This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.cer (raw, json)
Hash identifier: PLsVrqCWfFUSk54X9hO1qosxLTCe7+bwyaMvGQcYjUQ=
Subject key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC94596E9145FC2AB00ECC8A57DEF70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:19:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34204
IP: 195.95.222.0/23
IP: 195.135.244.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:45:96:e9:14:5f:c2:ab:00:ec:c8:a5:7d:ef:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f501b9e20616d686b405da906afa597635063640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:1d:a7:42:df:ee:c9:b6:3b:8d:e7:a9:31:
b1:bd:15:b9:e4:c3:db:51:3c:b4:1d:de:4f:bf:78:
fe:35:06:1c:5f:85:41:c8:3f:c0:0a:45:e8:0a:83:
79:dd:7e:e3:ee:26:02:02:38:97:3d:3c:9e:ce:59:
9d:29:5c:a6:7f:76:bb:c8:1d:26:f3:cb:5d:d2:39:
47:76:a6:29:fd:6f:02:5b:a6:24:10:0c:a0:cd:ce:
36:c4:93:be:9e:ae:c4:d3:89:7f:52:80:0e:9c:b8:
91:6f:f4:56:d6:cb:76:76:7b:c9:79:b3:72:7a:76:
4f:8b:1a:0a:64:64:20:8a:69:0a:0d:86:aa:7b:52:
ad:20:e4:b1:de:fd:88:d0:10:1d:ce:a7:4b:81:d7:
b6:bf:ea:c1:2f:fd:00:62:47:e8:85:4b:f4:9c:bb:
16:44:c5:24:ed:12:dd:b1:46:8f:ff:ac:eb:dd:91:
7a:03:2a:57:d0:dd:21:a5:5a:9c:c7:50:65:59:8f:
72:6e:15:56:c2:c6:61:15:f6:cd:7a:b0:29:aa:19:
fb:3d:c6:a3:63:6a:e6:ea:24:57:5e:d4:f8:e6:02:
43:d9:a2:c0:30:e3:8e:63:a1:4e:6c:43:2c:f1:1a:
99:c8:e7:66:45:88:df:a5:d8:13:9d:f6:7c:c6:06:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.222.0/23
195.135.244.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34204
Signature Algorithm: sha256WithRSAEncryption
a3:ea:f2:39:59:ff:cc:8a:fb:12:a4:9a:00:e3:9f:74:3c:e0:
c8:37:45:fd:5e:b6:5a:e7:78:a1:b3:aa:35:d8:e0:2d:06:43:
5c:42:f6:32:86:94:e0:7d:eb:4c:75:b3:6e:3b:06:41:5a:cf:
fa:61:a5:d5:9f:13:96:7a:22:67:32:59:5c:f4:60:aa:67:df:
f1:65:2b:5f:6f:3d:f4:e9:20:0d:b2:41:06:5d:39:37:e9:e3:
b0:2a:cc:09:6d:c8:b3:14:91:fd:39:ca:c0:0c:2e:a3:bb:bd:
29:e5:4a:16:43:c0:5b:66:d4:3c:60:7b:29:8c:43:0f:c4:6d:
d9:39:ce:32:34:e2:8c:0a:25:f9:a2:3b:6b:37:33:ba:c9:a4:
e4:bd:e6:0c:cd:8f:8a:c3:65:53:ae:d6:64:9a:84:dd:65:be:
52:8b:7f:44:4c:43:6f:c1:3c:e0:2c:ee:58:36:20:0d:7a:c6:
11:d9:06:82:06:1a:f9:b7:71:93:63:55:a2:3d:e4:e4:50:ad:
22:3e:ad:66:4b:da:6a:24:ac:04:72:6d:48:ee:be:79:3b:7c:
0a:6f:2e:12:9a:47:9d:34:24:87:a0:e2:e2:9d:0c:a4:f8:f7:
69:00:df:97:a3:e7:de:dd:65:c7:a8:5e:14:de:65:63:39:4b:
93:d6:26:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 9 15:13:29 2026 by rpki-client