This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer File: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer (raw, json) Hash identifier: 20KGgK2IC8cwf4H7+qEde+m8o9g8ybRXufPLFgPeknM= Subject key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC5174DA67F10B552438762FBBEE31 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 83.220.28.0/23 IP: 2a14:70c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:51:74:da:67:f1:0b:55:24:38:76:2f:bb:ee:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:52:39:99:ca:fa:81:fc:12:68:99:34:ab:d7: 16:1b:f1:f1:cf:3e:a9:3c:ed:47:36:85:99:67:82: 85:5c:36:56:04:e2:67:bc:54:55:cd:af:f0:dd:1b: 1a:5f:23:54:ee:42:ef:83:d6:3e:7f:a8:6a:9a:68: 87:fa:ae:d7:5a:89:d0:e1:5b:ea:03:82:92:97:36: e8:2a:3b:a5:a5:7d:b9:e7:e7:8d:0d:09:ed:e7:ca: 29:98:51:4a:d1:a0:ab:c0:19:eb:76:35:12:35:f9: f5:ef:26:2b:f1:96:a2:27:eb:3b:68:8e:62:43:e7: 02:0d:8e:0f:ba:a1:a0:bc:35:b7:5f:e0:13:ee:c3: 39:2f:b5:0a:af:24:15:26:b1:01:c7:87:f3:61:51: 5a:86:77:29:d8:bd:a9:3c:9e:c6:d7:9a:78:15:97: b9:33:cb:32:2a:ac:66:b8:ed:97:f4:54:ce:0e:0d: 2e:fc:fc:63:47:f2:05:3a:9c:53:d6:af:10:61:e2: 11:51:61:be:22:5a:e9:cf:c5:ac:36:05:06:5c:d9: 29:90:d0:26:9a:a5:46:05:63:c1:48:b2:d2:37:9f: 6e:6b:40:75:ab:8b:cc:45:2a:cb:81:45:fb:33:09: fd:f1:41:79:f8:88:9a:95:27:f8:5e:40:27:b3:0b: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.220.28.0/23 IPv6: 2a14:70c0::/29 Signature Algorithm: sha256WithRSAEncryption 12:dc:89:58:5a:55:51:94:0a:7c:4c:a5:56:20:8a:50:a7:b8: 04:3e:7f:7e:90:62:d5:cd:4f:c6:4d:6b:3a:b5:0a:2f:36:91: db:c8:44:a0:e6:72:73:ca:da:fb:9f:79:96:72:64:10:aa:bd: a2:48:9f:12:3e:ff:ed:bd:4d:d7:d2:2e:0e:ca:18:26:55:af: bc:f2:04:bf:7f:de:13:ac:08:92:9a:20:a8:41:e4:3e:3f:88: 16:c8:95:1a:f1:69:c4:eb:53:a3:25:2b:93:4a:71:75:da:eb: ad:91:68:8d:00:8a:2c:59:aa:47:de:81:01:73:90:21:eb:44: b3:b5:c6:6f:7e:bb:e5:08:7b:1b:17:2f:36:e4:f3:d1:08:b8: ae:a9:29:8f:a1:75:c9:9e:17:ec:c7:fc:26:99:2e:62:d7:bb: 3e:5c:47:6d:8a:96:33:3b:7c:57:30:f5:d5:83:62:48:38:4d: 32:a6:65:69:ac:9a:4b:73:7b:c7:23:23:58:3b:9a:04:d7:23: c8:e6:9e:00:3c:43:07:ce:b9:03:83:d0:d3:c7:b1:34:c0:2c: 79:1c:f3:30:5a:5e:55:67:df:6a:f0:e9:50:c9:20:5e:82:cb: 6c:51:df:b1:37:40:1c:1c:ea:38:f7:1c:93:76:d6:28:3e:f5: c5:ca:9e:7c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57FF02mfxC1UkOHYvu+4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTg1MGYxYmZkOThkODQwYTJhYThhODNmYTRmMDg5NDQzOWQ5OThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVI5mcr6gfwSaJk0q9cWG/Hxzz6p PO1HNoWZZ4KFXDZWBOJnvFRVza/w3RsaXyNU7kLvg9Y+f6hqmmiH+q7XWonQ4Vvq A4KSlzboKjulpX255+eNDQnt58opmFFK0aCrwBnrdjUSNfn17yYr8ZaiJ+s7aI5i Q+cCDY4PuqGgvDW3X+AT7sM5L7UKryQVJrEBx4fzYVFahncp2L2pPJ7G15p4FZe5 M8syKqxmuO2X9FTODg0u/PxjR/IFOpxT1q8QYeIRUWG+Ilrpz8WsNgUGXNkpkNAm mqVGBWPBSLLSN59ua0B1q4vMRSrLgUX7Mwn98UF5+IialSf4XkAnswsLlQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEmFDxv9mNhAoqqKg/pPCJRDnZmNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzUwZWYy ZS03YTFjLTQwNWEtOTExNy1kZTE0ZTM1MzJmZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvNTBlZjJl LTdhMWMtNDA1YS05MTE3LWRlMTRlMzUzMmZkOC8xL1NZVVBHXzJZMkVDaXFvcUQt azhJbEVPZG1ZMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBU9wcMA0EAgACMAcDBQMqFHDAMA0GCSqGSIb3 DQEBCwUAA4IBAQAS3IlYWlVRlAp8TKVWIIpQp7gEPn9+kGLVzU/GTWs6tQovNpHb yESg5nJzytr7n3mWcmQQqr2iSJ8SPv/tvU3X0i4OyhgmVa+88gS/f94TrAiSmiCo QeQ+P4gWyJUa8WnE61OjJSuTSnF12uutkWiNAIosWapH3oEBc5Ah60SztcZvfrvl CHsbFy825PPRCLiuqSmPoXXJnhfsx/wmmS5i17s+XEdtipYzO3xXMPXVg2JIOE0y pmVprJpLc3vHIyNYO5oE1yPI5p4APEMHzrkDg9DTx7E0wCx5HPMwWl5VZ99q8OlQ ySBegstsUd+xN0AcHOo49xyTdtYoPvXFyp58 -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:35 2026 by rpki-client