This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer
File: GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer (raw, json)
Hash identifier: n2K9w75YewLfotUOi3lKc2TQQ+yHmE8p/Pv1J4TH3L4=
Subject key identifier: 1A:34:16:89:45:1E:53:5B:F5:5C:CB:7D:35:1A:57:0C:89:34:58:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BB76CAC9A613426A0A875F5020A88C721
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Jan 2026 12:55:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202396
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b7:6c:ac:9a:61:34:26:a0:a8:75:f5:02:0a:88:c7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 13 12:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a341689451e535bf55ccb7d351a570c893458d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:38:d0:31:a7:62:32:dd:f1:3a:d9:e1:fb:
1f:91:17:d6:08:56:1b:65:5d:37:62:43:4e:3f:ff:
f9:67:c4:b8:f6:b6:1c:6f:aa:46:2c:b0:bd:4d:fe:
95:d3:f9:be:2d:3b:a9:1b:c5:b5:a7:e9:88:71:8b:
72:54:1f:04:9e:84:c3:f0:78:da:a6:8e:c6:ae:44:
54:61:c0:45:39:ee:88:c0:95:77:f9:14:5e:54:18:
f4:04:c2:51:80:b3:fa:0a:33:31:af:93:2d:fa:cc:
95:49:56:83:18:7d:b1:ce:57:4e:8a:36:70:67:c6:
8e:19:94:7a:27:f8:6f:07:7b:25:27:16:87:19:b1:
6b:a6:80:fe:a6:45:d6:45:67:48:df:7e:55:be:27:
37:ba:e4:e5:ac:c4:e7:8e:12:94:39:ef:28:d9:e6:
09:69:41:75:38:d8:08:a7:44:ab:04:d6:62:ec:fb:
82:cc:cc:46:08:2b:1f:7e:10:b9:3a:b7:05:80:82:
4d:0c:63:71:da:21:36:b6:a5:bc:e2:ba:65:85:c0:
58:8b:cc:dd:56:ea:4f:74:17:92:ee:a1:39:70:c4:
0d:c4:6a:d3:e2:bc:de:ee:ee:50:9e:95:d0:d5:34:
a5:db:cd:31:57:11:0f:d2:de:23:c1:17:72:00:45:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:34:16:89:45:1E:53:5B:F5:5C:CB:7D:35:1A:57:0C:89:34:58:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202396
Signature Algorithm: sha256WithRSAEncryption
61:dd:b1:e0:61:2a:6e:4b:0c:b7:42:aa:a7:3e:af:ae:40:51:
9e:3c:c4:89:7a:ee:aa:68:ef:ba:e2:67:9a:fe:bb:2b:a3:1c:
db:1b:cd:bd:44:e8:4a:23:e5:8f:17:de:b8:26:0c:a1:74:5b:
64:56:c6:63:46:ff:51:61:37:90:92:ed:6a:b3:00:ef:4b:b2:
6e:42:11:b9:4d:5d:f9:d0:ed:6d:2e:21:27:b3:59:11:bf:bc:
9e:a6:8d:d8:87:75:cc:d4:a0:d3:2e:fd:23:6b:8c:17:3e:28:
49:94:85:f3:4e:3f:ed:0d:4b:d1:93:1e:5c:36:20:44:13:40:
aa:c1:36:da:16:6c:34:37:8e:da:7a:34:cd:e2:81:12:81:d5:
d9:e4:5a:90:69:2b:9b:42:c6:fa:ce:8e:e9:25:de:82:e4:bd:
9c:a2:e1:e2:f5:78:dc:49:ad:4e:73:0a:9a:38:0a:e3:cd:75:
9c:8b:59:3e:01:39:f2:8c:bd:50:d7:d2:6d:d4:58:e7:2d:2f:
7c:7b:60:27:5a:e0:40:26:c2:96:dd:e9:6f:43:d7:59:b6:20:
8a:01:60:a8:f5:0f:69:f3:21:c0:50:b7:5f:d5:16:7d:b9:92:
fb:b4:42:af:d0:a3:8d:ad:c9:d2:44:8a:90:4a:88:34:cc:b5:
78:72:02:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:41 2026 by rpki-client