This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
File: Kt_vhCTbu4eonZOJhODis-2aq4s.cer (raw, json)
Hash identifier: 4EwWyKEKsdd+pQJHIkx9RIHK0DkssncZ53wjfswQNyc=
Subject key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DC89782897C4ABDE1419DA7F7B6D037
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:17:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215910
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c8:97:82:89:7c:4a:bd:e1:41:9d:a7:f7:b6:d0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:85:27:de:1a:ad:ab:9d:88:d4:28:ca:21:
2b:ad:f8:34:f0:64:60:13:39:91:75:61:40:32:a1:
e3:9a:d0:29:1e:7e:ca:12:27:15:44:f9:cd:4c:5c:
36:6e:cd:46:45:44:3a:5d:ef:bb:b8:7c:6e:3b:c6:
84:d5:9c:ae:15:7e:70:87:6d:f5:1d:64:02:fa:1f:
89:9e:2d:35:40:f7:7a:df:5c:e7:bc:19:9c:b5:4a:
b2:81:e0:3a:0b:8f:b6:e7:32:3c:77:2f:08:08:28:
44:e9:87:b3:2f:79:81:d0:5a:04:35:55:c0:a3:aa:
6b:ee:de:bd:f5:20:57:46:74:1e:be:a1:15:29:37:
d1:9d:6e:15:bf:2e:8f:0a:ac:89:4f:0f:2b:b7:41:
ca:5e:3c:70:7e:83:dc:b8:c6:1b:6e:bd:93:16:5a:
c1:77:bb:d8:59:b8:cd:c3:bf:55:f3:14:5f:5a:f6:
7b:18:1e:f2:19:82:a6:5b:ca:07:9e:0d:d1:c8:f9:
c9:e2:8a:99:83:95:4c:45:21:c8:94:57:8c:f4:cf:
29:81:18:9b:f7:d1:fb:19:d9:87:51:5d:fd:cd:fc:
07:8f:d1:3a:fd:c3:c9:08:1a:b4:cf:36:05:db:2a:
a8:4a:99:37:c3:c7:a2:57:d3:72:c5:f2:c3:d7:45:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215910
Signature Algorithm: sha256WithRSAEncryption
10:65:76:b1:db:6e:84:7e:92:da:ad:d9:00:6d:50:e5:47:62:
d0:6a:2a:6e:5b:70:56:ce:d1:7b:1b:4f:e7:21:e3:da:51:c4:
11:e5:64:72:d1:f1:c3:ca:c0:38:b3:af:ba:bc:1f:e5:9f:05:
dd:ba:95:e3:bb:08:b4:90:38:4e:0f:be:d1:df:2d:e6:9b:7e:
32:21:df:0d:07:83:66:f1:30:99:76:8c:30:25:bb:54:02:50:
8f:c4:c9:87:8c:b8:14:e0:88:48:fb:f7:3c:bc:ca:80:41:9f:
c2:a4:f0:26:3d:30:6f:8c:92:a9:1a:b1:ec:70:8a:6c:89:fc:
17:b3:ab:e0:32:5a:74:5c:45:ee:31:11:a4:44:c1:ed:a7:2a:
24:96:e3:79:95:a8:50:cf:f9:75:ad:3d:25:12:10:6f:bc:e0:
74:53:1a:d2:33:64:89:90:34:16:65:c0:43:b5:fa:35:1e:b5:
e5:7a:45:d0:16:af:57:8c:c4:e5:85:ff:c8:4d:1e:aa:50:18:
f4:00:0c:42:d0:a1:42:08:5b:e8:69:8a:41:ab:9c:b9:aa:67:
93:33:a3:28:64:72:16:64:91:f0:fa:dc:84:69:31:a7:12:8f:
27:34:88:f0:25:1f:52:fe:c8:36:7d:e7:31:ff:a4:38:41:c4:
7f:56:6a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:50:38 2026 by rpki-client