This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer File: az921hCBSGU2b6pnz8Za0GnHz8Q.cer (raw, json) Hash identifier: ojaY/pIzJXrZmEKyqqjZ8Q5nYx+FHi9iI25YLMXFcfY= Subject key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE5A3E062A836A1214A8240151F2B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202842 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5a:3e:06:2a:83:6a:12:14:a8:24:01:51:f2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:d1:09:52:52:fb:3d:1e:87:06:21:2c:d6: bf:3f:6c:ab:c1:9f:e8:97:3c:ed:10:ef:1c:cb:bd: d7:8b:b6:61:64:ba:79:fe:cc:7b:3a:61:04:cd:fb: 1f:7f:12:60:f2:87:38:d6:6b:97:53:92:fe:1d:d7: c8:44:53:ac:ea:40:73:69:89:5c:c7:9e:c4:e6:77: 15:64:bb:54:3b:ae:fd:4a:f3:4d:fc:10:69:80:0f: c0:9a:ff:af:ca:3d:e2:10:34:80:ad:56:18:9d:54: 74:3c:a8:dc:72:e7:c5:97:ff:81:9a:3f:ec:d6:52: 59:8b:1f:5e:a6:31:ef:26:24:18:d4:49:24:03:32: 6e:f4:76:bc:92:04:bb:a7:d6:46:1a:59:83:b4:2d: 1e:91:91:f0:c6:50:f5:8e:7a:08:95:99:1f:b5:8e: 63:6c:20:99:9c:09:3d:97:37:3c:89:68:36:d5:6b: 4a:18:a9:6a:1a:2f:8f:ad:8a:ac:c6:6d:c8:27:f8: d1:ee:27:3d:ae:6b:c1:a8:7c:10:53:75:56:5a:fe: 3f:3a:00:69:93:b6:50:ed:51:ad:9d:7b:e0:25:3d: 45:ae:9c:5b:cc:65:f0:b8:c2:df:2f:eb:d8:d7:46: 0e:55:4c:8b:69:b8:80:23:8f:44:c9:38:8b:86:9f: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202842 Signature Algorithm: sha256WithRSAEncryption 0d:ff:3a:b3:a2:02:33:38:99:13:16:e6:fc:48:d9:7c:7a:4f: 13:9c:49:b2:84:8d:a0:75:0c:63:a9:40:62:21:a0:2f:9e:f4: cb:93:c3:14:a6:60:69:e5:d2:9b:e7:88:02:08:c8:dd:91:d8: 99:fb:17:88:14:03:1f:e6:0d:b9:3b:59:ce:5f:38:0e:5b:f1: be:b7:80:61:c4:83:5b:6b:38:ba:25:a5:84:18:ea:47:92:72: 30:c5:90:78:df:0e:24:c8:c0:2e:ad:7d:21:be:55:f8:dd:c7: de:94:b7:60:c8:a3:20:ec:7a:1d:c8:9e:c6:aa:d8:f8:0e:a8: 71:89:f4:14:d7:17:89:25:aa:e3:dc:5a:8e:6c:5a:47:cb:b0: bf:09:17:62:96:a9:40:5e:3f:3e:e7:53:7a:3d:0b:f1:da:6b: 69:15:4b:98:6b:13:76:06:fc:18:f7:89:22:89:4d:83:e9:f6: 1c:e3:7e:a3:fd:24:59:f6:ef:4e:ad:9f:b5:45:27:47:49:ae: cc:a2:0d:82:40:05:e2:16:35:e5:f5:c1:18:91:cf:ca:8f:e3: 2e:14:f8:a2:d0:ac:1d:49:3e:0c:f9:80:c4:7e:25:49:6d:bc: 17:d4:0e:7e:0b:a3:72:7c:ef:d5:96:42:fc:fe:3f:2b:a9:a6: c2:b1:fb:01 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87lo+BiqDahIUqCQBUfK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjNmNzZkNjEwODE0ODY1MzY2ZmFhNjdjZmM2NWFkMDY5YzdjZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIrRCVJS+z0ehwYhLNa/P2yrwZ/o lzztEO8cy73Xi7ZhZLp5/sx7OmEEzfsffxJg8oc41muXU5L+HdfIRFOs6kBzaYlc x57E5ncVZLtUO679SvNN/BBpgA/Amv+vyj3iEDSArVYYnVR0PKjccufFl/+Bmj/s 1lJZix9epjHvJiQY1EkkAzJu9Ha8kgS7p9ZGGlmDtC0ekZHwxlD1jnoIlZkftY5j bCCZnAk9lzc8iWg21WtKGKlqGi+PrYqsxm3IJ/jR7ic9rmvBqHwQU3VWWv4/OgBp k7ZQ7VGtnXvgJT1FrpxbzGXwuMLfL+vY10YOVUyLabiAI49EyTiLhp/WYQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGs/dtYQgUhlNm+qZ8/GWtBpx8/EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzBkNDRh Mi1hMDQyLTQ4YjEtOGIwNC1mNWQwMjg1NGY1MWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvMGQ0NGEy LWEwNDItNDhiMS04YjA0LWY1ZDAyODU0ZjUxZi8xL2F6OTIxaENCU0dVMmI2cG56 OFphMEduSHo4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYWjANBgkqhkiG9w0BAQsFAAOCAQEADf86s6ICMziZ Exbm/EjZfHpPE5xJsoSNoHUMY6lAYiGgL570y5PDFKZgaeXSm+eIAgjI3ZHYmfsX iBQDH+YNuTtZzl84DlvxvreAYcSDW2s4uiWlhBjqR5JyMMWQeN8OJMjALq19Ib5V +N3H3pS3YMijIOx6HciexqrY+A6ocYn0FNcXiSWq49xajmxaR8uwvwkXYpapQF4/ PudTej0L8dpraRVLmGsTdgb8GPeJIolNg+n2HON+o/0kWfbvTq2ftUUnR0muzKIN gkAF4hY15fXBGJHPyo/jLhT4otCsHUk+DPmAxH4lSW28F9QOfgujcnzv1ZZC/P4/ K6mmwrH7AQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:07 2026 by rpki-client