This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer (raw, json) Hash identifier: 1tre2Hsp0bPnT9bE16i+RrNx6I3R2wNslMHVXrVhPTQ= Subject key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37F05126A2EC4C71253A3BCAF3A133 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41596 AS: 199675 IP: 89.28.184.0/21 IP: 185.219.104.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f0:51:26:a2:ec:4c:71:25:3a:3b:ca:f3:a1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a750263823402b83c11c5014d32666dcab111447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:73:3c:2b:eb:2a:ac:bc:97:c8:0a:f9:71: bb:78:fd:33:0e:d5:a7:3e:cb:e6:db:42:5f:85:ce: 72:6a:09:a3:a7:8a:7c:d6:dc:d6:a1:b2:1b:1d:9a: 8f:30:ee:30:0b:0d:65:9e:f8:2c:23:40:e5:66:7c: 30:35:e6:72:ee:bd:00:27:57:e8:2b:ca:99:88:02: 6f:8f:8b:7d:85:02:bd:7a:1e:b2:e2:63:de:f8:d3: 95:77:f3:ef:9b:5c:0e:29:24:96:55:07:69:48:1e: b9:f5:33:40:e8:cf:af:71:ee:36:93:dd:70:9a:06: c9:43:70:25:db:41:97:96:67:9e:ae:25:91:98:e4: 28:16:aa:49:a6:37:94:8f:64:05:27:da:88:22:d8: e2:e6:dc:cf:82:d3:52:9f:13:59:12:a1:a2:f2:45: bb:ab:b9:fc:a1:85:b8:45:cf:47:6d:92:6f:4b:a3: dd:26:b4:43:a7:f7:e8:15:d6:cf:4c:33:c0:2a:20: 5c:54:3f:e7:da:e2:63:2a:86:14:04:db:72:c4:c3: e8:3e:6a:9f:51:19:72:5d:53:6d:3c:ba:94:35:de: 99:b6:8c:c8:ef:53:48:69:ca:ab:f2:60:b3:d7:24: 03:26:ec:9d:c9:8a:bd:16:7d:40:13:77:86:84:05: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.28.184.0/21 185.219.104.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41596 199675 Signature Algorithm: sha256WithRSAEncryption 46:15:32:da:7b:f7:87:66:fb:99:4d:fd:f5:0b:be:84:b1:e3: b0:a6:ae:ba:73:4b:d4:8d:e4:0b:48:72:58:f7:db:34:e8:cf: bf:fb:9c:61:97:eb:07:17:2d:12:15:d6:18:e4:ca:0a:58:27: 27:73:f9:c7:52:3d:65:aa:a0:97:81:e7:9d:d4:08:c2:c6:61: 32:ba:30:e3:f6:92:f7:ba:71:05:ee:c1:df:58:d2:38:65:d3: b1:b4:fe:be:27:90:7c:8f:77:99:ca:29:f9:8e:a3:45:b4:1e: 4c:e6:5c:33:e7:b3:32:63:c0:1b:42:cb:8d:71:b7:2c:f8:33: d3:fb:15:c0:59:1c:82:d9:8f:b3:d4:6c:9c:ca:ff:5b:84:09: a5:17:1d:d3:d8:b0:bc:e7:c5:cf:d5:30:54:8d:cf:35:80:f5: e5:f6:1a:ab:57:96:6e:ea:23:bd:e3:9c:bc:7a:d2:67:2d:8b: f9:98:14:b2:9f:2f:0c:ba:a1:4b:70:f7:f5:83:b2:a4:0f:dc: 5a:4a:d1:4b:91:6e:2c:05:d3:9d:87:d6:52:32:29:ea:51:28: 12:48:05:8c:4f:ec:cb:32:48:e6:01:8d:42:60:a6:f1:90:f6: a6:f1:3c:f9:a3:5b:67:42:89:85:cf:05:85:3e:7b:c1:82:63: 22:1e:ba:0d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt+N/BRJqLsTHElOjvK86EzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzUwMjYzODIzNDAyYjgzYzExYzUwMTRkMzI2NjZkY2FiMTExNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9NzPCvrKqy8l8gK+XG7eP0zDtWn Psvm20Jfhc5yagmjp4p81tzWobIbHZqPMO4wCw1lnvgsI0DlZnwwNeZy7r0AJ1fo K8qZiAJvj4t9hQK9eh6y4mPe+NOVd/Pvm1wOKSSWVQdpSB659TNA6M+vce42k91w mgbJQ3Al20GXlmeeriWRmOQoFqpJpjeUj2QFJ9qIItji5tzPgtNSnxNZEqGi8kW7 q7n8oYW4Rc9HbZJvS6PdJrRDp/foFdbPTDPAKiBcVD/n2uJjKoYUBNtyxMPoPmqf URlyXVNtPLqUNd6ZtozI71NIacqr8mCz1yQDJuydyYq9Fn1AE3eGhAVSCwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFKdQJjgjQCuDwRxQFNMmZtyrERRHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2NjYjRm ZC1mYTY3LTQ4ZDYtYThmYy05YTI5ZjFmNDA4MWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvY2NiNGZk LWZhNjctNDhkNi1hOGZjLTlhMjlmMWY0MDgxYy8xL3AxQW1PQ05BSzRQQkhGQVUw eVptM0tzUkZFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDWRy4AwQCudtoMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCifAIDAwv7MA0GCSqGSIb3DQEBCwUAA4IBAQBGFTLae/eHZvuZTf31 C76EseOwpq66c0vUjeQLSHJY99s06M+/+5xhl+sHFy0SFdYY5MoKWCcnc/nHUj1l qqCXgeed1AjCxmEyujDj9pL3unEF7sHfWNI4ZdOxtP6+J5B8j3eZyin5jqNFtB5M 5lwz57MyY8AbQsuNcbcs+DPT+xXAWRyC2Y+z1Gycyv9bhAmlFx3T2LC858XP1TBU jc81gPXl9hqrV5Zu6iO945y8etJnLYv5mBSyny8MuqFLcPf1g7KkD9xaStFLkW4s BdOdh9ZSMinqUSgSSAWMT+zLMkjmAY1CYKbxkPam8Tz5o1tnQomFzwWFPnvBgmMi HroN -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:15 2026 by rpki-client