This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
File: SPEmUDG2es3hHypnONAjRpnRgBc.cer (raw, json)
Hash identifier: RUqKN2AjeZLRSLt/7crjACIHnTOrpRulB3JijzoVnik=
Subject key identifier: 48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797EEBBCC45FE837D41CEAC46AE27066
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215517
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:eb:bc:c4:5f:e8:37:d4:1c:ea:c4:6a:e2:70:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48f1265031b67acde11f2a6738d0234699d18017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:3b:bc:c6:e8:0e:6b:75:82:2f:6f:79:74:
ee:cf:c7:45:72:41:0e:2f:77:2f:4d:c9:b7:99:bc:
ae:65:02:3c:d2:d3:8a:79:66:25:98:ca:63:2b:16:
4d:d1:f5:a6:fb:21:11:3c:d6:f6:6f:12:4d:f6:e2:
68:44:eb:16:9d:ff:46:34:ae:2f:fa:1f:16:ba:01:
54:e9:6d:15:2a:25:8b:75:2f:54:1a:2d:9d:55:58:
0f:87:4f:58:3f:78:69:1f:b5:61:45:99:6e:76:0b:
b0:02:ec:42:97:92:98:58:0f:3c:c0:46:3f:a4:a0:
6b:55:6e:de:6c:7f:33:b8:e5:e6:2b:71:06:58:f0:
f5:b5:52:44:c5:54:7f:eb:23:64:11:b0:ae:4a:5b:
fe:81:1b:80:33:18:8b:04:f7:9a:1b:a2:84:9b:31:
ce:4c:79:11:84:d9:87:3f:d0:d8:85:e5:19:20:44:
40:b5:67:ac:f8:1b:6a:f6:80:a8:57:54:fa:a6:16:
f7:43:17:18:68:cf:d9:f7:19:c2:1b:7a:15:32:1f:
dd:93:98:02:90:cc:e3:47:a1:09:46:26:22:22:24:
a4:b7:c7:e3:ce:5a:71:35:e4:31:48:d2:6d:7e:99:
84:d0:4c:39:f9:5c:24:03:64:dd:ca:1e:09:94:2b:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215517
Signature Algorithm: sha256WithRSAEncryption
1b:80:10:9c:95:0c:3b:fc:28:29:87:cc:44:28:e1:af:ec:06:
43:ec:1f:2e:13:dc:49:a8:55:68:12:c9:e6:3a:0d:43:97:e5:
ae:f2:a9:74:be:c3:c2:3e:da:c8:14:a8:b4:35:bb:81:01:b4:
8b:6e:94:15:1d:60:bd:05:a2:13:9b:1e:2f:8a:81:37:bb:ca:
09:61:4b:0a:cb:34:ba:8e:7b:56:9b:40:0b:46:2a:35:ca:f4:
c0:48:1f:ea:84:5e:16:23:7d:80:41:bd:ec:5a:61:6b:6b:42:
32:23:0f:94:20:f5:2b:85:4c:7a:86:5c:b9:53:41:84:0c:10:
fe:59:d2:18:87:a2:52:fa:e9:b3:2f:82:7e:10:37:66:24:f7:
08:00:2a:2f:69:e2:7d:4c:de:c3:2a:5f:4b:12:66:c6:0d:46:
ab:c2:79:a8:de:f7:47:c6:e8:51:b0:bb:72:48:cf:d2:af:87:
8d:50:52:f6:51:d0:4d:21:d8:a1:26:7e:10:e9:5c:7d:46:dc:
60:ed:15:ab:f9:4f:09:ac:46:0b:bf:b3:94:3b:db:32:08:c3:
ba:6d:1a:10:02:6c:58:0e:31:07:ae:60:95:45:e1:0a:60:14:
9f:ba:69:5c:f7:b2:b8:99:3c:5f:df:21:00:9b:db:fe:a0:1d:
2e:4d:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:25:31 2026 by rpki-client