This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rmamLvRzH3Vtdh7Xn49zD5ApbnI.cer
File: rmamLvRzH3Vtdh7Xn49zD5ApbnI.cer (raw, json)
Hash identifier: T1W76hDM8a1MpXd38z55I1vhAi+5CVdlnnAT22R1f5k=
Subject key identifier: AE:66:A6:2E:F4:73:1F:75:6D:76:1E:D7:9F:8F:73:0F:90:29:6E:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7ACA9CA1A98BD5109EAA85D9537DB9CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/rmamLvRzH3Vtdh7Xn49zD5ApbnI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:20:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202828
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:ca:9c:a1:a9:8b:d5:10:9e:aa:85:d9:53:7d:b9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:20:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae66a62ef4731f756d761ed79f8f730f90296e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:3b:70:0d:b7:e8:87:62:e3:b1:3c:34:55:
ff:8f:9e:a5:79:e3:aa:5f:e6:09:30:9f:b9:5c:ed:
27:0a:41:ad:99:31:cd:2b:e4:f9:3b:0b:6b:d2:5c:
7a:bc:48:79:cf:44:e2:c4:52:21:25:6d:1a:5b:e3:
ff:69:f8:b6:e4:c5:19:e9:25:02:95:3f:bc:40:bd:
74:10:cf:4c:22:b8:23:70:c1:e9:ec:e8:bc:37:fd:
eb:3c:08:22:86:1b:20:72:9a:5a:5f:c5:c2:75:2a:
db:a7:ca:41:c4:40:c5:70:56:b7:89:5e:b8:0a:f0:
ea:c5:ac:20:08:a6:3a:fd:0d:0e:c3:54:b7:60:01:
74:69:d3:c6:31:e7:0f:f5:12:b6:44:c1:74:53:8d:
cf:ce:87:e5:13:d7:c9:db:ce:47:8a:6a:e2:8c:5f:
75:d9:e3:22:65:71:c3:4c:05:d5:14:4e:37:01:17:
ab:d8:68:08:6d:ec:a6:05:b5:6f:16:dd:30:2e:15:
f4:11:31:9f:33:0d:ae:73:5f:f8:45:80:b6:03:a3:
a7:eb:32:57:c7:9c:cc:64:59:1b:a0:d9:e4:ae:84:
d4:e4:a1:f3:06:bd:a8:59:1b:04:cd:cc:f3:43:a7:
88:e2:6d:4b:f8:be:37:26:91:0e:01:99:53:33:d6:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:66:A6:2E:F4:73:1F:75:6D:76:1E:D7:9F:8F:73:0F:90:29:6E:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3440b8-8c50-45c8-b466-841e3b929e5e/1/rmamLvRzH3Vtdh7Xn49zD5ApbnI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202828
Signature Algorithm: sha256WithRSAEncryption
55:18:a4:9a:95:44:45:f0:c4:a5:47:75:0b:9a:77:d1:3f:38:
b4:6b:a3:01:2c:d6:70:7b:45:15:11:13:95:21:be:5f:83:a5:
f3:a6:60:81:dc:34:b9:12:96:62:e3:b8:52:11:a4:ef:ca:21:
e9:29:33:2a:15:ab:69:9d:06:16:cf:a3:0c:8d:3f:94:bf:8f:
d4:21:7a:a1:87:aa:03:cb:43:34:3d:8d:c5:58:08:e0:e0:a0:
9f:6a:d3:41:b7:19:9d:e3:fb:96:fb:20:8c:a7:8e:60:7b:a5:
f6:97:19:c8:4a:3d:aa:43:be:12:b8:fb:4d:ec:29:fd:8c:0d:
49:f0:67:05:26:a2:ca:96:13:61:c7:bd:63:8f:c6:fa:2f:f4:
30:65:18:8c:a3:61:5c:96:bd:42:b8:69:1f:ac:a7:75:3e:f9:
eb:80:90:c3:a4:c4:22:21:10:a2:29:34:26:71:cd:3e:c7:77:
1b:52:47:2c:27:55:50:72:1c:0e:9f:d4:a9:0c:95:1c:80:7d:
93:cf:04:1a:58:8d:01:cc:b1:08:14:04:aa:ce:a6:ac:3c:8e:
10:4d:04:96:3e:eb:55:ef:f1:fb:50:da:32:98:b6:ca:fe:73:
f7:a2:f1:b7:7b:3a:fd:d0:24:99:3c:d5:c7:35:6e:8f:44:17:
e5:68:eb:bd
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt6ypyhqYvVEJ6qhdlTfbnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTgyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTY2YTYyZWY0NzMxZjc1NmQ3NjFlZDc5ZjhmNzMwZjkwMjk2ZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDM7cA236Idi47E8NFX/j56leeOq
X+YJMJ+5XO0nCkGtmTHNK+T5Owtr0lx6vEh5z0TixFIhJW0aW+P/afi25MUZ6SUC
lT+8QL10EM9MIrgjcMHp7Oi8N/3rPAgihhsgcppaX8XCdSrbp8pBxEDFcFa3iV64
CvDqxawgCKY6/Q0Ow1S3YAF0adPGMecP9RK2RMF0U43PzoflE9fJ285HimrijF91
2eMiZXHDTAXVFE43ARer2GgIbeymBbVvFt0wLhX0ETGfMw2uc1/4RYC2A6On6zJX
x5zMZFkboNnkroTU5KHzBr2oWRsEzczzQ6eI4m1L+L43JpEOAZlTM9ZANwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFK5mpi70cx91bXYe15+Pcw+QKW5yMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzM0NDBi
OC04YzUwLTQ1YzgtYjQ2Ni04NDFlM2I5MjllNWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvMzQ0MGI4
LThjNTAtNDVjOC1iNDY2LTg0MWUzYjkyOWU1ZS8xL3JtYW1MdlJ6SDNWdGRoN1hu
NDl6RDVBcGJuSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMYTDANBgkqhkiG9w0BAQsFAAOCAQEAVRikmpVERfDE
pUd1C5p30T84tGujASzWcHtFFRETlSG+X4Ol86Zggdw0uRKWYuO4UhGk78oh6Skz
KhWraZ0GFs+jDI0/lL+P1CF6oYeqA8tDND2NxVgI4OCgn2rTQbcZneP7lvsgjKeO
YHul9pcZyEo9qkO+Erj7Tewp/YwNSfBnBSaiypYTYce9Y4/G+i/0MGUYjKNhXJa9
QrhpH6yndT7564CQw6TEIiEQoik0JnHNPsd3G1JHLCdVUHIcDp/UqQyVHIB9k88E
GliNAcyxCBQEqs6mrDyOEE0Elj7rVe/x+1DaMpi2yv5z96Lxt3s6/dAkmTzVxzVu
j0QX5WjrvQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:32 2026 by rpki-client