This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer
File: RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer (raw, json)
Hash identifier: gQ2R1nMfuyxTL+9RB+xvU4vDTZ3yD9WB/Rq8WTlIVJo=
Subject key identifier: 46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BBB62F96B31965E37113506B18B09D6A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Jan 2026 07:23:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a12:3980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:bb:62:f9:6b:31:96:5e:37:11:35:06:b1:8b:09:d6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 14 07:23:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46ab1605a60fa89cc199cfd8cfeb7cc85cab3726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:1f:5e:5d:49:2d:8c:01:03:1a:9a:46:27:
c4:48:98:ab:5e:7a:e4:b9:8f:31:d7:c6:2e:a1:fd:
3a:7a:72:7d:ce:0d:d6:96:15:79:bc:fe:ce:a6:e8:
79:28:2f:7e:f9:e6:e5:9c:13:79:8d:70:8b:f6:8f:
fc:0d:40:6a:35:dc:87:c2:07:3b:61:e5:04:99:39:
ce:7b:77:49:78:23:f5:73:3f:49:65:8e:62:bf:93:
94:12:a0:db:dc:4d:e7:15:ac:5d:54:2e:f3:90:f2:
02:95:4b:6f:6f:e5:ea:ca:43:c7:0b:8c:cd:b9:b1:
8d:d8:af:35:14:78:e9:6f:20:cc:ed:6e:e6:73:ce:
8f:2b:bf:9f:82:d7:4c:06:3c:c4:a3:96:f6:b5:5d:
f8:64:33:a4:2f:bf:5e:60:a6:b4:3f:b5:7d:e0:af:
ab:fa:e6:94:2c:55:68:8d:17:ec:6d:66:ed:a0:35:
f6:f8:df:43:3e:51:ea:aa:94:c2:0f:9e:cd:de:fc:
17:77:45:dc:c6:f1:92:c4:91:8a:c1:4d:14:98:e0:
e0:2e:4c:3f:36:85:58:f0:67:e8:dc:00:dd:08:fb:
cb:32:ee:b2:72:e5:e8:3f:0e:ab:9c:d1:9d:19:a6:
37:ff:bf:f9:fe:75:2e:c8:b4:f9:79:d7:70:62:03:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3980::/29
Signature Algorithm: sha256WithRSAEncryption
1b:f4:93:6f:43:ff:2f:37:04:b8:22:b3:94:ca:3d:97:29:38:
33:66:58:77:cc:12:5c:93:5b:d8:41:9e:4f:e3:9a:a8:db:80:
57:e3:99:1d:8f:a6:5c:bb:7f:db:97:80:4b:2b:50:3a:29:12:
80:64:47:78:e4:cf:e9:27:8b:13:17:4a:89:d3:d5:e1:55:c1:
b6:30:9e:04:5c:37:67:a0:83:b1:d7:45:a1:68:20:df:a9:a3:
4a:62:2f:68:c0:05:b6:d1:b9:6a:7b:c1:b1:0f:f8:79:18:74:
3a:55:97:4a:c4:0e:1f:3d:64:c7:f7:88:ab:b4:68:ed:ea:4b:
56:1b:21:4b:cf:9c:bb:18:02:b1:2b:db:2c:f1:7e:ba:55:df:
82:66:6d:14:32:38:b6:07:72:c1:36:dd:d4:7d:e0:d6:2a:f5:
f8:5b:a8:52:ba:7a:65:ff:69:74:5f:9a:62:c6:ee:f3:c6:f6:
16:08:d2:ab:65:79:39:99:8c:9c:4a:9d:4b:11:a3:17:73:f4:
16:1d:27:1c:aa:bd:cb:93:0b:22:bb:91:d5:12:9a:fc:14:56:
5a:09:2b:a3:53:92:b2:45:e8:10:4e:63:f3:5f:b5:80:76:ba:
50:1d:19:96:07:07:ae:72:ec:e5:13:d6:f5:22:15:7f:08:7d:
12:90:32:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:02:24 2026 by rpki-client