This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer File: UpIxske_9ltMY0GQfs1eq6f5ypI.cer (raw, json) Hash identifier: lN4CUzb3WKuYBqmG5RQvQqYS2OGH/vK4HB0FvSlJECQ= Subject key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2D804E7BBA7B536FC43549AA8DE7B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200479 IP: 2001:67c:2344::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d8:04:e7:bb:a7:b5:36:fc:43:54:9a:a8:de:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:3d:7a:74:36:68:f6:7a:63:3e:64:f4:94: e5:aa:d8:4a:29:9e:73:d5:32:42:4d:45:00:68:9d: b2:df:6d:4e:74:42:fb:4b:e6:6b:d7:d7:d8:f7:0d: 75:27:c2:bc:66:97:af:60:76:3c:57:93:3e:cd:78: 0b:1a:02:f7:cb:4c:bd:7a:3b:99:61:59:20:8f:80: 42:bf:98:b1:ab:37:11:d5:4c:7f:f7:50:19:99:15: 71:12:a3:4d:dc:77:29:88:ef:77:5f:a5:0c:e7:c8: 98:32:d0:1f:f6:5c:b1:69:2a:02:ca:b6:ed:1d:9f: fc:d0:c1:f0:28:d5:79:32:61:33:e1:a7:33:80:b5: 18:17:13:bd:2f:ff:45:54:6d:02:b9:d5:95:cf:e6: 9a:aa:32:6c:e0:a5:be:01:ea:99:b3:3c:6b:8b:bf: d3:9a:93:7f:ad:7d:37:a3:a6:36:e9:97:c2:7e:63: 87:3c:df:b1:45:3c:56:9a:b1:3a:d6:0e:a0:a7:19: 36:28:01:c8:a5:2f:ed:f6:ab:9d:3b:f5:53:04:d6: 93:b6:07:04:5e:7d:19:20:97:0b:8b:5b:89:78:1c: 22:9d:60:81:0f:38:c3:e4:fc:3f:03:86:d4:ea:6e: 94:25:9b:0a:de:46:6a:12:15:74:fe:4d:cc:57:e1: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2344::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200479 Signature Algorithm: sha256WithRSAEncryption 7b:6e:9d:a9:69:53:8e:97:2e:3a:9b:c4:63:79:9e:bb:23:f0: 3a:e3:a8:0a:ab:fd:9d:58:36:d7:ba:38:b4:34:6a:b4:6f:5d: e0:f9:d8:c7:14:8b:c9:cc:6d:6a:7a:ff:d7:38:6d:1a:49:49: 3d:14:ff:4c:60:6d:04:07:1b:6b:be:0b:d9:76:5f:6b:b7:27: 1b:d2:cf:f0:11:1e:79:c6:80:8c:45:80:71:70:3d:11:17:e3: e3:d2:a2:cc:98:b0:f8:27:5e:4a:74:0a:e0:4d:89:7d:9f:0f: 5a:f6:87:30:a6:35:a9:dc:e1:15:7a:2f:d2:d8:f1:d2:b6:5e: 99:86:0c:aa:fe:df:2e:d3:13:66:8f:77:b2:bb:3f:aa:17:6b: e7:3b:28:7d:b6:84:a1:98:9e:ed:2c:7e:b9:d7:1f:e1:dc:c1: 62:95:53:45:6d:e9:e6:41:5b:85:cc:3c:b9:b1:7f:89:12:4b: 7d:cd:43:50:8c:75:1b:1a:dc:fa:dc:2d:64:7a:2f:8f:56:8d: eb:3f:38:1f:ce:f0:0a:3e:92:e8:6f:05:09:dd:0d:2c:ab:e3: cd:e2:1d:49:ae:81:dc:25:f4:e3:14:5b:d2:25:9e:21:7a:de: 56:72:ab:72:67:5a:41:88:0c:c6:63:fe:84:87:2a:6f:ac:a2: bf:2f:90:e1 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4otgE57untTb8Q1SaqN57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjkyMzFiMjQ3YmZmNjViNGM2MzQxOTA3ZWNkNWVhYmE3ZjljYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiQ9enQ2aPZ6Yz5k9JTlqthKKZ5z 1TJCTUUAaJ2y321OdEL7S+Zr19fY9w11J8K8ZpevYHY8V5M+zXgLGgL3y0y9ejuZ YVkgj4BCv5ixqzcR1Ux/91AZmRVxEqNN3HcpiO93X6UM58iYMtAf9lyxaSoCyrbt HZ/80MHwKNV5MmEz4aczgLUYFxO9L/9FVG0CudWVz+aaqjJs4KW+AeqZszxri7/T mpN/rX03o6Y26ZfCfmOHPN+xRTxWmrE61g6gpxk2KAHIpS/t9qudO/VTBNaTtgcE Xn0ZIJcLi1uJeBwinWCBDzjD5Pw/A4bU6m6UJZsK3kZqEhV0/k3MV+EJlwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFFKSMbJHv/ZbTGNBkH7NXqun+cqSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzhlYzk2 ZC1kNjFjLTQ2YWMtYmY1NC02NTEzNWNmMmY4MTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvOGVjOTZk LWQ2MWMtNDZhYy1iZjU0LTY1MTM1Y2YyZjgxNS8xL1VwSXhza2VfOWx0TVkwR1Fm czFlcTZmNXlwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCNEMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMPHzANBgkqhkiG9w0BAQsFAAOCAQEAe26dqWlTjpcuOpvEY3meuyPwOuOo Cqv9nVg217o4tDRqtG9d4PnYxxSLycxtanr/1zhtGklJPRT/TGBtBAcba74L2XZf a7cnG9LP8BEeecaAjEWAcXA9ERfj49KizJiw+CdeSnQK4E2JfZ8PWvaHMKY1qdzh FXov0tjx0rZemYYMqv7fLtMTZo93srs/qhdr5zsofbaEoZie7Sx+udcf4dzBYpVT RW3p5kFbhcw8ubF/iRJLfc1DUIx1Gxrc+twtZHovj1aN6z84H87wCj6S6G8FCd0N LKvjzeIdSa6B3CX04xRb0iWeIXreVnKrcmdaQYgMxmP+hIcqb6yivy+Q4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:45 2026 by rpki-client