This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
File: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer (raw, json)
Hash identifier: /09m9W2An5Pqn0vu66VwoIVe5tWv3JQGgUBhnEKUuZo=
Subject key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA541B0DD389091C1EFFA0288AB4995
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34330
IP: 193.43.77.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:41:b0:dd:38:90:91:c1:ef:fa:02:88:ab:49:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d795a7259f9537186493f482d55cef4b64b1c435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:85:08:6f:24:b4:97:94:03:38:1e:9a:c1:
d1:9e:a7:a3:8d:57:b6:c6:b0:21:34:c2:df:2d:bd:
63:1e:c4:1c:17:26:84:57:c3:23:ef:32:1b:88:b8:
75:7f:2d:d7:e4:27:ea:7e:39:e7:79:a9:c4:ee:77:
68:c4:a4:24:17:f7:b8:46:da:9b:0f:00:43:c9:f9:
16:91:7a:61:49:7c:38:2e:4a:43:c9:da:62:fe:9b:
cd:f1:a0:c3:d3:93:a8:41:d2:83:4b:3e:4d:ef:b7:
f9:79:60:88:03:56:a8:a4:25:ab:aa:bd:87:b5:cd:
d9:91:1e:4f:4f:74:75:d0:60:38:8b:45:ea:48:f3:
f4:df:51:53:18:11:7d:a4:d5:7e:6b:9b:e0:06:e5:
de:10:73:d1:92:dd:d5:ee:44:7b:69:2e:d1:40:bd:
ad:bb:05:ae:11:f0:ee:01:b9:13:a6:e4:fc:80:3c:
53:1b:8b:2c:e1:49:df:53:04:68:fc:1e:8f:37:9d:
7d:b0:72:fe:f1:77:9b:38:94:75:f8:3d:d9:6e:f4:
66:33:73:b6:98:8a:e4:36:fc:2b:2e:1f:1d:cb:c7:
f9:df:62:aa:77:10:a4:a7:e5:e2:d2:52:fd:da:1d:
44:85:41:7f:1c:e7:10:a6:9a:b8:5d:96:85:74:95:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.77.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34330
Signature Algorithm: sha256WithRSAEncryption
1c:d6:8b:40:02:6c:fc:44:0e:17:e0:a1:f3:5a:f8:24:ef:7c:
cd:2e:bb:9f:ac:6b:03:14:50:d8:90:4e:94:6c:c5:67:30:3b:
37:ab:0c:51:16:5f:c1:91:00:56:23:19:3b:7c:cb:0a:e1:20:
c4:36:d6:3f:ef:cd:a8:cc:2f:ca:a8:20:03:8e:c4:31:27:6e:
13:ae:a1:03:d8:92:5d:70:12:f8:e3:c0:92:71:36:7b:2f:3a:
54:f9:3d:77:ae:5a:b5:ad:d5:76:ec:10:02:dc:18:f7:ef:c0:
7e:a8:c3:11:3f:d3:b7:89:d6:8d:d6:ae:bf:61:29:af:15:d5:
c9:5f:0f:a0:d9:24:d4:f9:93:91:db:45:91:ae:0f:f9:a7:23:
2d:48:bd:b3:08:61:7e:c6:a3:3e:6a:86:0b:b7:80:3d:b8:69:
77:08:8b:cf:e8:8a:23:ae:92:a5:f1:f0:e7:b1:b0:41:a2:da:
34:d3:7b:91:be:5f:e9:cb:aa:7f:dc:94:06:fe:23:c4:b5:ca:
12:3c:57:e4:c9:e9:9b:df:d1:ca:1e:05:ad:a2:d1:ff:e0:fd:
0f:30:4a:d8:bd:bd:4b:2b:21:a6:80:19:64:56:1b:09:c5:bf:
db:91:d4:5c:cc:4f:d3:8e:f3:f2:95:1e:8d:d9:9a:f7:04:73:
84:20:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:13:40 2026 by rpki-client