This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer File: uP5lGLdAqxQFS-d0iZKLuffa8O4.cer (raw, json) Hash identifier: 6IweJock8+EJ3AVCWQ1tybNohAqvXnMlqAFs2FS5NXs= Subject key identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDAFCA6DE4165B5E9F7FEF132E25ADC65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 10:39:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29355 IP: 2.72.0.0/13 IP: 149.3.192.0/18 IP: 149.27.0.0/16 IP: 164.0.0.0/16 IP: 164.40.0.0/17 IP: 185.2.224.0/22 IP: 195.47.255.0/24 IP: 2a02:50c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:fc:a6:de:41:65:b5:e9:f7:fe:f1:32:e2:5a:dc:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 10:39:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8fe6518b740ab14054be77489928bb9f7daf0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:05:b7:7b:9b:57:2a:b5:16:32:5f:1b:ed: 1c:95:21:4b:5d:ae:13:b2:09:d6:75:da:73:aa:77: 5c:d7:41:41:89:a0:2d:e1:33:a8:f2:fe:50:a6:ee: a8:5d:77:6e:ff:da:d7:40:89:8a:c8:98:25:c2:fb: 8a:c4:43:13:ff:50:7d:6e:cd:69:81:f6:ca:b4:72: 66:b4:2f:70:e0:60:f7:c4:7f:0a:7b:cf:4a:e3:06: 0d:0b:78:c4:f1:17:2f:b4:ec:0e:d1:cf:6d:5b:b5: 19:df:67:d2:5b:91:2c:38:17:69:7e:17:28:05:f2: a2:6b:ed:3e:0f:95:05:4f:66:a2:c6:3c:ea:65:c9: 3e:6d:34:6a:94:10:54:62:8e:dd:4a:0b:03:3a:ae: 30:6d:a4:fe:f5:96:c0:88:23:e9:62:91:46:13:ed: c9:de:f4:b6:03:bb:8c:ae:c7:51:4b:42:0c:9a:28: 54:d4:08:eb:9c:ef:ff:53:28:53:db:04:96:c1:0e: 14:33:29:16:72:59:ea:22:db:bb:71:fe:ab:99:c6: a0:80:ef:7d:61:88:05:e9:5e:1d:b9:26:70:a3:8e: 63:32:62:15:63:4a:fa:d1:7a:d9:a1:31:8c:d0:19: e6:ea:38:3c:2b:ca:37:f2:8b:24:dd:b8:54:fd:37: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.72.0.0/13 149.3.192.0/18 149.27.0.0/16 164.0.0.0/16 164.40.0.0/17 185.2.224.0/22 195.47.255.0/24 IPv6: 2a02:50c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29355 Signature Algorithm: sha256WithRSAEncryption 4a:be:54:10:62:06:9e:77:eb:49:9a:c1:2e:5a:9f:b0:a4:3a: e8:1f:67:8f:09:9d:14:c7:0b:87:bf:4c:32:6f:bb:f8:ad:09: 1d:c8:5f:db:69:71:71:f4:e4:0e:89:63:7d:59:c2:f5:83:a6: 13:06:dd:43:fa:5c:ff:c9:6c:47:da:07:43:e9:e4:65:07:70: d5:4c:5d:88:bc:03:d5:f9:b3:03:e8:26:d0:cc:b4:5c:ff:c2: 8f:81:c1:08:ea:2e:21:f3:aa:22:e4:63:6d:e9:30:41:ed:80: 6b:5d:e8:7b:5c:82:ea:ed:36:e6:e1:20:6d:50:14:c5:c3:18: b0:ad:f0:25:1a:b9:85:f6:dd:02:81:08:14:4e:2a:39:d2:d8: f8:f2:2a:02:eb:5e:7b:61:f4:a6:23:bc:2b:42:3e:97:b4:89: 6e:fa:58:00:aa:24:66:ac:0c:e9:72:d8:ec:7c:37:6c:44:fc: 95:6d:3e:8a:0f:64:31:ef:11:bc:d0:b5:e8:79:7c:45:a1:fd: cc:62:43:9a:a4:e7:88:33:eb:47:2b:7e:24:aa:53:dd:a3:ed: d3:55:12:8f:34:7f:a0:a8:76:58:31:a9:11:e8:21:ec:76:b2: 57:e1:d5:14:00:0a:98:65:eb:be:a8:3b:0d:31:21:4b:29:dc: ed:c5:97:a7 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZva/KbeQWW16ff+8TLiWtxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTAzOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGZlNjUxOGI3NDBhYjE0MDU0YmU3NzQ4OTkyOGJiOWY3ZGFmMGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviQFt3ubVyq1FjJfG+0clSFLXa4T sgnWddpzqndc10FBiaAt4TOo8v5Qpu6oXXdu/9rXQImKyJglwvuKxEMT/1B9bs1p gfbKtHJmtC9w4GD3xH8Ke89K4wYNC3jE8RcvtOwO0c9tW7UZ32fSW5EsOBdpfhco BfKia+0+D5UFT2aixjzqZck+bTRqlBBUYo7dSgsDOq4wbaT+9ZbAiCPpYpFGE+3J 3vS2A7uMrsdRS0IMmihU1AjrnO//UyhT2wSWwQ4UMykWclnqItu7cf6rmcaggO99 YYgF6V4duSZwo45jMmIVY0r60XrZoTGM0Bnm6jg8K8o38osk3bhU/TfmBwIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFLj+ZRi3QKsUBUvndImSi7n32vDuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzg5Njll Ny1jYTRmLTRlMzEtYWZiMi00NzM4M2RjOGNkMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvODk2OWU3 LWNhNGYtNGUzMS1hZmIyLTQ3MzgzZGM4Y2QwZS8xL3VQNWxHTGRBcXhRRlMtZDBp WktMdWZmYThPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjAtBAIAATAnAwMDAkgDBAaVA8ADAwCVGwMDAKQAAwQHpCgAAwQC uQLgAwQAwy//MA0EAgACMAcDBQMqAlDAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnKrMA0GCSqGSIb3DQEBCwUAA4IBAQBKvlQQYgaed+tJmsEuWp+wpDroH2ePCZ0U xwuHv0wyb7v4rQkdyF/baXFx9OQOiWN9WcL1g6YTBt1D+lz/yWxH2gdD6eRlB3DV TF2IvAPV+bMD6CbQzLRc/8KPgcEI6i4h86oi5GNt6TBB7YBrXeh7XILq7Tbm4SBt UBTFwxiwrfAlGrmF9t0CgQgUTio50tj48ioC6157YfSmI7wrQj6XtIlu+lgAqiRm rAzpctjsfDdsRPyVbT6KD2Qx7xG80LXoeXxFof3MYkOapOeIM+tHK34kqlPdo+3T VRKPNH+gqHZYMakR6CHsdrJX4dUUAAqYZeu+qDsNMSFLKdztxZen -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:44 2026 by rpki-client