This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer File: AsNyEO2KVs4O3UV0v3NrYyReWCM.cer (raw, json) Hash identifier: pFQZ1n1pDHzo3zEQ3dg0jn/+drm8FRs22SGSzAOi83M= Subject key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED70D153AF108459CF37614C49D7CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207430 IP: 31.14.4.0/22 IP: 212.102.101.0/24 IP: 2a0d:fd00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:70:d1:53:af:10:84:59:cf:37:61:4c:49:d7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02c37210ed8a56ce0edd4574bf736b63245e5823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:bd:12:81:eb:3b:2f:94:75:9a:6d:5a:0e: e4:0e:87:82:3f:00:7b:12:74:cb:a6:68:f1:58:d0: bf:8f:96:93:0c:8b:b7:18:41:ac:b1:53:96:51:39: 4c:94:54:65:93:fd:b1:8e:5d:36:65:1d:21:79:68: 0a:57:a9:7c:7a:9a:9e:de:9b:5f:9c:c1:7d:cb:2f: 12:7d:00:0c:27:86:0d:3b:53:4d:78:8a:10:ce:73: c1:0a:61:9d:68:67:ba:9e:e5:07:c9:78:e9:fe:0b: 31:4d:55:60:96:8b:f0:c4:3c:33:91:a8:b8:16:d1: ec:d5:7d:23:69:06:5d:07:f3:f1:7b:e4:ef:bd:82: d2:b1:21:44:bd:d0:ba:b6:2e:d8:7b:7d:71:95:c1: d9:0c:37:88:48:eb:a9:75:b2:67:19:cf:4f:46:7f: 3f:b3:e0:fa:6e:b8:19:df:28:36:40:c0:64:b2:b9: 65:49:f9:09:3d:2f:a2:4f:6a:e1:ea:49:a5:e4:eb: 15:40:c7:17:11:91:3f:9d:10:aa:1d:0f:d0:23:61: af:de:63:88:ef:98:42:34:5c:0f:6e:c4:c3:e1:14: 7b:c5:2e:c2:65:66:5e:79:35:90:1a:4a:53:30:a4: bf:68:bf:0e:74:54:34:f2:d4:e2:cd:fd:48:4c:1f: c3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.4.0/22 212.102.101.0/24 IPv6: 2a0d:fd00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207430 Signature Algorithm: sha256WithRSAEncryption 3c:d9:3b:89:2e:67:26:92:ea:79:60:a8:e5:4d:0d:5a:4a:6a: ea:48:f2:d3:51:0d:35:ba:83:b4:19:9b:91:34:ec:da:0b:3d: f6:20:6b:41:25:fa:84:f6:87:54:9e:fe:02:09:2d:04:2c:1e: 7c:c8:a1:04:20:38:b8:6d:5f:e1:dd:5c:fc:d1:99:5d:12:83: a8:9f:cd:4c:bd:08:52:c7:9f:ea:74:d1:de:22:86:ec:99:fe: 18:e5:e7:bf:87:f9:d7:da:f1:5e:9c:a2:66:9b:61:99:d4:3d: 58:47:a2:c8:ff:d1:60:fd:9e:13:7c:5c:53:43:81:d5:82:14: 8c:87:b3:b0:bd:e4:57:79:03:99:7d:34:f2:a6:65:2e:12:e4: 77:a3:6e:64:a4:c5:cb:a6:38:08:2f:5b:c0:e0:d2:72:23:83: 7f:72:33:41:03:64:92:c8:93:a4:50:67:b3:81:7e:ec:33:72: 1e:27:f4:9b:16:e3:77:ac:50:4d:88:7e:33:5d:e1:65:e8:8d: 6b:f5:16:2f:c0:0e:86:0d:5b:53:cd:f3:9c:a2:14:e4:ab:f3: f6:c0:a7:52:0e:ce:d0:84:45:e1:f8:ee:a4:81:2c:01:30:3a: 08:70:c8:bb:10:83:45:68:48:59:25:d5:c2:7a:20:be:21:0d: 36:3e:ff:33 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87XDRU68QhFnPN2FMSdfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmMzNzIxMGVkOGE1NmNlMGVkZDQ1NzRiZjczNmI2MzI0NWU1ODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBS9EoHrOy+UdZptWg7kDoeCPwB7 EnTLpmjxWNC/j5aTDIu3GEGssVOWUTlMlFRlk/2xjl02ZR0heWgKV6l8epqe3ptf nMF9yy8SfQAMJ4YNO1NNeIoQznPBCmGdaGe6nuUHyXjp/gsxTVVglovwxDwzkai4 FtHs1X0jaQZdB/Pxe+TvvYLSsSFEvdC6ti7Ye31xlcHZDDeISOupdbJnGc9PRn8/ s+D6brgZ3yg2QMBksrllSfkJPS+iT2rh6kml5OsVQMcXEZE/nRCqHQ/QI2Gv3mOI 75hCNFwPbsTD4RR7xS7CZWZeeTWQGkpTMKS/aL8OdFQ08tTizf1ITB/DoQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFALDchDtilbODt1FdL9za2MkXlgjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzM3MjA3 OS04OTAxLTQ1MjYtOGQ1YS1jMWYwZWFlZWQ4Y2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMzcyMDc5 LTg5MDEtNDUyNi04ZDVhLWMxZjBlYWVlZDhjZS8xL0FzTnlFTzJLVnM0TzNVVjB2 M05yWXlSZVdDTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCHw4EAwQA1GZlMA0EAgACMAcDBQAqDf0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMqRjANBgkqhkiG9w0BAQsFAAOCAQEAPNk7 iS5nJpLqeWCo5U0NWkpq6kjy01ENNbqDtBmbkTTs2gs99iBrQSX6hPaHVJ7+Agkt BCwefMihBCA4uG1f4d1c/NGZXRKDqJ/NTL0IUsef6nTR3iKG7Jn+GOXnv4f519rx XpyiZpthmdQ9WEeiyP/RYP2eE3xcU0OB1YIUjIezsL3kV3kDmX008qZlLhLkd6Nu ZKTFy6Y4CC9bwODSciODf3IzQQNkksiTpFBns4F+7DNyHif0mxbjd6xQTYh+M13h ZeiNa/UWL8AOhg1bU83znKIU5Kvz9sCnUg7O0IRF4fjupIEsATA6CHDIuxCDRWhI WSXVwnogviENNj7/Mw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:05 2026 by rpki-client