This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer File: t_AzNOrsueClE-t-Ih98zUkoFIc.cer (raw, json) Hash identifier: drbEScpdMiM2TvT5uLfXDnYQ20RuXdx/M7brSJ+aTFo= Subject key identifier: B7:F0:33:34:EA:EC:B9:E0:A5:13:EB:7E:22:1F:7C:CD:49:28:14:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C37924E3FA69BF04893BF44E838C3EE03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 07 Feb 2026 10:07:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201445 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:37:92:4e:3f:a6:9b:f0:48:93:bf:44:e8:38:c3:ee:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 7 10:07:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7f03334eaecb9e0a513eb7e221f7ccd49281487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:c9:63:c6:a8:3e:45:dc:1d:14:cd:cd:fe: 2d:86:d3:86:bc:0b:87:b3:ef:8f:1d:a5:66:53:97: 51:01:ce:4f:4c:85:ed:ba:ab:ad:04:bc:fc:72:7a: c5:61:8a:bc:d4:85:02:ea:09:21:b7:c7:20:17:a9: 00:5c:ad:ac:c9:fd:44:54:a6:81:f3:5f:70:9a:be: 01:6c:38:93:62:e0:32:95:28:9b:01:d4:b4:cb:b4: f4:8d:c0:ec:ca:82:9a:b3:f4:f7:d8:db:79:a7:d9: 0b:97:d0:73:27:5a:6a:75:26:4c:b9:e9:c9:a5:0a: 0a:52:af:f4:6e:05:02:7d:88:15:20:90:3d:b8:a4: f9:07:95:1a:22:38:ab:46:76:5f:d7:b1:7d:86:be: 8e:c8:2e:23:6c:c7:45:23:02:c0:72:be:a8:19:fe: 21:6f:b2:a6:67:47:28:d9:39:22:64:77:ca:b7:c7: 8b:3b:7d:7a:49:2b:d5:0a:33:f0:27:9e:35:2f:59: b0:ff:5a:64:2f:eb:41:6f:5f:33:74:ee:86:53:66: bb:1a:a1:53:f9:f3:e4:c1:14:92:b6:01:bc:fa:74: 80:e1:cc:38:7f:11:18:08:18:aa:e3:bb:04:b4:a8: 99:a8:72:60:4f:26:b6:dd:2e:4b:0d:8d:82:6b:77: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F0:33:34:EA:EC:B9:E0:A5:13:EB:7E:22:1F:7C:CD:49:28:14:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201445 Signature Algorithm: sha256WithRSAEncryption 43:32:d4:53:b0:98:70:cb:37:83:6c:9d:a8:14:a8:74:83:c4: 21:00:75:bf:a4:b4:7b:d8:05:df:a9:cb:cf:a6:0e:68:8a:ec: 17:26:a5:91:ac:75:dc:b8:9c:f5:44:bd:22:63:29:e4:ba:9e: 50:3d:1b:df:08:12:c0:40:64:18:30:8a:5e:94:50:14:50:2c: 94:60:51:2e:60:fb:b4:80:fb:b2:bc:2b:b9:a0:a7:df:b4:9b: 28:06:23:bc:dc:de:e3:be:64:34:19:83:3f:99:8a:a3:de:23: 5d:78:01:41:cb:d1:c7:6d:93:0f:9f:55:e1:67:50:0d:35:6a: 44:20:26:4e:62:20:93:d7:f0:0a:14:c2:30:2d:54:c9:a5:21: 12:9f:ac:a7:a0:27:be:87:da:f2:4f:62:a1:4f:5a:5b:56:ad: 46:d2:d6:1f:e8:f0:41:72:22:e2:66:36:ac:bc:72:d0:cc:e3: d7:46:60:58:6d:69:39:71:3c:80:0d:9b:73:1a:b2:93:3c:01: 6e:86:d3:d6:6d:c7:30:70:aa:ec:a8:00:90:ee:7b:20:3e:52: cb:c2:e1:78:a6:e2:f0:1e:0f:c0:0b:4c:81:07:77:be:4f:6b: 26:cb:8c:e9:36:d2:f5:c6:bf:31:a4:f4:86:3a:af:3d:bb:e1: d1:ef:8f:fb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZw3kk4/ppvwSJO/ROg4w+4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA3MTAwNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2YwMzMzNGVhZWNiOWUwYTUxM2ViN2UyMjFmN2NjZDQ5MjgxNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OrJY8aoPkXcHRTNzf4thtOGvAuH s++PHaVmU5dRAc5PTIXtuqutBLz8cnrFYYq81IUC6gkht8cgF6kAXK2syf1EVKaB 819wmr4BbDiTYuAylSibAdS0y7T0jcDsyoKas/T32Nt5p9kLl9BzJ1pqdSZMuenJ pQoKUq/0bgUCfYgVIJA9uKT5B5UaIjirRnZf17F9hr6OyC4jbMdFIwLAcr6oGf4h b7KmZ0co2TkiZHfKt8eLO316SSvVCjPwJ541L1mw/1pkL+tBb18zdO6GU2a7GqFT +fPkwRSStgG8+nSA4cw4fxEYCBiq47sEtKiZqHJgTya23S5LDY2Ca3eQHQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLfwMzTq7LngpRPrfiIffM1JKBSHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzU4NWY0 Yi0yNmM1LTQ5NjUtODI2OS0zNmI0NjllNDE5ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvNTg1ZjRi LTI2YzUtNDk2NS04MjY5LTM2YjQ2OWU0MTllMS8xL3RfQXpOT3JzdWVDbEUtdC1J aDk4elVrb0ZJYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMS5TANBgkqhkiG9w0BAQsFAAOCAQEAQzLUU7CYcMs3 g2ydqBSodIPEIQB1v6S0e9gF36nLz6YOaIrsFyalkax13Lic9US9ImMp5LqeUD0b 3wgSwEBkGDCKXpRQFFAslGBRLmD7tID7srwruaCn37SbKAYjvNze475kNBmDP5mK o94jXXgBQcvRx22TD59V4WdQDTVqRCAmTmIgk9fwChTCMC1UyaUhEp+sp6Anvofa 8k9ioU9aW1atRtLWH+jwQXIi4mY2rLxy0Mzj10ZgWG1pOXE8gA2bcxqykzwBbobT 1m3HMHCq7KgAkO57ID5Sy8LheKbi8B4PwAtMgQd3vk9rJsuM6TbS9ca/MaT0hjqv Pbvh0e+P+w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:34 2026 by rpki-client