This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer (raw, json) Hash identifier: 1S0S6TIAxmQfpYT97632KVy4fBwpdXWJ+nZ8hfmGNWQ= Subject key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B0150C2C52AD21E399F0E539F3F2D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44740 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:01:50:c2:c5:2a:d2:1e:39:9f:0e:53:9f:3f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9143c5f48c77a79c985f5e5362e082ad54e23063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:4f:a7:c3:61:d2:90:1f:8b:b3:8d:a8:8f: d9:9c:53:0e:76:fc:2f:07:a1:f6:e2:53:ae:e5:a2: 7b:3c:14:07:b1:94:cf:59:fe:2e:c8:42:b8:ac:e9: 13:9f:e8:b5:fc:e9:2c:a7:4f:5b:ce:51:14:e9:ce: 33:f6:b2:c1:2c:1c:55:37:71:b6:9c:3e:bb:b7:1c: 35:61:5b:a2:c5:d5:0c:ec:aa:41:0c:5c:46:0c:2a: 30:4c:6f:be:d1:53:78:c2:5e:87:32:09:81:7f:ea: 02:78:b5:fa:86:a5:87:36:fb:cb:6a:4c:a1:96:10: 89:ca:ff:a9:2f:c0:4b:8e:e9:be:de:ed:20:a9:bf: c4:10:0d:6e:32:3f:a5:1b:8f:3b:ca:45:77:29:49: 1f:71:be:44:35:31:1b:25:df:22:c8:04:a8:9e:c9: 7b:37:5d:93:2b:d9:ef:8a:06:c0:27:c9:84:f0:db: b6:2e:dd:93:9f:9e:d5:87:97:95:a6:59:51:cb:a8: e5:30:54:01:70:84:af:c5:77:e8:30:cf:17:b3:db: f0:09:5e:31:23:02:b0:e4:be:87:fc:fd:15:e2:0c: 1d:be:9b:33:a4:71:c5:53:5c:03:0d:33:d5:13:21: 2b:13:b7:4e:45:28:15:ac:27:f1:f8:f6:96:5a:4e: 53:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 44740 Signature Algorithm: sha256WithRSAEncryption 2d:6a:86:5b:d2:03:52:db:09:c5:c5:b2:ce:a3:95:61:6a:11: 81:f3:68:f2:11:2e:1e:c1:2a:86:87:1c:ea:c3:a5:01:01:b5: c5:4d:85:3a:7b:a4:99:c9:8a:d3:78:1a:5b:d1:97:f3:4a:68: 31:a7:ba:18:10:6d:27:a9:28:84:f2:b2:73:47:51:29:b0:c1: b6:ab:5e:a2:f4:2f:6e:04:92:42:94:2a:6d:3c:cd:a0:2b:34: 31:da:31:77:c5:eb:a1:a3:fb:93:b9:3b:83:28:1b:1e:d8:f9: bf:e7:b6:8a:1c:3e:80:06:91:60:f0:49:ce:41:0a:45:42:bd: 63:19:ea:f4:ac:ae:32:c6:84:01:ca:ff:83:df:f1:23:56:ba: ee:fc:0a:cc:d7:93:04:c2:39:ec:3e:46:b4:96:c2:9d:a4:14: d6:06:36:b1:53:03:d5:66:f2:da:a9:27:08:1f:24:bc:02:86: bf:df:42:bf:b0:80:23:74:fa:d0:d2:2c:0d:a8:d8:91:e8:7d: 5e:c2:ee:0b:8c:3c:c4:3b:ee:8a:95:f8:35:60:3a:98:21:1f: 07:56:de:c0:33:d2:de:37:ab:2e:26:70:89:1d:02:55:6c:01: bc:89:20:89:00:6d:1a:77:f8:8f:cd:22:a9:c8:21:a8:15:27: ed:a7:07:ea -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6WwFQwsUq0h45nw5Tnz8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQzYzVmNDhjNzdhNzljOTg1ZjVlNTM2MmUwODJhZDU0ZTIzMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybxPp8Nh0pAfi7ONqI/ZnFMOdvwv B6H24lOu5aJ7PBQHsZTPWf4uyEK4rOkTn+i1/Oksp09bzlEU6c4z9rLBLBxVN3G2 nD67txw1YVuixdUM7KpBDFxGDCowTG++0VN4wl6HMgmBf+oCeLX6hqWHNvvLakyh lhCJyv+pL8BLjum+3u0gqb/EEA1uMj+lG487ykV3KUkfcb5ENTEbJd8iyASonsl7 N12TK9nvigbAJ8mE8Nu2Lt2Tn57Vh5eVpllRy6jlMFQBcISvxXfoMM8Xs9vwCV4x IwKw5L6H/P0V4gwdvpszpHHFU1wDDTPVEyErE7dORSgVrCfx+PaWWk5TrwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJFDxfSMd6ecmF9eU2Lggq1U4jBjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2ViYzgw NC1lM2M2LTQwZTYtYmZiZS1iZGYzNjRiYTc3Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvZWJjODA0 LWUzYzYtNDBlNi1iZmJlLWJkZjM2NGJhNzdjZC8xL2tVUEY5SXgzcDV5WVgxNVRZ dUNDclZUaU1HTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCuxDANBgkqhkiG9w0BAQsFAAOCAQEALWqGW9IDUtsJ xcWyzqOVYWoRgfNo8hEuHsEqhocc6sOlAQG1xU2FOnukmcmK03gaW9GX80poMae6 GBBtJ6kohPKyc0dRKbDBtqteovQvbgSSQpQqbTzNoCs0Mdoxd8XroaP7k7k7gygb Htj5v+e2ihw+gAaRYPBJzkEKRUK9Yxnq9KyuMsaEAcr/g9/xI1a67vwKzNeTBMI5 7D5GtJbCnaQU1gY2sVMD1Wby2qknCB8kvAKGv99Cv7CAI3T60NIsDajYkeh9XsLu C4w8xDvuipX4NWA6mCEfB1bewDPS3jerLiZwiR0CVWwBvIkgiQBtGnf4j80iqcgh qBUn7acH6g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:06 2026 by rpki-client