This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer File: Up-6tRcaXLIvbFTxCzostttRcj4.cer (raw, json) Hash identifier: NpLfc9GkvF2Lb8QHiygensbhnCVZdldIEqvCvqKCOcY= Subject key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAD819FBF68D2B2CB0D43B9121C087 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207942 AS: 209072 IP: 5.183.140.0/22 IP: 45.152.248.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d8:19:fb:f6:8d:2b:2c:b0:d4:3b:91:21:c0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:31:9b:a4:d1:db:f1:4b:40:bb:81:e5:85:2c: cc:f9:40:3d:ec:92:12:17:6d:00:a1:f3:cd:aa:fd: ab:19:63:61:99:f9:59:af:ad:fe:d8:b2:21:75:c6: a7:a7:91:72:1f:80:1b:45:9b:25:98:60:eb:04:6e: 35:b3:bf:10:e8:b1:71:9b:8f:33:d0:0b:ba:d2:41: f4:da:84:cf:b7:ee:71:43:e8:b0:7d:b1:de:ab:70: 2c:ac:c7:73:9f:74:09:66:4c:2b:4f:ac:ef:db:5e: a2:df:d2:04:4e:2d:62:50:be:af:b6:f6:6a:4e:45: 0b:3e:e3:89:d3:ef:98:56:ab:55:69:5c:b1:13:91: f4:30:e1:0e:76:69:0b:09:e7:db:a7:2c:c4:b5:c3: e6:5f:d8:8c:4c:0e:01:eb:51:a7:bf:9f:40:4c:dc: a1:7a:b1:96:c4:70:d4:75:53:ac:87:42:a7:40:29: f6:55:14:27:c5:df:59:18:fe:64:60:55:c1:cc:82: 8a:91:f1:c2:87:45:3c:2b:ae:65:a3:a0:74:98:21: ba:43:9e:55:c4:3f:f3:2f:57:e1:1a:de:30:0b:99: d6:88:98:c9:b1:30:50:9f:a5:ca:01:63:cc:8c:3e: ba:7b:3b:c8:de:8b:19:d6:58:79:1d:64:c0:ac:00: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.140.0/22 45.152.248.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207942 209072 Signature Algorithm: sha256WithRSAEncryption 05:c4:6a:7f:02:03:01:80:80:2f:c5:db:6a:39:4d:28:92:e2: e1:06:0a:25:5a:c1:e0:6a:6a:81:ab:08:42:84:8a:38:3a:ed: 66:37:6d:a6:0a:a1:03:81:fe:a3:0b:35:60:5a:55:d7:0e:4d: b2:d6:14:cd:56:c7:8d:c1:d6:b7:52:c7:83:ed:10:e8:99:f1: 8d:ef:70:52:bc:2b:dd:e5:be:ce:6b:d1:c4:f9:b8:4d:0e:47: c0:86:94:00:14:3f:f9:ac:fc:22:3e:8c:ab:bd:17:83:ed:fd: a2:01:5c:51:bb:1a:3d:34:ca:13:5e:f0:b3:7d:c5:b1:39:eb: e0:fb:73:67:90:a5:64:a3:99:7a:cc:ea:f6:cf:09:66:55:a9: 22:e0:23:38:00:ce:3a:4b:dc:f1:ef:c2:a4:2b:06:a5:ed:64: 36:97:34:c9:6b:36:61:7a:e9:b7:d9:f0:94:2f:30:8f:e1:58: 93:df:80:c8:83:60:cf:d2:b0:ef:4f:e7:6b:c2:41:6f:fd:46: 1c:f0:42:ce:ec:e2:23:21:4a:a4:93:c7:1c:bf:58:6d:c1:b5: 44:3b:27:18:70:c6:60:1e:59:b4:82:b9:fc:53:5d:bc:64:f8: 37:e9:17:8d:04:11:24:17:8a:10:8f:c9:d2:12:24:60:a8:e2: 94:fd:4a:3e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt26tgZ+/aNKyyw1DuRIcCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjlmYmFiNTE3MWE1Y2IyMmY2YzU0ZjEwYjNhMmNiNmRiNTE3MjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zGbpNHb8UtAu4HlhSzM+UA97JIS F20AofPNqv2rGWNhmflZr63+2LIhdcanp5FyH4AbRZslmGDrBG41s78Q6LFxm48z 0Au60kH02oTPt+5xQ+iwfbHeq3AsrMdzn3QJZkwrT6zv216i39IETi1iUL6vtvZq TkULPuOJ0++YVqtVaVyxE5H0MOEOdmkLCefbpyzEtcPmX9iMTA4B61Gnv59ATNyh erGWxHDUdVOsh0KnQCn2VRQnxd9ZGP5kYFXBzIKKkfHCh0U8K65lo6B0mCG6Q55V xD/zL1fhGt4wC5nWiJjJsTBQn6XKAWPMjD66ezvI3osZ1lh5HWTArABUxQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFFKfurUXGlyyL2xU8Qs6LLbbUXI+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzUyODlj NC0wMmI1LTQ2NWUtOGNiZC03NzM3MzI2NTJmNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNTI4OWM0 LTAyYjUtNDY1ZS04Y2JkLTc3MzczMjY1MmY0Zi8xL1VwLTZ0UmNhWExJdmJGVHhD em9zdHR0UmNqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCBbeMAwQALZj4MB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwMsRgIDAzCwMA0GCSqGSIb3DQEBCwUAA4IBAQAFxGp/AgMBgIAvxdtq OU0okuLhBgolWsHgamqBqwhChIo4Ou1mN22mCqEDgf6jCzVgWlXXDk2y1hTNVseN wda3UseD7RDomfGN73BSvCvd5b7Oa9HE+bhNDkfAhpQAFD/5rPwiPoyrvReD7f2i AVxRuxo9NMoTXvCzfcWxOevg+3NnkKVko5l6zOr2zwlmVaki4CM4AM46S9zx78Kk Kwal7WQ2lzTJazZheum32fCULzCP4ViT34DIg2DP0rDvT+drwkFv/UYc8ELO7OIj IUqkk8ccv1htwbVEOycYcMZgHlm0grn8U128ZPg36ReNBBEkF4oQj8nSEiRgqOKU /Uo+ -----END CERTIFICATE-----Generated at Tue Jan 27 01:17:24 2026 by rpki-client