This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer File: _g_UdpyC_7SSkwQelUnZS9EsGhc.cer (raw, json) Hash identifier: iXEREGVPgYR0xbP11syPynT6PiGKzBhr/FVwPsZ8YyY= Subject key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12DDCDEE4DAFA390D50B512B10906A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42329 IP: 45.143.56.0/22 IP: 2a0e:e240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 18:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dd:cd:ee:4d:af:a3:90:d5:0b:51:2b:10:90:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:94:9f:1e:24:bd:5d:a3:86:d3:d0:11:ab: 8e:cd:cd:f7:00:63:48:57:c8:69:47:32:1f:96:e2: 64:58:57:6d:cf:b9:08:58:88:24:05:29:90:66:f9: 17:95:d7:1e:2a:8d:c3:16:77:c5:62:76:7c:f5:f4: da:e8:cf:57:b1:71:d0:fe:b3:58:a7:0b:34:eb:3f: 42:c1:a7:20:0f:3b:47:d4:ee:e0:f2:fb:39:24:cf: 7d:24:72:5d:e4:e9:f8:a8:63:ad:f5:9f:f0:50:8d: 63:4b:13:b2:e8:9c:38:c4:8c:11:c4:71:d1:6b:6e: 47:35:b1:90:ec:d4:ef:70:c6:a7:33:7b:f1:5e:56: 2e:08:45:c2:10:81:ef:ef:f5:f6:59:a5:42:75:f2: 3c:9e:53:9a:93:13:9e:ff:4e:bc:98:5a:c2:04:69: d1:f1:2c:6d:b7:00:47:37:d6:20:95:18:3b:bf:62: 12:08:83:2b:b1:01:31:39:d2:ab:16:56:12:64:10: 8d:21:a9:b5:85:0c:de:ee:9a:a9:94:e6:eb:3e:9e: 2b:0c:f2:98:d1:bc:f7:6b:23:c0:52:25:99:9b:d2: 68:09:5c:2f:8e:4f:64:03:30:81:b4:3b:6c:ae:78: ca:26:9c:53:b3:69:5b:96:3a:76:65:6b:4a:48:b5: 0f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.56.0/22 IPv6: 2a0e:e240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42329 Signature Algorithm: sha256WithRSAEncryption 8d:21:45:de:09:5d:11:83:fa:37:fd:57:63:fc:94:af:8b:9b: fa:2a:2b:34:93:4d:07:3a:f1:f2:6e:0d:a4:3b:9d:7c:70:a5: be:79:05:59:36:13:0d:ae:7c:c2:02:3a:29:de:02:55:22:f0: 5b:45:7b:fc:2e:a2:b2:84:80:9e:30:09:7a:77:86:9b:e0:f3: 37:61:5a:59:ca:15:db:90:68:70:fc:43:55:cb:91:5a:6e:cf: 13:1c:0f:ac:2d:8f:cb:c6:ff:3c:c0:f0:7f:95:8e:e9:77:00: 4f:24:9e:94:61:fc:5b:65:55:81:54:c5:5e:a2:77:77:8c:df: 8b:5f:be:35:02:54:49:39:5c:2c:5d:e1:54:94:1e:47:6d:f3: 98:20:09:d4:2b:93:f2:92:b2:a0:64:8d:c4:4b:1f:ff:67:c6: 91:75:e4:0f:a1:c3:2e:43:95:e1:f7:93:37:a7:61:5a:fe:fb: 6d:ca:e4:df:05:a6:f0:9f:58:ad:16:d5:49:02:32:e2:04:01: a6:cf:7c:6c:e5:db:ab:52:7a:63:17:b9:79:31:6c:77:54:5b: dd:07:31:de:21:5d:f4:3c:f6:83:20:b5:40:99:da:2d:75:78: af:c5:61:57:13:c7:0e:91:c0:11:f9:f2:c1:ea:55:10:9b:18: f0:0d:72:c7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8Et3N7k2vo5DVC1ErEJBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTBmZDQ3NjljODJmZmI0OTI5MzA0MWU5NTQ5ZDk0YmQxMmMxYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwqUnx4kvV2jhtPQEauOzc33AGNI V8hpRzIfluJkWFdtz7kIWIgkBSmQZvkXldceKo3DFnfFYnZ89fTa6M9XsXHQ/rNY pws06z9CwacgDztH1O7g8vs5JM99JHJd5On4qGOt9Z/wUI1jSxOy6Jw4xIwRxHHR a25HNbGQ7NTvcManM3vxXlYuCEXCEIHv7/X2WaVCdfI8nlOakxOe/068mFrCBGnR 8SxttwBHN9YglRg7v2ISCIMrsQExOdKrFlYSZBCNIam1hQze7pqplObrPp4rDPKY 0bz3ayPAUiWZm9JoCVwvjk9kAzCBtDtsrnjKJpxTs2lbljp2ZWtKSLUPqQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFP4P1Hacgv+0kpMEHpVJ2UvRLBoXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzRjYmE3 YS0xMWQ3LTQ2MjQtODUxZC1hN2NhMDJjODhlMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNGNiYTdh LTExZDctNDYyNC04NTFkLWE3Y2EwMmM4OGUzOS8xL19nX1VkcHlDXzdTU2t3UWVs VW5aUzlFc0doYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLY84MA0EAgACMAcDBQMqDuJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwClWTANBgkqhkiG9w0BAQsFAAOCAQEAjSFF3gldEYP6 N/1XY/yUr4ub+iorNJNNBzrx8m4NpDudfHClvnkFWTYTDa58wgI6Kd4CVSLwW0V7 /C6isoSAnjAJeneGm+DzN2FaWcoV25BocPxDVcuRWm7PExwPrC2Py8b/PMDwf5WO 6XcATySelGH8W2VVgVTFXqJ3d4zfi1++NQJUSTlcLF3hVJQeR23zmCAJ1CuT8pKy oGSNxEsf/2fGkXXkD6HDLkOV4feTN6dhWv77bcrk3wWm8J9YrRbVSQIy4gQBps98 bOXbq1J6Yxe5eTFsd1Rb3Qcx3iFd9Dz2gyC1QJnaLXV4r8VhVxPHDpHAEfnywepV EJsY8A1yxw== -----END CERTIFICATE-----Generated at Sat Feb 7 23:30:33 2026 by rpki-client