This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer File: AY9TOgxHePOMEstY3Xtq8l-MrOc.cer (raw, json) Hash identifier: LS4CdCc7dBGDDN7iGsHYHel/0ar+3iMYmIEYp9ErD5c= Subject key identifier: 01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA258BEF06799758ABD102A795151BE5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 17:38:36 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 59479 IP: 81.161.64.0/20 IP: 2001:67c:103c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:58:be:f0:67:99:75:8a:bd:10:2a:79:51:51:be:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 17:38:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:44:38:ac:3d:83:6c:b8:5b:91:cb:e3:f6:68: e5:e1:1e:09:47:01:27:41:c3:61:b8:27:9a:c8:ef: 90:6f:04:e2:c3:67:07:47:7a:55:d6:92:73:3d:5a: 7d:41:92:01:3b:9d:93:8c:4f:de:98:20:0b:16:92: ef:5f:c4:40:ca:34:79:e8:21:c3:99:cb:ea:83:3c: 80:b2:56:ef:61:04:28:e0:8c:2d:64:94:48:c1:e4: e2:e1:24:e1:78:68:11:df:bf:26:03:4f:34:aa:06: 5d:fd:34:5d:86:a5:e1:e4:e7:d4:db:87:50:21:3f: 38:77:80:c0:d4:97:51:8b:12:c8:2f:4c:d3:a4:5a: 8c:40:d8:30:84:ac:ec:56:16:45:db:f8:a5:68:11: 8c:44:54:37:73:ac:ed:17:5f:6a:26:d1:b8:e3:f2: 48:c6:f3:fc:ff:f0:3e:f3:2d:a9:a7:72:c9:08:a8: 0e:f3:72:d2:78:37:08:f2:52:64:90:df:5b:1b:da: 36:a0:75:61:8e:31:66:52:e2:bd:cf:86:e3:4b:e1: 0f:cd:06:9a:e2:35:ae:48:b2:ae:99:04:42:03:c7: 02:d5:7f:8a:1c:5b:86:b0:86:57:ac:5f:87:23:30: 57:e6:3f:76:8e:f2:08:99:5f:3e:2e:35:08:08:60: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.64.0/20 IPv6: 2001:67c:103c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59479 Signature Algorithm: sha256WithRSAEncryption 6e:d0:c2:bf:a0:f6:ff:e9:48:b9:21:d1:d1:75:8e:f3:fc:21: f7:89:08:c3:27:54:db:1e:5d:d4:e1:33:dd:90:d7:3e:fc:e1: da:af:ae:30:8b:65:b5:e4:2e:9c:fb:dc:8c:dd:85:48:24:d2: 86:49:50:2e:90:1e:03:58:53:b2:f2:82:45:68:e4:66:70:21: 2e:11:00:81:a3:62:a4:18:b8:74:38:51:39:e0:57:9c:2d:f2: 54:79:de:2e:72:73:e7:1d:d6:63:b3:85:dc:0a:63:21:5c:0d: db:2f:a2:3d:34:5f:ee:13:85:a5:6a:1a:c8:6b:70:26:73:d6: 0d:0b:8a:6f:84:5e:cd:63:84:0b:70:0c:39:9c:dc:1f:c0:bd: 7d:5e:41:c8:13:ee:df:fd:24:15:86:47:84:83:cc:08:ec:e8: df:74:85:b9:9f:36:04:63:07:1f:7a:74:b4:b3:66:c9:f5:55: 43:18:f8:bf:5e:37:ec:57:13:f2:31:88:23:5f:72:24:91:4b: 4a:61:9f:5c:da:43:e1:3f:2a:cc:51:c5:df:6b:21:32:a2:a0: 53:48:d6:cc:2d:30:5a:6b:96:19:66:47:05:bf:de:e4:24:07: ca:8a:a2:16:fd:df:87:55:e8:0d:60:a7:38:10:69:69:40:6f: 25:7e:03:d9 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZqiWL7wZ5l1ir0QKnlRUb5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTczODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMThmNTMzYTBjNDc3OGYzOGMxMmNiNThkZDdiNmFmMjVmOGNhY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Q4rD2DbLhbkcvj9mjl4R4JRwEn QcNhuCeayO+QbwTiw2cHR3pV1pJzPVp9QZIBO52TjE/emCALFpLvX8RAyjR56CHD mcvqgzyAslbvYQQo4IwtZJRIweTi4STheGgR378mA080qgZd/TRdhqXh5OfU24dQ IT84d4DA1JdRixLIL0zTpFqMQNgwhKzsVhZF2/ilaBGMRFQ3c6ztF19qJtG44/JI xvP8//A+8y2pp3LJCKgO83LSeDcI8lJkkN9bG9o2oHVhjjFmUuK9z4bjS+EPzQaa 4jWuSLKumQRCA8cC1X+KHFuGsIZXrF+HIzBX5j92jvIImV8+LjUICGD53wIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFAGPUzoMR3jzjBLLWN17avJfjKznMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2VkNGJh Yy1lMGUyLTRlMjktOThhNy1lZjg2MmUzZTcxMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvZWQ0YmFj LWUwZTItNGUyOS05OGE3LWVmODYyZTNlNzEyOC8xL0FZOVRPZ3hIZVBPTUVzdFkz WHRxOGwtTXJPYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQEUaFAMA8EAgACMAkDBwAgAQZ8EDwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAOhXMA0GCSqGSIb3DQEBCwUAA4IBAQBu0MK/oPb/ 6Ui5IdHRdY7z/CH3iQjDJ1TbHl3U4TPdkNc+/OHar64wi2W15C6c+9yM3YVIJNKG SVAukB4DWFOy8oJFaORmcCEuEQCBo2KkGLh0OFE54FecLfJUed4ucnPnHdZjs4Xc CmMhXA3bL6I9NF/uE4WlahrIa3Amc9YNC4pvhF7NY4QLcAw5nNwfwL19XkHIE+7f /SQVhkeEg8wI7OjfdIW5nzYEYwcfenS0s2bJ9VVDGPi/XjfsVxPyMYgjX3IkkUtK YZ9c2kPhPyrMUcXfayEyoqBTSNbMLTBaa5YZZkcFv97kJAfKiqIW/d+HVegNYKc4 EGlpQG8lfgPZ -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:44 2025 by rpki-client