw, json)
Hash identifier:          bZZnLep3O80twbnyQp/eV70fl6DwHJkZ4rny3266Msk=
Subject key identifier:   7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA3EEEC8028D7FA9358862B12848539
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:18:19 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 8217
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:ee:ec:80:28:d7:fa:93:58:86:2b:12:84:85:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:18:2a:73:42:89:ad:e3:c4:26:c5:a9:1c:
                    d2:9c:eb:30:dc:d2:ac:3b:c7:ea:f6:c5:7d:af:0d:
                    90:f9:df:22:6d:57:1c:80:44:8f:b2:67:d0:91:dd:
                    40:eb:68:c4:3c:8c:87:c8:b2:f6:18:a5:b8:9e:a3:
                    8b:6d:04:5a:0d:d2:30:cf:7b:c9:bb:30:95:d8:ba:
                    bf:a7:a3:dc:fc:61:ff:fe:26:fa:06:37:d5:4c:6a:
                    0a:ec:93:b7:7f:11:71:23:94:94:fb:74:c3:3d:e3:
                    6c:27:c3:51:47:f0:ca:a0:72:4a:cc:39:f4:d9:d6:
                    6d:84:5b:41:59:a3:0a:fb:0a:d6:29:7c:49:9b:aa:
                    db:ee:31:6a:17:3f:97:69:5a:3d:83:b6:61:e8:52:
                    61:ec:36:a9:23:dc:58:81:f2:3f:e9:c7:fd:20:73:
                    e3:70:28:3b:53:a8:3e:6b:7e:45:1c:0b:a7:c9:eb:
                    29:84:d8:63:42:07:7b:f3:54:97:36:de:6b:e6:60:
                    e5:67:61:be:fa:84:d2:8b:e6:12:c1:24:29:9a:2c:
                    09:63:b1:c8:d1:19:3f:00:2b:e3:d3:29:3e:79:5b:
                    cb:cc:64:a3:96:a9:4f:e0:70:0f:c4:c8:ea:96:62:
                    74:ad:d5:9e:2c:28:77:91:d4:ee:4e:e7:d9:02:34:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8217

    Signature Algorithm: sha256WithRSAEncryption
         36:4a:d7:ea:d7:7b:c6:23:df:60:b4:50:2c:c7:13:12:d4:f9:
         24:f0:ea:a1:5b:dc:a8:28:65:4f:c6:02:8b:fb:92:8a:32:68:
         72:b1:5c:c2:41:3c:1c:74:bf:b0:e1:68:e4:ed:68:17:ae:7c:
         56:08:9b:0d:fd:44:40:58:e7:0c:ff:e2:06:8e:cb:c3:c2:a4:
         22:90:51:12:49:d8:65:89:0c:a4:a3:51:e6:76:7f:07:33:20:
         8e:33:1b:af:84:ce:f2:81:49:4c:a7:10:13:9d:61:79:70:8c:
         36:ba:3e:a6:d2:9a:71:f8:78:01:89:1c:f4:89:a0:dd:e8:f9:
         31:e0:66:40:f8:24:aa:e7:4e:66:77:52:98:61:f1:ab:96:5b:
         11:64:e6:84:e2:32:b5:74:33:62:2f:f1:ec:a5:95:65:fb:fe:
         12:13:3c:f7:cd:1b:0d:f3:16:0b:e0:25:b4:a5:bd:9e:87:da:
         12:4b:14:52:c8:8c:38:50:53:50:2c:ce:2d:34:97:26:cb:2a:
         a6:00:d9:37:ca:c6:66:0b:bd:dc:a0:e1:e8:c2:a9:46:ba:94:
         f4:be:4a:8a:24:98:57:f4:78:3e:9c:a6:02:b8:82:05:f6:cf:
         3a:52:4f:59:a0:a6:76:2e:24:80:44:5f:e4:41:44:af:86:7c:
         8e:3f:72:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----