This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer File: x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer (raw, json) Hash identifier: digcQG/Cbqeepp5Va0INq78X0hqUE1bd+ota1rlv6DI= Subject key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6DFF18CD02F9353083742737CC7D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202909 IP: 2001:678:1180::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:df:f1:8c:d0:2f:93:53:08:37:42:73:7c:c7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:8c:c5:5c:13:69:1e:ec:9d:bb:45:03:44: 99:44:a8:60:19:00:ef:99:19:fe:55:29:15:e4:fd: 68:cc:42:91:8d:89:10:6e:6e:38:05:03:9e:08:66: 35:0f:9a:b2:6e:26:00:b6:10:80:a6:90:b3:9c:bb: 8e:f7:5a:ca:91:bf:6a:7b:a8:74:b5:4c:f4:12:c9: 6f:d6:73:8a:c2:8e:41:7b:32:70:b1:82:16:3f:40: 20:82:03:ed:36:03:2f:f4:51:f0:f7:7d:30:73:3a: 7b:44:31:75:b1:37:e2:68:a0:0b:c0:d8:8a:a6:37: 18:d8:0f:4d:1a:9d:af:3a:11:06:9d:e5:07:02:a8: 06:6d:c4:f2:3f:84:21:f3:4b:0e:47:6b:b2:fa:3c: f5:f2:1c:a5:d0:96:fa:2c:c0:1b:3f:66:2f:2d:f2: 93:e5:bd:b4:65:6c:4f:c2:75:c9:7c:6c:8b:e1:bb: 49:6a:07:76:c8:15:86:0a:8e:0a:37:bd:00:c6:c3: c6:29:dc:97:c0:59:62:df:e0:62:91:17:af:96:f8: 52:24:15:31:3b:ef:31:64:32:4b:94:0b:58:d4:bf: f4:73:c4:75:69:14:cb:47:f0:44:f1:c1:50:30:23: 82:67:52:df:ca:51:b4:e7:e7:a8:87:eb:f6:2b:f9: 51:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1180::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202909 Signature Algorithm: sha256WithRSAEncryption 51:6e:dd:17:8c:2b:61:64:45:69:80:73:3b:3e:27:b0:6d:21: 93:ee:43:7c:be:32:16:bb:52:a7:9a:3d:44:19:29:7b:77:67: cb:f0:3a:0f:0a:fd:3c:59:23:c7:f8:56:70:d1:d2:8b:92:5b: 87:f5:59:34:b1:34:75:0b:97:18:fd:e3:ed:2d:86:89:37:d2: 83:ca:e3:4c:76:4c:68:74:e9:5a:ae:86:d9:aa:86:88:03:84: 05:1e:c1:7a:59:d7:40:88:e3:ae:a0:6b:21:3b:74:2b:91:bd: 47:b2:07:66:c7:68:15:74:be:ac:50:34:6a:8c:0a:bf:57:77: 37:bd:5d:fd:51:f0:00:00:f5:24:4e:6c:13:a6:e2:3a:aa:35: f6:0f:ce:a9:3e:b9:51:69:b6:5c:c6:15:0e:ab:c1:7b:c4:63: 52:7e:a3:47:54:a9:7a:df:e3:95:36:4c:0a:e6:d2:18:ba:71: 97:e9:ae:de:60:2c:6d:5a:0e:e8:d3:60:6a:9e:ce:e5:0f:90: b5:df:08:76:30:70:d2:73:50:f4:fd:4a:68:16:ea:ea:66:20: d9:ad:cf:c4:65:34:e8:66:a1:b4:de:8a:2e:e8:1b:ba:d0:a9: 69:b9:a0:9d:eb:23:09:1f:f5:94:9e:c5:22:81:46:39:ed:ef: 03:6d:b6:d0 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt3xt/xjNAvk1MIN0JzfMfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2NiYTk4MWNlNThhMTBlZGQyYzk5ODAxZTA0M2FkODA0YTg1ZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlOMxVwTaR7snbtFA0SZRKhgGQDv mRn+VSkV5P1ozEKRjYkQbm44BQOeCGY1D5qybiYAthCAppCznLuO91rKkb9qe6h0 tUz0Eslv1nOKwo5BezJwsYIWP0AgggPtNgMv9FHw930wczp7RDF1sTfiaKALwNiK pjcY2A9NGp2vOhEGneUHAqgGbcTyP4Qh80sOR2uy+jz18hyl0Jb6LMAbP2YvLfKT 5b20ZWxPwnXJfGyL4btJagd2yBWGCo4KN70AxsPGKdyXwFli3+BikRevlvhSJBUx O+8xZDJLlAtY1L/0c8R1aRTLR/BE8cFQMCOCZ1LfylG05+eoh+v2K/lRFQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMfLqYHOWKEO3SyZgB4EOtgEqF+aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzRjZDI4 OS1kMTZlLTQ2MDQtYjU0YS1kOWExYmYxMGM1N2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNGNkMjg5 LWQxNmUtNDYwNC1iNTRhLWQ5YTFiZjEwYzU3Zi8xL3g4dXBnYzVZb1E3ZExKbUFI Z1E2MkFTb1g1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMYnTANBgkqhkiG9w0BAQsFAAOCAQEAUW7dF4wrYWRFaYBzOz4nsG0hk+5D fL4yFrtSp5o9RBkpe3dny/A6Dwr9PFkjx/hWcNHSi5Jbh/VZNLE0dQuXGP3j7S2G iTfSg8rjTHZMaHTpWq6G2aqGiAOEBR7BelnXQIjjrqBrITt0K5G9R7IHZsdoFXS+ rFA0aowKv1d3N71d/VHwAAD1JE5sE6biOqo19g/OqT65UWm2XMYVDqvBe8RjUn6j R1Spet/jlTZMCubSGLpxl+mu3mAsbVoO6NNgap7O5Q+Qtd8IdjBw0nNQ9P1KaBbq 6mYg2a3PxGU06GahtN6KLugbutCpabmgnesjCR/1lJ7FIoFGOe3vA2220A== -----END CERTIFICATE-----Generated at Mon Jan 26 15:16:09 2026 by rpki-client