This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer File: up0w5gNb6Lg4YGHycUgccH4Ezis.cer (raw, json) Hash identifier: VYzMNoOpUszk9XYi1LFwQ7le6A/CzwGmAJiLtTm2ESI= Subject key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7D40A0977D0986F4943D283C2107 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8705 AS: 34984 IP: 82.222.0.0/16 IP: 85.29.0.0/18 IP: 92.44.0.0/15 IP: 151.250.0.0/16 IP: 176.33.0.0/16 IP: 176.40.0.0/14 IP: 195.214.128.0/18 IP: 212.57.0.0/19 IP: 213.153.128.0/17 IP: 2a02:e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7d:40:a0:97:7d:09:86:f4:94:3d:28:3c:21:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:31:46:a1:6f:68:1a:07:bc:2e:ce:ca:b1: aa:73:e2:31:03:07:14:49:e8:13:2d:88:52:a3:c0: 4f:48:db:bb:a1:90:36:b3:16:bd:d4:ba:7c:d8:eb: ce:92:a1:a5:75:75:2c:1c:2a:a7:2b:d2:75:7b:ad: 23:9b:59:c0:1b:32:0a:91:ee:5d:ba:9b:36:7a:7c: 75:1b:67:ee:4b:a0:3e:81:aa:c4:69:96:6c:a2:f3: 57:83:ed:f1:9b:d5:71:10:2b:81:82:cd:95:3e:a5: d9:c2:7f:c8:d6:fa:8c:ab:f2:98:7b:f0:9f:6f:07: 43:9d:7c:3c:1b:e7:8d:79:cc:66:95:95:31:36:e7: 0c:96:17:33:92:4f:94:3a:a7:2c:c0:36:9e:1c:6f: c0:6a:ae:aa:1b:3a:7a:14:32:8a:62:74:7b:9b:64: ee:34:2a:22:2f:0d:09:96:2b:3d:ac:e0:40:20:fb: 1d:da:c1:3b:07:b9:66:ad:ac:2a:7f:d6:60:b9:25: 66:45:0b:ac:e8:7a:c9:0d:61:cd:fc:a9:55:b7:22: 3c:e5:d4:22:e9:d1:69:78:13:d4:65:67:28:01:01: 1a:78:b8:c0:8c:14:2d:68:2d:c7:44:ce:d9:3e:ba: 65:c8:e2:db:76:da:8f:d4:c4:62:85:8d:bd:7f:1e: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.222.0.0/16 85.29.0.0/18 92.44.0.0/15 151.250.0.0/16 176.33.0.0/16 176.40.0.0/14 195.214.128.0/18 212.57.0.0/19 213.153.128.0/17 IPv6: 2a02:e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8705 34984 Signature Algorithm: sha256WithRSAEncryption ad:af:ff:8f:a5:e3:21:79:5b:00:ba:e8:84:58:d6:66:98:7d: 94:c0:a0:2e:48:9e:dd:8a:31:cd:24:65:4e:9a:a7:d4:96:eb: 0e:c3:5b:9b:82:b6:da:ab:86:50:a9:28:f8:18:80:68:bb:61: c7:b2:a2:70:bf:44:cc:85:f7:2a:9c:f8:4c:19:89:79:67:91: 84:b1:74:52:4e:bc:06:b5:50:ed:3c:5c:45:52:77:d9:8a:63: 43:99:2e:1c:72:5f:d6:f1:97:6f:20:9a:f9:4b:a2:94:5d:a4: 0c:b6:32:c8:3d:4b:e6:41:46:f4:a8:99:fe:fc:d0:1e:9c:59: 04:bf:d7:ec:c9:55:88:39:f5:cb:63:97:0f:3b:fb:48:8a:c6: cd:52:cd:49:33:a8:b8:f4:f0:6e:f5:0e:7c:69:06:53:5e:85: 2a:58:cc:81:69:3a:35:88:e1:8a:24:06:7c:30:41:14:b3:b5: da:92:b7:ce:99:33:c4:fb:eb:fa:a9:f7:53:1d:d1:17:f8:7e: 81:f6:a1:85:06:4c:22:a0:9f:3a:83:e9:e8:b0:b6:f8:68:ed: 83:f5:e8:ed:aa:ae:31:7a:8b:7d:4d:ab:32:07:0b:2d:5b:43: 5d:55:fc:77:2b:1e:38:87:23:88:80:85:6e:8a:19:58:22:c3: 7f:ac:89:ea -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt2631AoJd9CYb0lD0oPCEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTlkMzBlNjAzNWJlOGI4Mzg2MDYxZjI3MTQ4MWM3MDdlMDRjZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkUxRqFvaBoHvC7OyrGqc+IxAwcU SegTLYhSo8BPSNu7oZA2sxa91Lp82OvOkqGldXUsHCqnK9J1e60jm1nAGzIKke5d ups2enx1G2fuS6A+garEaZZsovNXg+3xm9VxECuBgs2VPqXZwn/I1vqMq/KYe/Cf bwdDnXw8G+eNecxmlZUxNucMlhczkk+UOqcswDaeHG/Aaq6qGzp6FDKKYnR7m2Tu NCoiLw0Jlis9rOBAIPsd2sE7B7lmrawqf9ZguSVmRQus6HrJDWHN/KlVtyI85dQi 6dFpeBPUZWcoAQEaeLjAjBQtaC3HRM7ZPrplyOLbdtqP1MRihY29fx5z+QIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFLqdMOYDW+i4OGBh8nFIHHB+BM4rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2FjOWMz Mi03ZGJjLTRkNmMtYmMwOC01ZDU4NGZiYzVkMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvYWM5YzMy LTdkYmMtNGQ2Yy1iYzA4LTVkNTg0ZmJjNWQyNy8xL3VwMHc1Z05iNkxnNFlHSHlj VWdjY0g0RXppcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDA3BAIAATAxAwMAUt4DBAZVHQADAwFcLAMDAJf6AwMAsCEDAwKw KAMEBsPWgAMEBdQ5AAMEB9WZgDANBAIAAjAHAwUAKgIA4DAeBggrBgEFBQcBCAEB /wQPMA2gCzAJAgIiAQIDAIioMA0GCSqGSIb3DQEBCwUAA4IBAQCtr/+PpeMheVsA uuiEWNZmmH2UwKAuSJ7dijHNJGVOmqfUlusOw1ubgrbaq4ZQqSj4GIBou2HHsqJw v0TMhfcqnPhMGYl5Z5GEsXRSTrwGtVDtPFxFUnfZimNDmS4ccl/W8ZdvIJr5S6KU XaQMtjLIPUvmQUb0qJn+/NAenFkEv9fsyVWIOfXLY5cPO/tIisbNUs1JM6i49PBu 9Q58aQZTXoUqWMyBaTo1iOGKJAZ8MEEUs7XakrfOmTPE++v6qfdTHdEX+H6B9qGF BkwioJ86g+nosLb4aO2D9ejtqq4xeot9TasyBwstW0NdVfx3Kx44hyOIgIVuihlY IsN/rInq -----END CERTIFICATE-----Generated at Mon Jan 26 00:41:32 2026 by rpki-client