This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.cer (raw, json)
Hash identifier: ruY2lCJtOyZ5ybkwJ+28fC9ylrMmVUqNp/3Or45zPZE=
Subject key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B362BD6DA3813A040F26AA85725198C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 15726
AS: 197932
IP: 37.60.200.0/21
IP: 46.231.232.0/21
IP: 193.39.192.0/24
IP: 213.149.64.0/20
IP: 217.14.160.0/20
IP: 2a00:f88::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:2b:d6:da:38:13:a0:40:f2:6a:a8:57:25:19:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:2a:26:39:87:fe:04:18:00:66:c3:17:f0:
9b:70:f6:32:35:77:29:b9:90:e3:1e:98:e9:04:d8:
42:14:ef:55:7d:f4:1b:1c:92:07:73:3d:a2:1c:11:
f0:3f:2b:ec:85:79:93:e7:1a:c4:a1:2d:51:94:49:
84:6c:28:22:03:7e:ac:cc:6f:cc:a6:c4:db:5a:f1:
ce:80:67:64:3a:0c:e9:56:a0:de:6f:03:84:dc:b5:
a3:ed:6c:a3:db:0a:82:44:fa:62:90:f5:74:ad:0d:
c3:15:3b:37:b9:81:24:5e:a5:01:a3:f6:80:0f:b5:
4a:f4:f0:0d:c5:65:91:b3:cf:92:8e:c9:bb:78:07:
37:7e:d7:b1:cd:42:e1:2d:5c:f3:0b:fc:65:f7:ac:
a1:92:90:2e:22:c3:86:b6:b9:28:5b:7c:58:22:23:
84:7a:52:dd:e1:6c:83:23:6e:1b:18:e8:84:30:fe:
db:e6:ff:56:03:c4:08:5b:a3:e8:39:63:a4:96:2f:
b9:f8:b8:82:ba:05:d9:1b:1c:57:7e:93:e0:e2:95:
c5:ba:83:08:74:14:9c:ef:dc:f0:51:94:ee:15:b0:
3c:e3:37:8b:56:ae:db:54:44:42:1a:df:e5:1f:44:
10:35:a5:3e:94:ec:2b:ba:75:1a:56:32:55:89:3e:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.200.0/21
46.231.232.0/21
193.39.192.0/24
213.149.64.0/20
217.14.160.0/20
IPv6:
2a00:f88::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15726
197932
Signature Algorithm: sha256WithRSAEncryption
2e:8d:bd:86:cd:12:43:2a:0a:34:72:7f:cd:01:a3:ce:d5:5d:
3d:70:4f:01:d1:8a:ff:48:54:12:d8:09:f4:f1:c0:ec:62:e0:
ca:fe:de:9d:ab:b7:52:50:4c:cd:83:44:ec:0f:8c:09:68:38:
76:d2:f4:2c:60:ae:08:bd:3f:f9:30:73:dd:0f:a4:53:f7:44:
f3:a9:64:cd:9f:c9:e3:5a:c9:8a:6e:61:72:57:ac:3b:b2:e5:
bf:97:65:f3:bd:e4:22:f2:2c:f8:25:bf:b3:11:ef:93:a7:a1:
9f:9e:cf:c9:7a:bb:af:28:27:54:8d:3e:91:dd:e0:e1:a4:7f:
8a:a4:4b:4b:82:47:59:fc:03:6e:0e:a7:ed:5a:3e:b2:8b:53:
dd:c9:96:3b:94:aa:58:19:f1:0d:48:e3:13:e1:3e:7b:3a:73:
fb:d7:6d:06:9d:4d:df:c4:50:1d:aa:df:a9:fa:8a:fe:b3:84:
d1:e5:ac:a9:a7:e6:ff:54:4a:34:06:07:41:7b:17:86:e8:ab:
9d:3f:ff:16:60:ca:2c:b5:2a:26:92:00:84:ad:a7:0e:d6:53:
44:9d:f8:8a:16:2a:b0:46:84:bc:09:51:ec:22:98:37:9b:d0:
30:3b:ec:05:0e:68:22:1d:b9:5c:7e:f2:31:2e:62:67:a8:9c:
ef:79:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:40 2026 by rpki-client