This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer File: ndUEhgp8kk5yHL-upfSacsgpbDU.cer (raw, json) Hash identifier: wbRwuBW2QyOg9wg3dZl1hxGBhRmPaeixsnJq/8rHDzU= Subject key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366B472D8E846B92D4A826A8106834 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48964 IP: 91.204.120.0/22 IP: 91.212.80.0/24 IP: 193.19.240.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6b:47:2d:8e:84:6b:92:d4:a8:26:a8:10:68:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:f2:0f:d4:82:09:bf:de:40:12:a2:a5:d2: 61:fe:4b:fc:e1:67:f6:62:18:a3:80:f5:2c:d0:fb: 77:af:02:00:ff:fa:11:6c:9c:a6:c9:30:39:f5:a6: 4e:5e:1a:fb:f3:3f:ec:1c:77:ed:aa:a5:ee:bb:ac: a0:cc:c6:67:38:c7:83:ce:8e:80:cd:73:30:ca:cb: 22:74:34:cb:ed:b0:ff:77:e1:55:47:b5:1d:6a:c3: 19:c1:3c:89:60:b5:6f:e9:58:67:3d:22:f3:e6:04: b5:70:5e:ce:2e:dd:44:03:4c:7e:ce:38:f9:05:90: 8e:35:bc:a1:9b:82:97:ec:ea:35:15:97:39:bb:8b: e9:f6:10:08:3a:a2:ee:63:9a:29:5f:36:71:ee:6a: 26:e0:88:92:e5:ff:78:e2:f2:13:58:9a:72:36:d6: d9:ba:37:f1:7e:12:90:c3:b6:42:02:e0:58:c0:22: 58:f9:f2:b1:bd:30:a3:e2:fc:df:ea:9f:68:36:67: 96:a3:12:2b:05:e7:ef:68:8b:98:79:03:12:4a:84: 42:28:2b:b6:0c:03:c6:55:a3:46:b4:5a:fe:68:4f: a4:5e:38:2d:f8:4a:2c:55:17:71:dd:68:07:b5:b2: 4e:92:89:51:66:3b:43:57:d9:bb:15:f5:12:0f:df: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.120.0/22 91.212.80.0/24 193.19.240.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48964 Signature Algorithm: sha256WithRSAEncryption 63:7a:84:64:a1:67:a8:4f:a7:88:b8:c0:f1:f8:3b:5b:02:fb: f4:e2:b1:c0:a1:e2:f8:cd:99:26:56:fc:47:1f:6e:27:cb:03: 79:11:2f:75:99:fb:a5:d3:09:60:0c:63:99:71:48:b9:01:04: 10:0e:c1:1a:49:32:1b:6c:94:da:28:19:0e:ef:ad:d3:88:c1: b2:45:00:f1:f7:91:5c:cc:02:c6:8d:df:dc:40:03:ec:fb:b9: 83:7f:75:e7:8e:7c:1d:c3:24:f2:c7:05:e0:46:9d:c3:aa:aa: 79:7d:e7:66:c1:3f:fb:ee:37:71:fc:a0:f6:1f:b7:a2:f6:ed: d4:ca:9d:10:d5:bc:a5:35:e0:40:7f:75:82:84:1c:a8:f5:04: 4b:04:b0:41:6f:25:d5:ab:fb:e3:c3:ce:fa:a5:02:92:99:72: 55:28:39:14:c7:76:59:e4:7d:06:8f:d1:12:66:3f:51:84:06: dd:2a:4d:bc:cb:84:86:96:eb:49:0a:92:56:1b:ea:95:e3:07: 47:5d:df:67:cc:eb:63:d0:25:16:87:42:8b:63:5f:12:c5:36: ca:83:1c:9b:14:d4:b9:65:84:48:d9:a1:16:8d:5f:79:de:c8: b8:48:4a:47:56:76:74:e5:09:c0:1d:54:f2:8b:91:83:6d:96: a4:45:78:bd -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt7NmtHLY6Ea5LUqCaoEGg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGQ1MDQ4NjBhN2M5MjRlNzIxY2JmYWVhNWY0OWE3MmM4Mjk2YzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomvyD9SCCb/eQBKipdJh/kv84Wf2 YhijgPUs0Pt3rwIA//oRbJymyTA59aZOXhr78z/sHHftqqXuu6ygzMZnOMeDzo6A zXMwyssidDTL7bD/d+FVR7UdasMZwTyJYLVv6VhnPSLz5gS1cF7OLt1EA0x+zjj5 BZCONbyhm4KX7Oo1FZc5u4vp9hAIOqLuY5opXzZx7mom4IiS5f944vITWJpyNtbZ ujfxfhKQw7ZCAuBYwCJY+fKxvTCj4vzf6p9oNmeWoxIrBefvaIuYeQMSSoRCKCu2 DAPGVaNGtFr+aE+kXjgt+EosVRdx3WgHtbJOkolRZjtDV9m7FfUSD98GUwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFJ3VBIYKfJJOchy/rqX0mnLIKWw1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzQ5NjIz Mi1kMThiLTQ1NTQtOWE0My00MzJmNWMxZjQxZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNDk2MjMy LWQxOGItNDU1NC05YTQzLTQzMmY1YzFmNDFmNy8xL25kVUVoZ3A4a2s1eUhMLXVw ZlNhY3NncGJEVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCW8x4AwQAW9RQAwQCwRPwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwC/RDANBgkqhkiG9w0BAQsFAAOCAQEAY3qEZKFnqE+niLjA 8fg7WwL79OKxwKHi+M2ZJlb8Rx9uJ8sDeREvdZn7pdMJYAxjmXFIuQEEEA7BGkky G2yU2igZDu+t04jBskUA8feRXMwCxo3f3EAD7Pu5g3915458HcMk8scF4Eadw6qq eX3nZsE/++43cfyg9h+3ovbt1MqdENW8pTXgQH91goQcqPUESwSwQW8l1av748PO +qUCkplyVSg5FMd2WeR9Bo/REmY/UYQG3SpNvMuEhpbrSQqSVhvqleMHR13fZ8zr Y9AlFodCi2NfEsU2yoMcmxTUuWWESNmhFo1fed7IuEhKR1Z2dOUJwB1U8ouRg22W pEV4vQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:08:56 2026 by rpki-client