This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer File: aWZRzL2U9r6et0MyEiM1yrvvw5o.cer (raw, json) Hash identifier: raLGBms7rllLjB2/cZAOj0JHXCnbP07vw0sgh51GQV4= Subject key identifier: 69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA53E9CB4843368EB93C02766519C34 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215309 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3e:9c:b4:84:33:68:eb:93:c0:27:66:51:9c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=696651ccbd94f6be9eb74332122335cabbefc39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:74:11:d7:ee:62:b1:0b:cc:aa:87:35:64: 85:f4:15:2b:84:d7:71:36:05:90:56:09:e8:c0:bb: 27:0f:2a:41:93:1b:cc:47:ec:3a:20:df:e6:af:14: bf:52:30:60:af:5a:d4:a5:cf:a6:6d:40:7c:70:43: 55:2f:04:df:5f:0a:eb:6f:e5:08:01:d6:4e:93:b1: 45:07:d3:6a:3b:d4:52:8a:6c:4a:00:f1:6e:01:5d: 2f:4b:34:5d:19:3e:ea:99:25:be:20:d0:9e:4e:76: 74:55:12:d8:c7:71:7c:db:1d:41:9b:1e:a7:11:79: 1d:2a:aa:7f:ae:ce:99:ab:46:e8:85:64:8a:91:6e: 65:7b:76:a2:d1:36:a1:c6:eb:cd:3d:b5:a8:d4:bd: 90:b2:db:87:78:61:3d:92:d2:5b:dd:5b:e0:49:67: 4e:ad:dd:31:a0:0b:51:36:7d:8d:b8:6b:ac:c7:e0: bf:b9:f6:ee:8e:d8:21:a4:fa:f5:ab:d2:a8:7a:72: d8:f4:a3:c7:67:f8:de:4c:b3:67:eb:b2:34:54:51: 11:5d:20:ab:ad:f0:8d:7b:b5:d3:0b:70:e1:df:c4: 02:b6:4e:65:cf:10:f6:81:1a:43:2b:01:6d:75:42: 3d:f0:ba:05:5e:f5:d0:5c:eb:fd:c5:91:bc:b9:65: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215309 Signature Algorithm: sha256WithRSAEncryption 07:3c:60:ad:f7:51:13:ae:ec:6c:21:54:78:32:c0:28:96:6a: 6b:3b:49:c1:c4:fe:30:09:bb:e0:37:2e:41:37:a9:4b:7f:df: 84:c9:00:b3:90:2e:ee:ea:07:21:aa:5d:51:5e:66:65:f5:df: 6b:73:f6:3e:45:23:2f:db:1c:6e:a3:04:04:bd:8b:5e:22:b9: 1e:e5:6e:09:23:a0:ea:58:ab:38:02:20:46:79:b9:a0:cc:c5: 9e:a6:d4:12:18:7c:40:45:fe:ca:70:97:ca:81:e3:74:56:10: 05:b0:2e:f8:5d:00:5a:d9:19:87:ee:e1:b0:8f:84:e2:94:14: 5c:0c:a6:c5:a1:1a:c3:06:c2:cb:7d:eb:37:b2:63:a3:6e:3e: 61:e1:1e:c1:94:3d:7e:f4:52:e2:d4:43:f1:3d:42:5c:5d:e2: e4:46:01:d8:2f:ec:68:80:0f:c0:b6:89:a4:e5:0a:73:a0:ae: c8:30:37:da:ad:03:f4:0d:3f:25:0e:05:83:c1:c9:68:e5:75: e3:c7:60:08:05:72:41:d4:aa:65:0b:25:71:cf:01:49:99:ab: 26:07:3f:e0:ab:15:37:2f:85:d1:4c:13:81:d2:88:9a:af:3b: e4:3e:5b:c0:a3:40:0b:22:55:f2:ff:56:a4:51:23:d0:d4:67: 61:ce:a3:11 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7pT6ctIQzaOuTwCdmUZw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTY2NTFjY2JkOTRmNmJlOWViNzQzMzIxMjIzMzVjYWJiZWZjMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNl0EdfuYrELzKqHNWSF9BUrhNdx NgWQVgnowLsnDypBkxvMR+w6IN/mrxS/UjBgr1rUpc+mbUB8cENVLwTfXwrrb+UI AdZOk7FFB9NqO9RSimxKAPFuAV0vSzRdGT7qmSW+INCeTnZ0VRLYx3F82x1Bmx6n EXkdKqp/rs6Zq0bohWSKkW5le3ai0TahxuvNPbWo1L2QstuHeGE9ktJb3VvgSWdO rd0xoAtRNn2NuGusx+C/ufbujtghpPr1q9KoenLY9KPHZ/jeTLNn67I0VFERXSCr rfCNe7XTC3Dh38QCtk5lzxD2gRpDKwFtdUI98LoFXvXQXOv9xZG8uWVLeQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGlmUcy9lPa+nrdDMhIjNcq778OaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2RjYzIy ZS1hYWIzLTRlMTctYTRhMC1kODcwMTdkN2E2YWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvZGNjMjJl LWFhYjMtNGUxNy1hNGEwLWQ4NzAxN2Q3YTZhYy8xL2FXWlJ6TDJVOXI2ZXQwTXlF aU0xeXJ2dnc1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJDTANBgkqhkiG9w0BAQsFAAOCAQEABzxgrfdRE67s bCFUeDLAKJZqaztJwcT+MAm74DcuQTepS3/fhMkAs5Au7uoHIapdUV5mZfXfa3P2 PkUjL9scbqMEBL2LXiK5HuVuCSOg6lirOAIgRnm5oMzFnqbUEhh8QEX+ynCXyoHj dFYQBbAu+F0AWtkZh+7hsI+E4pQUXAymxaEawwbCy33rN7Jjo24+YeEewZQ9fvRS 4tRD8T1CXF3i5EYB2C/saIAPwLaJpOUKc6CuyDA32q0D9A0/JQ4Fg8HJaOV148dg CAVyQdSqZQslcc8BSZmrJgc/4KsVNy+F0UwTgdKImq875D5bwKNACyJV8v9WpFEj 0NRnYc6jEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:00 2026 by rpki-client