This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
File: P6xpra8ADdd6SwAYd8JYoh0f9qA.cer (raw, json)
Hash identifier: nuMj8V2P2kEwk9o+u5u6N8P1dZ7zD4QitHrkQmySCc8=
Subject key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5CED7B59ACDA5309492DAEB757B7F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:20:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205556
IP: 185.213.180.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:ed:7b:59:ac:da:53:09:49:2d:ae:b7:57:b7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:20:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:0d:06:84:5a:be:0c:75:7c:8b:57:a9:5f:
a5:09:04:cd:07:a6:a9:e6:07:f8:27:94:33:5d:68:
c0:f0:4d:4b:66:e7:af:b6:fa:9c:49:2d:b0:c9:df:
0a:ba:c2:ac:a6:c8:01:52:ef:6d:d1:8e:b4:a9:dd:
42:c6:6e:8a:ec:a3:4c:41:f5:2f:17:26:2f:1f:5b:
2f:88:43:f1:e6:c4:9c:63:99:45:91:62:bb:63:df:
4b:42:55:69:f7:df:bb:f9:f1:bc:ed:fc:ef:d3:4a:
32:2f:9b:a3:87:12:30:f1:7e:b9:e8:19:8e:ba:d0:
4e:cc:6f:7d:bb:5d:cf:d0:80:be:23:24:63:30:ea:
5f:2b:77:6f:5b:e0:53:f1:ef:14:9f:f6:d6:99:b4:
6c:0a:fc:01:a4:3f:43:0c:7e:33:66:a2:82:0f:f1:
4e:1a:a9:41:44:25:8a:e1:d0:cd:d0:31:b2:23:8b:
a8:64:97:32:32:98:b9:84:9a:1e:6a:43:66:c2:f0:
b1:38:2a:54:4b:37:8b:7c:07:60:ad:11:b1:fe:ed:
a9:b8:22:69:4e:95:ec:bf:67:16:41:f4:5d:9a:0b:
29:c7:42:ee:84:ae:58:ad:ca:7a:3c:cf:5d:02:4a:
5b:ba:f9:a8:d9:51:1c:e3:58:3b:ee:80:e3:be:b4:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.180.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205556
Signature Algorithm: sha256WithRSAEncryption
ab:a5:ac:ed:e9:c6:d3:6c:2f:61:8d:a1:2d:d3:af:5f:7d:e9:
d8:d5:45:e6:29:93:a5:8a:cd:b6:7c:7b:26:5d:0c:00:12:4c:
99:2a:15:3c:c3:c1:23:29:d8:8e:aa:06:33:4b:51:fc:09:d9:
95:4d:03:df:a9:ee:fe:9c:b2:63:f2:7b:fb:4d:6f:ff:be:9e:
3c:2b:8b:82:80:f9:f1:30:45:ab:f1:76:c8:74:34:91:27:87:
fb:ef:9d:75:49:87:66:31:40:3e:c1:4b:a6:f8:f9:42:66:cf:
30:07:4e:2c:f6:ec:73:13:55:c1:f9:f5:85:25:c3:e5:35:92:
cf:68:3a:b8:1d:06:aa:ce:23:b6:ab:7b:86:37:01:d8:7d:03:
a7:94:05:bc:75:62:63:10:e6:a6:55:ae:81:d3:8d:de:4b:fa:
5c:4d:fd:66:a8:bd:cd:f8:eb:8b:06:6b:98:a1:d3:1b:a3:ca:
28:a6:c3:33:a1:ce:3f:d5:23:39:6e:6b:4c:c4:b7:5e:e1:6f:
49:54:81:ba:8e:87:cb:54:6d:1e:b8:55:ba:ec:fc:5d:5d:d1:
bf:55:2a:ed:cd:e7:c6:bb:4b:dc:34:d2:49:3f:68:ba:f4:89:
75:d6:8a:12:15:56:9f:9b:c0:59:9f:08:f2:b3:41:43:e8:45:
f2:a2:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:24:54 2026 by rpki-client