This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
File: V0zsR2DtovCf62939yFCvmmbuMM.cer (raw, json)
Hash identifier: 8Kg7JLHdEAF9bOj0Tg5wQ8PshNiSpxJiNrJPONb/l80=
Subject key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C76608AEDC6A26338F2CD84D3F5BDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 81.90.180.0/22
IP: 194.76.36.0/23
IP: 194.76.46.0/23
IP: 2a0f:2440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:66:08:ae:dc:6a:26:33:8f:2c:d8:4d:3f:5b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:92:14:52:75:e1:0a:e2:bd:11:ff:7a:ca:
8e:42:1f:52:41:3a:04:f6:34:71:b1:6e:8c:0a:3c:
42:a6:4a:d3:df:14:14:d2:df:39:3d:c8:b9:0c:95:
bf:82:57:9a:ce:b8:2a:7e:97:1d:06:ad:b9:1a:33:
2a:68:6c:e0:df:3a:5a:91:e3:d0:33:fe:f6:21:b6:
a3:b5:b5:58:ac:f7:a7:d1:f1:e7:39:d8:81:1f:e5:
1c:2c:fc:31:d9:d9:7e:d0:8b:9c:bf:26:88:00:1b:
44:74:c2:4e:0c:22:e3:fb:1a:43:8b:3a:27:c2:2c:
98:b4:87:c4:e3:11:3d:20:4f:1c:16:57:f3:57:95:
cf:cd:00:88:4e:68:4b:89:0e:0a:2f:24:c8:e2:36:
e4:22:f6:36:3e:58:d8:84:76:bc:b4:3f:c4:f9:8d:
74:8b:0d:20:ad:70:9d:9b:94:44:43:75:f5:08:e9:
29:ed:d1:e7:46:ff:94:60:e6:97:97:12:60:14:23:
0c:e9:bb:de:9d:d5:b8:c0:09:a6:0f:b3:b2:ee:4a:
d5:9f:cc:6a:ac:03:2e:98:e3:32:2c:12:16:c7:09:
41:15:54:0b:a0:95:42:d3:c8:22:72:21:97:89:90:
ed:62:ec:05:02:54:51:f3:55:1f:72:ac:1b:d1:cf:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.180.0/22
194.76.36.0/23
194.76.46.0/23
IPv6:
2a0f:2440::/29
Signature Algorithm: sha256WithRSAEncryption
b1:f8:24:b3:66:9b:6d:a1:a4:5d:3c:27:50:7c:7a:87:d4:e9:
31:33:6a:89:b1:55:b0:84:36:37:12:13:d6:06:5f:f2:5a:36:
f6:26:d3:a1:de:3d:12:46:ef:38:34:40:31:9f:5f:dc:e8:a2:
b0:5b:c6:e8:2e:06:42:2a:44:0e:32:90:ca:66:e6:9e:c6:61:
5c:19:4c:45:9e:a4:d1:b2:56:39:00:84:92:81:b7:34:3b:1b:
5a:03:2e:8b:12:48:74:14:32:1b:ae:e6:f1:62:95:d4:4c:80:
e5:c8:2a:17:fa:f3:85:c4:a5:16:12:c2:4b:09:8a:74:ed:31:
5d:94:3d:40:a5:b2:aa:64:35:74:0d:47:50:32:a8:92:12:6c:
bc:d2:54:dd:2e:e5:2f:e6:d7:ed:b0:1a:b2:b7:3f:2e:d0:c6:
70:7e:b5:0d:43:ab:df:a7:5c:73:cd:4f:ec:32:77:94:a2:8e:
a6:ee:ec:44:47:e5:df:93:f8:b4:c9:d2:bb:d4:0a:90:22:4d:
18:8c:0e:14:f5:29:d2:cc:1b:af:9b:ea:cf:a0:6d:b9:b1:43:
5d:5d:bf:51:04:a3:e9:87:cb:ea:ea:0e:85:fb:15:9d:1b:49:
c3:69:97:6d:c5:50:3e:84:94:ef:fc:55:67:24:82:d5:7e:42:
6a:70:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:06:16 2026 by rpki-client