This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer File: AZYrnNLlVrWW_HJDVlgHueLchoo.cer (raw, json) Hash identifier: yKH5c0gfeMkm3IebJLhYqfT1/NuAB+/jM2sOZaWMak0= Subject key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE28BEC7FE3C70B5C7DB08DF4F4750 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202589 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:28:be:c7:fe:3c:70:b5:c7:db:08:df:4f:47:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01962b9cd2e556b596fc7243565807b9e2dc868a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:a1:0a:73:57:1a:e9:bd:b0:fe:5a:a2:18: 01:64:1a:e5:bc:5e:b6:83:ee:35:a0:a2:51:66:cb: 5a:5c:58:ec:0d:27:29:93:e5:d3:f4:d8:8d:e5:f1: f9:90:df:92:fa:a3:90:72:15:a7:8e:e9:0c:d8:ca: 4c:6e:cf:12:dc:3a:f1:b2:08:94:da:5b:58:a2:d9: cf:e7:e4:48:f5:1c:cc:05:48:c1:fd:ff:c0:f3:2d: 66:9e:44:89:5f:84:1b:a2:f8:c9:1f:ad:d4:dd:2d: 4d:3b:34:3d:90:70:fd:bf:f4:f6:c9:ff:7c:5a:ee: cc:c2:ab:ed:e8:1d:e9:05:ee:73:3a:ba:05:30:44: 35:36:18:ea:e4:b4:23:64:b1:a3:87:61:f8:ad:f1: a2:58:d5:94:98:c1:1e:0f:09:e6:2c:b5:92:ff:67: 73:f2:a9:a1:a5:ae:26:28:99:0e:93:71:b5:00:15: 5f:51:59:70:6d:ac:83:f4:87:b8:e9:e0:af:4e:94: 36:94:a7:a7:38:58:12:69:a8:48:50:79:5f:13:ea: 70:c5:d7:0d:ee:af:a2:8b:36:6a:15:4d:4b:58:f7: df:10:31:ea:2b:24:d3:43:f6:20:f2:19:11:83:e6: 57:cc:c7:2d:89:e2:a8:d7:77:c2:37:8f:e2:3c:89: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202589 Signature Algorithm: sha256WithRSAEncryption 19:3c:59:96:22:a6:6d:6e:90:f8:66:a3:9e:3b:50:ae:80:4d: 6a:eb:44:f3:0b:2b:94:bb:d6:e8:01:5e:88:d8:99:56:cd:1b: 4d:40:4a:1b:c7:60:ae:3a:86:16:ff:48:8c:e3:17:1c:99:ba: be:14:18:1f:ce:c6:65:70:50:37:2e:4d:57:b8:2f:b0:90:6b: 28:cc:ea:d8:13:75:af:b4:4e:0f:5f:e7:ca:62:cd:f0:35:b1: 16:cc:00:f3:90:6d:8d:fb:c8:d4:63:50:5e:03:13:53:bd:1a: 26:27:0c:fb:7d:32:3a:e1:7e:c5:da:ea:07:1a:cd:c1:cc:d9: d8:e1:be:ee:e3:7e:f0:15:bf:c0:78:ab:2f:36:e5:1b:c6:9c: a2:9a:f1:23:82:5b:ee:89:4d:3f:bf:0e:8c:6c:85:6d:6c:ce: a9:67:d6:5a:1c:3f:02:f5:9a:2e:83:f6:08:36:f6:6e:f8:41: 74:ed:3f:55:36:6f:0f:8e:f5:a7:df:2c:df:a4:b6:ff:04:43: ce:b6:37:c7:e8:c6:39:c6:b8:c8:84:23:83:80:af:a8:76:72: d0:9f:43:4d:0b:30:14:eb:16:38:dc:2e:df:61:aa:e5:ed:ba: 1c:b4:ab:ea:20:18:c9:75:bb:23:44:63:87:dd:47:e7:c6:5b: 44:a9:db:59 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87ii+x/48cLXH2wjfT0dQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTk2MmI5Y2QyZTU1NmI1OTZmYzcyNDM1NjU4MDdiOWUyZGM4NjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a6hCnNXGum9sP5aohgBZBrlvF62 g+41oKJRZstaXFjsDScpk+XT9NiN5fH5kN+S+qOQchWnjukM2MpMbs8S3DrxsgiU 2ltYotnP5+RI9RzMBUjB/f/A8y1mnkSJX4QbovjJH63U3S1NOzQ9kHD9v/T2yf98 Wu7Mwqvt6B3pBe5zOroFMEQ1Nhjq5LQjZLGjh2H4rfGiWNWUmMEeDwnmLLWS/2dz 8qmhpa4mKJkOk3G1ABVfUVlwbayD9Ie46eCvTpQ2lKenOFgSaahIUHlfE+pwxdcN 7q+iizZqFU1LWPffEDHqKyTTQ/Yg8hkRg+ZXzMctieKo13fCN4/iPIn6nwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFAGWK5zS5Va1lvxyQ1ZYB7ni3IaKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2UyMWI2 OS05ZGY5LTQ4YTMtYTFlMS03MDM0MmEyZTc1MzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvZTIxYjY5 LTlkZjktNDhhMy1hMWUxLTcwMzQyYTJlNzUzMy8xL0FaWXJuTkxsVnJXV19ISkRW bGdIdWVMY2hvby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMXXTANBgkqhkiG9w0BAQsFAAOCAQEAGTxZliKmbW6Q +GajnjtQroBNautE8wsrlLvW6AFeiNiZVs0bTUBKG8dgrjqGFv9IjOMXHJm6vhQY H87GZXBQNy5NV7gvsJBrKMzq2BN1r7ROD1/nymLN8DWxFswA85BtjfvI1GNQXgMT U70aJicM+30yOuF+xdrqBxrNwczZ2OG+7uN+8BW/wHirLzblG8acoprxI4Jb7olN P78OjGyFbWzOqWfWWhw/AvWaLoP2CDb2bvhBdO0/VTZvD471p98s36S2/wRDzrY3 x+jGOca4yIQjg4CvqHZy0J9DTQswFOsWONwu32Gq5e26HLSr6iAYyXW7I0Rjh91H 58ZbRKnbWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:37 2026 by rpki-client