This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer File: up78qG3qcNPukBgWeMjrMOaRbR0.cer (raw, json) Hash identifier: PkSgxXyNxVmkNuIw/mfpwM/kHSOkGXxsEq3PgQeJlCY= Subject key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88E24F995EEF50F1B5B2AB2C508EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56472 IP: 80.86.48.0/20 IP: 185.22.36.0/22 IP: 2a02:29a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8e:24:f9:95:ee:f5:0f:1b:5b:2a:b2:c5:08:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9a:87:80:7c:d8:ee:20:f2:cf:4d:b0:54:fc: 10:6e:ab:d7:7b:06:b7:67:40:7b:3d:fb:20:03:8b: 19:40:57:fa:9a:fd:2d:51:96:0c:d4:ed:97:ea:4c: 6a:e9:e3:93:66:50:ff:35:b6:85:5f:31:a3:7c:1d: b9:11:e5:39:cc:d7:e9:b1:44:3f:6e:9b:40:73:d8: d9:b4:56:ce:8a:80:7e:3a:f7:29:3d:f1:60:dd:f5: 91:c5:d7:d3:ff:39:ca:bc:b2:52:9e:08:f2:b5:94: 14:5f:f3:3e:1d:79:68:09:a7:57:ed:c4:dc:c0:94: fb:c7:46:31:a5:2b:32:40:31:af:d7:88:5a:34:90: 18:64:38:43:2d:2d:d0:5a:25:ff:bf:33:1a:e9:d9: 51:db:e9:d1:9f:ca:b7:84:b1:47:4b:c7:7d:1b:8a: e5:4d:fe:e0:3b:ee:e9:34:c9:01:63:29:e4:27:96: 66:de:19:3b:79:33:d1:a1:db:ba:6b:e3:e1:15:53: 4e:a7:12:1b:a2:6f:b8:b0:4a:cd:c2:47:f2:f7:0c: a0:a1:ba:4d:eb:e4:6b:8b:39:8c:7b:e5:87:c8:39: c1:bc:17:7c:4c:d4:1f:0b:75:8a:ee:27:28:af:ad: 3a:bb:ba:e9:fd:b6:8a:f9:7f:f4:68:b5:23:cf:dc: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.48.0/20 185.22.36.0/22 IPv6: 2a02:29a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56472 Signature Algorithm: sha256WithRSAEncryption 71:89:27:58:5b:fc:4b:ce:05:98:1b:f8:88:83:6b:d7:88:d7: 3f:6f:3b:4d:c5:ef:f6:c7:f6:15:56:79:92:cb:28:de:0e:54: 82:a8:4e:c4:d3:0e:52:1e:82:78:db:1a:89:39:25:15:db:e3: 7f:34:3e:d9:47:2f:9f:87:8c:6a:19:c6:e7:fb:cb:38:4a:b8: 6a:73:68:e7:10:94:97:2d:3f:21:6e:f2:43:00:38:9d:dc:e2: d1:be:41:0d:d5:fc:ae:af:6f:63:7e:f7:2a:ce:68:57:f2:73: a3:e2:b7:3e:da:d3:f0:e8:fa:05:a6:51:4d:90:37:8c:a9:80: b1:07:12:c4:5b:38:76:f7:18:1a:57:0c:94:f1:2a:4f:0d:10: a6:35:46:b1:a7:bf:4e:96:75:3f:1e:2c:95:e9:52:43:fc:96: e7:a6:15:8a:36:3d:86:1e:dc:fa:36:fc:9b:2f:5c:72:d1:b3: 69:fe:19:98:63:04:32:d3:49:0b:2f:9b:4b:75:62:71:06:72: 8b:58:a5:a5:79:71:4c:e7:e3:06:35:a2:48:00:5c:49:af:96: f0:e2:aa:b9:a5:be:18:d2:53:7c:b2:67:37:93:89:ce:b7:a3: 8f:75:3c:94:f4:97:47:69:70:ab:b8:ef:eb:4d:97:b5:b3:58: 8a:91:c6:90 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6yI4k+ZXu9Q8bWyqyxQjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTllZmNhODZkZWE3MGQzZWU5MDE4MTY3OGM4ZWIzMGU2OTE2ZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5qHgHzY7iDyz02wVPwQbqvXewa3 Z0B7PfsgA4sZQFf6mv0tUZYM1O2X6kxq6eOTZlD/NbaFXzGjfB25EeU5zNfpsUQ/ bptAc9jZtFbOioB+OvcpPfFg3fWRxdfT/znKvLJSngjytZQUX/M+HXloCadX7cTc wJT7x0YxpSsyQDGv14haNJAYZDhDLS3QWiX/vzMa6dlR2+nRn8q3hLFHS8d9G4rl Tf7gO+7pNMkBYynkJ5Zm3hk7eTPRodu6a+PhFVNOpxIbom+4sErNwkfy9wygobpN 6+RrizmMe+WHyDnBvBd8TNQfC3WK7icor606u7rp/baK+X/0aLUjz9yDIwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLqe/Kht6nDT7pAYFnjI6zDmkW0dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzc1Yjgz OC00ZWNlLTQ5OTgtOGFkOC0xN2QzMWRlZThlMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvNzViODM4 LTRlY2UtNDk5OC04YWQ4LTE3ZDMxZGVlOGUxMi8xL3VwNzhxRzNxY05QdWtCZ1dl TWpyTU9hUmJSMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUFYwAwQCuRYkMA0EAgACMAcDBQAqAimgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDcmDANBgkqhkiG9w0BAQsFAAOCAQEAcYkn WFv8S84FmBv4iINr14jXP287TcXv9sf2FVZ5ksso3g5UgqhOxNMOUh6CeNsaiTkl FdvjfzQ+2Ucvn4eMahnG5/vLOEq4anNo5xCUly0/IW7yQwA4ndzi0b5BDdX8rq9v Y373Ks5oV/Jzo+K3PtrT8Oj6BaZRTZA3jKmAsQcSxFs4dvcYGlcMlPEqTw0QpjVG sae/TpZ1Px4slelSQ/yW56YVijY9hh7c+jb8my9cctGzaf4ZmGMEMtNJCy+bS3Vi cQZyi1ilpXlxTOfjBjWiSABcSa+W8OKquaW+GNJTfLJnN5OJzrejj3U8lPSXR2lw q7jv602XtbNYipHGkA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:48 2026 by rpki-client