This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.cer (raw, json) Hash identifier: bt2FQsVdbT5JZAxUzmwz81cBL/SUIJmI03EFNUUg0iU= Subject key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB302DCE5F4332C2A0013316D5134A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.232.37.0/24 IP: 2001:67c:2f94::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:30:2d:ce:5f:43:32:c2:a0:01:33:16:d5:13:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2ea593464858e293952345cf4e97792c8811057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:19:7f:3c:9f:4b:12:b6:95:0a:c4:2d:30: 08:1a:56:f0:af:4d:f5:fe:fc:65:17:a6:0d:a0:49: df:08:57:ea:48:64:5c:b6:d2:20:db:d6:e5:6f:b1: d0:0a:2e:d5:12:29:af:fa:83:7d:05:bc:94:e2:f5: 96:be:3c:f7:5d:4b:1b:ae:5e:b2:83:96:d9:85:71: 72:79:43:7e:e9:44:b9:f9:1d:c4:d6:7f:e5:58:67: 9e:26:fc:5a:ae:3c:7d:31:fd:22:be:55:5e:ab:2d: 38:39:8a:ec:5f:18:76:0b:d3:6b:ec:b1:12:27:08: 73:20:57:f1:d8:6c:47:f0:18:81:15:77:de:e5:9d: c2:50:5f:87:78:99:86:fa:b4:4a:3c:ca:d7:44:cc: 1b:2b:c2:be:42:45:4f:52:a8:8e:25:88:2d:91:97: f3:68:7a:25:c3:d3:91:59:1d:b4:8f:ef:f4:99:21: 8b:3d:1c:35:c3:6a:03:35:d1:90:6d:d1:f2:ef:dd: 8e:a8:30:90:78:e3:3c:ec:75:6c:33:98:03:7b:b5: 44:06:e9:bb:df:f2:84:af:ee:b3:99:b9:0b:ba:67: 91:ec:5a:31:8a:58:ba:33:a0:5e:66:d5:6d:d7:3b: 05:d3:31:92:59:74:36:e9:a1:7a:66:aa:87:29:80: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.37.0/24 IPv6: 2001:67c:2f94::/48 Signature Algorithm: sha256WithRSAEncryption 67:6a:41:e7:1e:59:1c:6c:41:a4:1b:01:be:a9:a7:c5:05:9d: 94:68:58:cb:d2:42:5e:bf:5e:21:0d:3e:3f:0e:a3:9c:ac:73: 93:e9:5f:4b:b9:c9:43:e0:a2:58:58:7b:8f:d6:6f:ad:ea:52: 32:38:c0:8d:20:5e:61:24:d3:3c:34:2f:99:cd:d7:27:79:79: d8:d9:a0:c6:a0:4a:b8:f8:70:71:fa:1b:34:98:88:d0:89:7d: 6e:50:e1:b3:fc:0f:fa:f0:9b:8c:1a:d8:57:2e:df:39:b8:9c: bf:f4:8e:5e:7b:33:d6:77:b4:cd:56:dc:e7:be:42:1b:e1:57: 3a:10:53:50:0f:00:91:e8:0f:81:e9:14:bc:09:85:3d:44:86: fe:df:17:1d:3a:42:9e:1c:6b:46:a9:55:9e:4b:be:17:e6:34: 9c:6f:0b:05:ee:2b:ea:78:70:02:f2:f2:7d:34:f1:6a:43:83: f5:27:08:2e:75:5c:34:32:41:7d:3f:d5:84:ec:3f:8a:d5:ba: c1:48:4c:2d:98:01:40:02:93:09:cc:30:f8:78:b1:15:49:75: bb:6c:cb:3a:0a:f9:db:fd:34:be:82:c5:ad:e3:31:9a:e2:17: a3:f9:24:4e:1e:0a:46:19:55:3c:57:6f:45:4c:35:dc:32:f0: 13:3e:b3:5a -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt26zAtzl9DMsKgATMW1RNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmVhNTkzNDY0ODU4ZTI5Mzk1MjM0NWNmNGU5Nzc5MmM4ODExMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9wZfzyfSxK2lQrELTAIGlbwr031 /vxlF6YNoEnfCFfqSGRcttIg29blb7HQCi7VEimv+oN9BbyU4vWWvjz3XUsbrl6y g5bZhXFyeUN+6US5+R3E1n/lWGeeJvxarjx9Mf0ivlVeqy04OYrsXxh2C9Nr7LES JwhzIFfx2GxH8BiBFXfe5Z3CUF+HeJmG+rRKPMrXRMwbK8K+QkVPUqiOJYgtkZfz aHolw9ORWR20j+/0mSGLPRw1w2oDNdGQbdHy792OqDCQeOM87HVsM5gDe7VEBum7 3/KEr+6zmbkLumeR7Foxili6M6BeZtVt1zsF0zGSWXQ26aF6ZqqHKYAcdwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFOLqWTRkhY4pOVI0XPTpd5LIgRBXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2MzOTMy Zi1mNDc2LTRkNWMtYmI1YS02MmU0YmFlZTRmYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvYzM5MzJm LWY0NzYtNGQ1Yy1iYjVhLTYyZTRiYWVlNGZjNS8xLzR1cFpOR1NGamlrNVVqUmM5 T2wza3NpQkVGYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW+glMA8EAgACMAkDBwAgAQZ8L5QwDQYJKoZI hvcNAQELBQADggEBAGdqQeceWRxsQaQbAb6pp8UFnZRoWMvSQl6/XiENPj8Oo5ys c5PpX0u5yUPgolhYe4/Wb63qUjI4wI0gXmEk0zw0L5nN1yd5edjZoMagSrj4cHH6 GzSYiNCJfW5Q4bP8D/rwm4wa2Fcu3zm4nL/0jl57M9Z3tM1W3Oe+QhvhVzoQU1AP AJHoD4HpFLwJhT1Ehv7fFx06Qp4ca0apVZ5LvhfmNJxvCwXuK+p4cALy8n008WpD g/UnCC51XDQyQX0/1YTsP4rVusFITC2YAUACkwnMMPh4sRVJdbtsyzoK+dv9NL6C xa3jMZriF6P5JE4eCkYZVTxXb0VMNdwy8BM+s1o= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:11 2026 by rpki-client