This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer File: aYjEvrrTj55yR6yyj7Xh5c72WIs.cer (raw, json) Hash identifier: cT0mq9XALRsNFlMTLSSlC580PAY4gAG/JKoYMEl08s0= Subject key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB81B127B1AE939704F3B2C50AE67DBD4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 13 Jan 2026 16:05:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215323 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b8:1b:12:7b:1a:e9:39:70:4f:3b:2c:50:ae:67:db:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 13 16:05:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:c0:15:db:47:6b:97:be:d3:81:2d:d3:c5: f5:7c:c5:35:a9:78:62:16:fe:62:11:cb:a4:d0:11: 2b:c2:54:7c:46:76:f5:ab:d6:27:2f:0b:f2:a4:0f: 39:d2:19:da:fb:d7:4b:6d:a6:be:df:ce:96:01:74: d4:44:a5:2a:6c:67:78:ce:7c:81:e1:f8:f0:cd:60: 18:04:51:81:9c:48:36:a8:a1:63:56:67:ef:27:7c: 87:94:53:3f:ef:90:d0:a5:8a:a1:9c:e8:f0:e7:43: 68:c3:72:5b:e4:7f:ef:5c:ff:a9:7f:70:d1:e5:6a: dd:4a:7f:8d:43:3c:fd:d3:d3:c0:eb:30:5d:85:aa: a6:21:d1:bb:21:78:8e:9a:0f:8d:68:09:e4:8a:a4: 2f:80:e5:ee:dd:e9:64:f8:fa:08:da:e8:3b:fe:76: 29:d7:fa:04:8b:ec:1c:69:65:9d:4d:46:c5:3a:68: e8:97:55:75:cb:c0:29:36:bd:4d:eb:5e:8c:04:8f: 8a:c2:9c:1d:db:05:a7:11:d5:cf:e7:37:1f:be:2b: 33:21:d2:d6:5b:db:10:11:e6:84:50:ae:df:e7:08: 0c:ee:89:fa:c3:23:4e:b4:04:24:6a:83:a7:a2:7d: 3c:c0:52:f0:0a:7a:40:c6:79:9e:2c:7d:88:fa:b2: 11:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215323 Signature Algorithm: sha256WithRSAEncryption 7b:8a:e3:9b:5c:e1:ae:68:33:25:06:ea:bf:0d:76:87:89:68: 6c:9f:0e:ad:e6:54:36:4f:95:d1:6e:f3:ae:09:c9:35:f8:21: 96:07:69:2d:ee:a3:94:d8:95:84:57:97:5c:4e:bc:e0:0e:42: 2e:25:d2:fc:09:9c:b2:60:57:8d:4d:4b:89:82:d9:18:79:bf: f2:83:c8:35:10:1d:92:95:82:e6:4c:36:46:a7:d6:84:01:39: bd:da:ef:88:c3:05:54:1e:80:95:36:54:3b:e8:c4:02:60:a8: 51:cd:86:bc:46:a8:35:26:92:d1:dd:f0:fe:e9:54:32:3b:86: af:f2:3f:69:be:dd:6d:22:47:34:ba:6c:c8:64:62:bf:dd:af: fe:f0:14:92:d2:67:6f:f0:03:6a:f1:5f:ad:bd:7d:e5:b3:94: 47:a9:99:c2:4e:ad:79:65:5e:54:11:a1:5b:82:3e:a4:b0:74: cc:b2:37:6e:16:26:9f:72:ed:f4:d2:c2:a2:54:cb:a9:2b:d6: 13:78:a6:02:a2:d9:72:50:97:da:5e:d0:20:b5:58:83:ee:2f: 41:00:69:d8:65:93:e5:41:49:d9:9b:d4:98:0b:dd:7e:13:8d: 51:9d:5b:62:64:33:1b:4f:c8:37:4a:d9:5b:17:2f:bd:23:41: e3:4d:58:6f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZu4GxJ7Guk5cE87LFCuZ9vUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEzMTYwNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTg4YzRiZWJhZDM4ZjllNzI0N2FjYjI4ZmI1ZTFlNWNlZjY1ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7zAFdtHa5e+04Et08X1fMU1qXhi Fv5iEcuk0BErwlR8Rnb1q9YnLwvypA850hna+9dLbaa+386WAXTURKUqbGd4znyB 4fjwzWAYBFGBnEg2qKFjVmfvJ3yHlFM/75DQpYqhnOjw50Now3Jb5H/vXP+pf3DR 5WrdSn+NQzz909PA6zBdhaqmIdG7IXiOmg+NaAnkiqQvgOXu3elk+PoI2ug7/nYp 1/oEi+wcaWWdTUbFOmjol1V1y8ApNr1N616MBI+Kwpwd2wWnEdXP5zcfviszIdLW W9sQEeaEUK7f5wgM7on6wyNOtAQkaoOnon08wFLwCnpAxnmeLH2I+rIRdQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGmIxL6604+eckesso+14eXO9liLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzUxY2Rm ZS0yOTI5LTQ2MzAtOWY4Yi1hN2FjMTE5MGE3MDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNTFjZGZl LTI5MjktNDYzMC05ZjhiLWE3YWMxMTkwYTcwNy8xL2FZakV2cnJUajU1eVI2eXlq N1hoNWM3MldJcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJGzANBgkqhkiG9w0BAQsFAAOCAQEAe4rjm1zhrmgz JQbqvw12h4lobJ8OreZUNk+V0W7zrgnJNfghlgdpLe6jlNiVhFeXXE684A5CLiXS /AmcsmBXjU1LiYLZGHm/8oPINRAdkpWC5kw2RqfWhAE5vdrviMMFVB6AlTZUO+jE AmCoUc2GvEaoNSaS0d3w/ulUMjuGr/I/ab7dbSJHNLpsyGRiv92v/vAUktJnb/AD avFfrb195bOUR6mZwk6teWVeVBGhW4I+pLB0zLI3bhYmn3Lt9NLColTLqSvWE3im AqLZclCX2l7QILVYg+4vQQBp2GWT5UFJ2ZvUmAvdfhONUZ1bYmQzG0/IN0rZWxcv vSNB401Ybw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:30 2026 by rpki-client