This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.cer (raw, json)
Hash identifier: zebWk0X9Uss8efqFSOasHrIWQrq1GlkI4FgPN/FLRDc=
Subject key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA4F85A353B177966361E9350ED8DE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 41026
IP: 185.56.244.0/22
IP: 2a02:5660::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:f8:5a:35:3b:17:79:66:36:1e:93:50:ed:8d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:b7:d6:00:aa:6d:21:b7:13:03:9f:0a:65:
58:32:b7:14:23:90:6b:aa:18:80:04:92:2f:55:ac:
ba:25:09:fc:1e:6a:0d:a7:5b:8a:41:04:e2:ee:c5:
0e:39:d7:83:51:a6:a6:a4:72:76:8c:c3:1e:cf:66:
af:b8:06:7e:d9:a6:6d:38:27:b0:f9:54:47:d8:a9:
0d:97:70:51:28:06:15:5e:4b:5c:08:67:8b:5d:45:
84:04:44:e0:eb:e5:35:37:1f:4e:62:76:5c:bc:fb:
a8:45:1a:2f:6f:d9:bc:c6:09:50:bc:5f:43:f5:72:
8f:7e:fa:b0:4c:9b:36:74:f1:e1:3f:7f:72:e0:4a:
15:85:43:4b:f8:c9:ae:f0:4b:26:04:10:73:8c:32:
7d:7f:21:48:54:6a:8e:ad:a0:6a:cf:57:73:19:3c:
ed:db:4b:0e:54:39:7d:5e:fa:7a:3f:c8:f5:ec:6a:
e8:4a:b2:5a:7a:42:2b:dd:59:b6:ed:79:f0:56:ba:
81:c8:69:81:8c:4b:26:7f:52:3b:0f:f6:a2:f7:e5:
5a:a0:50:4a:bf:01:a6:e3:29:25:79:24:55:ab:ac:
76:9f:fd:de:38:05:77:32:57:d3:4a:ae:02:0a:a4:
47:e5:85:4d:11:9e:89:91:25:71:a5:84:ba:b6:2c:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.244.0/22
IPv6:
2a02:5660::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41026
Signature Algorithm: sha256WithRSAEncryption
8b:82:4b:e1:28:59:f2:15:b3:e4:28:ed:f7:48:70:60:ad:23:
60:76:5b:74:54:e7:7f:b1:23:89:79:5f:eb:38:30:60:4b:e1:
b9:15:07:78:38:6f:42:dc:4b:50:85:93:3a:af:45:b4:c2:a4:
76:18:8f:13:8a:de:dd:87:cf:21:ea:ec:56:6c:9d:cb:c5:c1:
2b:ed:1d:3e:6f:c5:1a:9f:b1:e1:df:ce:a8:d3:62:0c:72:71:
b9:d2:1b:41:06:97:b6:16:d0:ab:97:fb:ce:7e:b8:ff:28:ea:
64:58:88:0d:c9:a7:81:53:fb:24:01:fd:db:58:96:0e:62:7d:
8a:37:e9:14:c8:fa:50:77:99:25:f6:6a:29:f6:4f:4d:87:cd:
6d:b3:b6:b5:6e:e3:8d:24:1e:b5:17:55:02:a7:19:3e:c2:99:
73:7b:ce:eb:2c:6c:fa:c5:b0:11:e1:89:32:36:51:70:07:2f:
36:ef:bb:9c:91:d5:31:a3:f7:9a:e7:5a:63:af:41:f5:e0:7a:
e0:4a:c8:39:9c:d8:9b:35:9f:b0:4a:2b:38:e5:4d:aa:fd:3b:
7a:bc:79:d4:a1:ba:a0:e0:9f:d2:6e:48:ce:04:49:88:d8:c1:
85:77:94:e6:5f:61:bf:04:de:08:8f:f7:9b:d5:20:e7:9f:1e:
9b:9f:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:04:59 2026 by rpki-client