This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer File: UpJ4MtOYUOhR7staBRFpKZHdpdk.cer (raw, json) Hash identifier: 9OUV1A6qfAThAcktNbHpB+3yY6fzf23GpE0mXSaDlmM= Subject key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDEC26B6D41B0F1787B67D9D487E40 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35252 IP: 85.119.160.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ec:26:b6:d4:1b:0f:17:87:b6:7d:9d:48:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52927832d39850e851eecb5a0511692991dda5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:32:26:20:ac:63:56:94:62:7a:a2:e2:d8:ca: 4e:d1:7c:88:da:9f:47:c2:9f:ac:8e:20:63:13:71: ce:93:9b:ce:4b:d8:98:49:21:bb:81:70:d4:bf:31: e3:a4:3e:36:d0:b3:23:dc:44:9f:f2:1d:b0:09:e3: 66:2e:b3:de:0d:27:6f:23:f2:8e:f9:d4:95:7a:81: 5e:b8:ed:a3:32:53:c4:c2:07:e6:f9:a7:a9:0d:f5: 13:33:fb:94:35:cc:54:48:bd:35:38:49:2e:16:d5: 18:1f:ef:00:c3:69:54:dc:68:4f:84:fb:0e:54:a7: 75:b9:84:10:bd:1f:e2:30:07:ca:7d:fd:bd:b4:8c: 12:bf:d2:fa:50:a3:fd:e8:e1:93:86:cd:8e:b7:d8: d4:30:7c:3d:79:ed:dc:7e:1e:12:a7:8d:fc:90:00: 45:45:73:38:c1:fd:41:c2:42:1e:f0:e5:cc:9f:ce: 4b:61:24:61:d5:42:14:99:18:59:ef:99:61:b5:22: 01:1d:d9:88:45:74:da:7d:c2:44:4c:da:c8:fd:e9: 5a:a7:7e:70:2b:4b:78:e8:80:8e:53:6a:cf:30:80: c7:a6:fc:3c:3f:0a:7a:2f:3e:f0:a7:a0:2c:b9:b7: 19:2b:27:e5:c8:ee:98:7a:1a:5b:01:d8:4f:92:dd: 75:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.160.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35252 Signature Algorithm: sha256WithRSAEncryption 49:a3:4d:c3:a2:10:c8:93:05:b3:40:30:8e:77:92:69:00:fa: 80:0f:e2:5b:a8:6e:7d:80:0f:09:e3:46:e5:f9:9b:ef:51:7d: 8a:e0:7a:f4:30:c8:76:eb:00:57:b1:82:8a:1d:8a:6c:cc:e1: 96:e6:0b:00:20:35:19:70:f2:8c:d5:ae:c8:87:2f:c6:75:dc: 0b:ac:87:ab:73:22:e4:1f:2e:6d:5f:ff:28:7d:06:43:45:ba: 50:73:93:9e:da:cf:47:ba:43:44:a8:e1:57:1e:b4:12:f5:c1: 24:c6:1c:e9:2e:26:36:f5:c9:62:46:38:8c:5d:b0:e6:1b:58: cc:f0:74:fc:59:e8:7a:a2:b6:77:4a:76:92:40:72:0a:bd:a6: 45:6e:c2:15:27:7f:a4:64:8c:e9:73:b5:d5:a3:1c:4d:ea:4e: bd:6e:4b:a7:80:59:32:7d:02:28:28:26:97:aa:59:95:41:86: 7a:d8:5f:da:61:05:74:67:c9:18:97:80:42:88:79:a4:5a:1b: ec:11:50:08:fb:cd:26:8f:f9:98:aa:16:56:e8:c7:c3:98:c4: 07:a1:1f:4a:79:a6:f3:95:fd:1b:f2:6e:fa:40:3e:f9:ad:5c: e9:a7:0d:54:7f:09:c7:73:f7:f1:e5:7e:e4:4f:b0:50:a6:2c: 1c:52:ab:89 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87ewmttQbDxeHtn2dSH5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjkyNzgzMmQzOTg1MGU4NTFlZWNiNWEwNTExNjkyOTkxZGRhNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DImIKxjVpRieqLi2MpO0XyI2p9H wp+sjiBjE3HOk5vOS9iYSSG7gXDUvzHjpD420LMj3ESf8h2wCeNmLrPeDSdvI/KO +dSVeoFeuO2jMlPEwgfm+aepDfUTM/uUNcxUSL01OEkuFtUYH+8Aw2lU3GhPhPsO VKd1uYQQvR/iMAfKff29tIwSv9L6UKP96OGThs2Ot9jUMHw9ee3cfh4Sp438kABF RXM4wf1BwkIe8OXMn85LYSRh1UIUmRhZ75lhtSIBHdmIRXTafcJETNrI/elap35w K0t46ICOU2rPMIDHpvw8Pwp6Lz7wp6AsubcZKyflyO6YehpbAdhPkt11WQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFKSeDLTmFDoUe7LWgURaSmR3aXZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzEwNDI5 Yi04MDQ5LTQ3YTItYWI5OS0yNTZkYjNlZDgzMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvMTA0Mjli LTgwNDktNDdhMi1hYjk5LTI1NmRiM2VkODMzNS8xL1VwSjRNdE9ZVU9oUjdzdGFC UkZwS1pIZHBkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDVXegMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCJtDANBgkqhkiG9w0BAQsFAAOCAQEASaNNw6IQyJMFs0AwjneSaQD6gA/iW6hu fYAPCeNG5fmb71F9iuB69DDIdusAV7GCih2KbMzhluYLACA1GXDyjNWuyIcvxnXc C6yHq3Mi5B8ubV//KH0GQ0W6UHOTntrPR7pDRKjhVx60EvXBJMYc6S4mNvXJYkY4 jF2w5htYzPB0/FnoeqK2d0p2kkByCr2mRW7CFSd/pGSM6XO11aMcTepOvW5Lp4BZ Mn0CKCgml6pZlUGGethf2mEFdGfJGJeAQoh5pFob7BFQCPvNJo/5mKoWVujHw5jE B6EfSnmm85X9G/Ju+kA++a1c6acNVH8Jx3P38eV+5E+wUKYsHFKriQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:05 2026 by rpki-client