This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer
File: V4jMDw7cVfJvTBtahve-RVHU4xU.cer (raw, json)
Hash identifier: JTlzlTeiwwg09nFnnH/lTOYRgLxbPWlwSP0Kf8ypoxg=
Subject key identifier: 57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC79179B2726DA72B168684979A2AAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:17:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44906
IP: 194.42.44.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:91:79:b2:72:6d:a7:2b:16:86:84:97:9a:2a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5788cc0f0edc55f26f4c1b5a86f7be4551d4e315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:69:7f:67:e0:5e:b6:e1:09:59:5e:8c:b3:
7c:a1:7e:40:71:33:e0:a3:f5:16:2e:eb:b0:78:75:
d7:a2:f8:66:a2:ee:9d:8a:a7:9d:ff:15:63:7e:3a:
60:e2:b2:40:98:ec:f5:f9:96:33:49:44:e4:59:2c:
2c:3b:44:22:d2:a0:a5:bb:b3:f5:c6:9c:05:b5:9f:
8b:ff:84:96:30:9b:63:00:97:82:77:5a:78:4e:a4:
c5:68:8e:12:86:20:c6:29:87:58:27:a1:84:eb:1e:
82:7b:f1:60:11:67:62:2e:bb:a1:46:73:f1:76:27:
9e:76:5c:fe:d0:30:db:31:51:1a:b8:78:82:3a:6c:
a2:f4:5c:cd:e9:75:77:96:12:5b:86:ab:27:3c:db:
f8:66:a9:f6:79:cd:8d:d4:7c:7c:26:97:a1:45:97:
c9:30:e7:c6:6d:b0:5b:10:43:16:73:4c:06:db:64:
b4:fd:5a:06:3a:03:3e:5f:6b:d8:99:9f:55:8d:df:
67:f0:fa:d8:8a:bf:67:15:5d:43:ba:e7:fa:5e:ec:
83:c1:e5:76:64:a2:49:e7:f7:8c:89:28:00:0a:1c:
30:73:69:5d:62:c6:4b:35:a8:e9:74:7f:d0:53:3b:
90:bb:50:47:ec:3a:37:e5:18:cb:1e:33:d8:23:14:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.44.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44906
Signature Algorithm: sha256WithRSAEncryption
9b:a6:72:c6:41:b2:57:9e:5c:89:06:39:36:1f:2b:be:dd:7d:
7f:d0:43:ed:2e:d7:ec:d3:9f:1d:93:87:a4:a3:ea:ab:a9:1d:
4d:b9:0f:7b:5b:0d:29:f0:b4:de:0a:41:c8:fa:0d:f2:ab:d9:
e4:d1:5b:84:08:07:65:46:b6:ce:98:f5:dd:96:9a:b5:6e:61:
22:b4:e6:98:62:38:ff:21:82:07:af:96:5a:bc:82:31:07:34:
7f:36:be:8f:2a:72:4c:48:15:e2:63:60:56:a5:46:d6:c9:85:
21:19:85:17:4f:0a:f3:6a:8e:b3:51:fa:ba:58:95:24:b7:9b:
50:96:d5:b5:34:97:03:25:58:26:56:2f:c4:3d:f9:fe:3d:b1:
83:00:9f:55:64:4a:b7:25:be:3c:5b:f7:0f:3c:25:77:a4:aa:
be:57:5b:a8:c6:51:f0:fa:21:5d:91:68:ba:dc:2c:10:b3:ba:
7d:6d:60:04:5a:ba:45:e2:5d:51:cb:ea:e0:48:7f:f9:02:96:
39:c3:65:b0:59:aa:a2:45:16:6c:e0:93:d5:d4:a8:c0:f5:4b:
c0:6c:65:c5:f8:ba:5f:8b:31:b7:17:7b:32:e1:fa:be:d2:bb:
1e:83:a1:50:77:af:3e:5c:4e:56:4a:84:e9:57:15:c1:4e:83:
4e:78:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:41:37 2026 by rpki-client