This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UxaLNBXn3zj4R7W0mDv1lGixsjE.cer
File: UxaLNBXn3zj4R7W0mDv1lGixsjE.cer (raw, json)
Hash identifier: M9h7+rn4Y40CumUaaZ9N33TYi9lSW5voqZdV8ouDXVM=
Subject key identifier: 53:16:8B:34:15:E7:DF:38:F8:47:B5:B4:98:3B:F5:94:68:B1:B2:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B953B26ED9747951BC6246AAF097EEF6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/UxaLNBXn3zj4R7W0mDv1lGixsjE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 Jan 2026 21:34:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56799
AS: 58296
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:95:3b:26:ed:97:47:95:1b:c6:24:6a:af:09:7e:ef:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 6 21:34:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53168b3415e7df38f847b5b4983bf59468b1b231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:03:57:0f:b8:aa:65:55:35:10:7d:46:2f:
ac:93:38:eb:48:a8:95:01:4e:cc:5b:94:28:77:39:
01:3d:20:11:29:33:e3:cb:15:9c:e8:cd:6e:95:6b:
2c:a4:96:5c:73:b9:52:69:7a:e4:5b:c6:4e:0a:6a:
2c:30:a6:ad:ac:9c:8f:94:5c:d1:03:64:b2:d3:9f:
8f:31:42:dc:4a:75:92:fd:ec:f0:1c:64:f6:ff:7f:
8e:b6:e1:7c:e5:30:97:0a:12:35:fc:b2:1c:00:aa:
c2:98:95:12:80:a4:8e:4c:39:ed:f9:cb:de:e2:c8:
bc:3e:98:22:32:36:79:46:2f:08:20:65:aa:c0:ea:
09:89:8c:cd:de:5b:4d:65:d0:62:ed:b7:29:ab:09:
eb:cc:0e:90:9d:0c:16:85:1c:5d:35:ab:5a:18:06:
af:31:ec:09:a3:86:c8:0a:a3:65:62:64:43:08:8c:
34:14:2e:af:c8:79:63:96:43:24:0b:d4:93:e2:1e:
04:7e:b6:db:f3:37:a6:8f:e6:52:62:92:d0:7f:01:
95:19:aa:fc:d1:cd:8b:5c:fc:00:81:04:4d:0c:24:
93:d5:d9:55:78:50:b7:72:f9:a0:44:3e:a3:cf:87:
f8:83:91:65:2e:1e:cb:37:3f:ba:6b:16:01:01:1f:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:16:8B:34:15:E7:DF:38:F8:47:B5:B4:98:3B:F5:94:68:B1:B2:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/UxaLNBXn3zj4R7W0mDv1lGixsjE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56799
58296
Signature Algorithm: sha256WithRSAEncryption
1f:14:3d:20:19:21:36:46:e0:cb:53:9b:ce:67:f1:f3:b2:2a:
de:8d:dd:15:ea:76:2e:f8:f0:65:de:28:0a:8b:73:0a:18:3c:
a5:29:27:1a:a5:bd:8d:36:97:da:c4:2d:e3:2f:44:e8:98:e1:
f0:44:35:cf:20:51:57:a5:01:66:3d:68:2e:3e:c5:3d:ba:88:
91:e3:3e:2e:6b:9f:b3:51:83:8a:6c:e6:67:c9:60:6a:82:cc:
4a:b3:02:fe:a3:18:b5:89:d2:09:d3:96:85:d2:02:91:4f:e5:
b4:67:90:85:22:d9:cc:65:c6:e1:d8:48:34:45:31:19:46:5d:
8a:74:61:30:51:d2:b9:b8:e0:99:45:97:7b:ae:37:c7:1a:5f:
b5:d4:50:f0:c5:4a:5b:4a:17:3e:63:c2:8a:8b:82:13:43:da:
91:32:44:e7:66:09:3c:f8:85:ae:ae:e3:53:f0:8c:0c:f5:bf:
88:61:ad:a1:ae:b8:6a:aa:c0:ad:e1:ff:a9:f8:72:97:f9:d6:
4f:d4:67:a1:0d:e9:7c:22:f1:76:bc:7e:c8:2e:48:41:66:92:
35:23:af:76:29:af:57:ec:7a:9a:bb:81:86:ec:4f:c7:ad:0a:
27:f8:65:48:dc:76:e4:8e:b2:27:24:b5:a6:82:89:b9:88:e5:
ba:9b:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:02:23 2026 by rpki-client