This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
File: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer (raw, json)
Hash identifier: lqls2b9jM1Txf6K4ekAD3Ayh4bAZJqysCy9rZxeHrf4=
Subject key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F8545237369D1FA7FA740289EF759E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:23:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.199.208.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:45:23:73:69:d1:fa:7f:a7:40:28:9e:f7:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:23:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:20:de:62:2a:00:4a:3f:73:72:4b:c3:ea:
59:be:e4:6e:3a:0a:87:78:7e:df:2b:ee:bd:63:53:
8e:eb:f1:f0:4c:70:13:4b:69:3f:6f:5e:47:64:3d:
84:55:f5:b5:de:84:b0:6f:e5:f3:2b:c2:d9:01:c6:
ca:5c:2d:fd:6c:d2:de:22:be:83:b4:e7:c6:1f:49:
ae:4d:06:04:ca:36:ed:2a:8d:70:a6:3c:16:9d:f8:
5a:57:75:84:b1:c6:0a:78:20:af:dd:6d:c6:85:7f:
bc:5b:58:cc:fb:ca:cb:20:ec:1e:eb:71:26:c3:26:
45:e7:75:05:ba:ce:97:20:81:90:ae:87:ea:9f:8e:
ef:7d:8d:20:02:64:81:53:fb:13:81:65:53:6b:82:
a1:79:a6:ec:04:73:79:e8:83:d9:c9:0a:c5:e9:c8:
48:a2:6b:77:52:29:ec:a7:ee:f7:cb:a3:14:67:f7:
e0:9b:ea:3f:31:cc:f4:93:eb:bc:d6:3b:7b:6a:6e:
e9:59:7d:bd:3f:35:c0:6a:80:15:32:10:af:4d:3d:
77:2c:cb:35:c2:c1:a6:82:ee:5b:67:77:77:6b:00:
6f:f0:9c:0e:48:00:4d:26:da:ac:76:98:ef:92:12:
2f:0b:de:b2:78:1c:ab:1b:67:fe:f4:5c:33:63:64:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.208.0/24
Signature Algorithm: sha256WithRSAEncryption
50:75:d1:83:16:4e:47:b4:66:18:a9:0c:6d:75:1c:4d:d0:4d:
36:48:f4:50:1e:9c:42:fe:66:d1:9d:82:b4:66:83:fd:01:5f:
dd:06:6e:9f:73:38:93:5d:1a:83:c2:37:8e:a9:24:a3:c5:b3:
03:d1:e9:a6:b3:12:9e:83:56:ac:e6:9f:b9:dc:81:3c:e3:81:
44:8e:64:d8:69:61:c1:1c:cb:4d:92:d9:74:ad:16:72:2c:1a:
29:25:03:24:06:c2:f0:d6:55:49:22:95:3c:36:7e:a8:dc:be:
36:2c:8f:98:1e:85:79:cc:c6:a6:a7:0a:22:46:70:30:6d:f1:
08:6d:f7:2a:31:20:7b:e6:30:9f:bd:5c:c0:d9:90:b4:e7:44:
04:7e:27:9a:71:20:55:fc:d4:b7:df:43:d3:d8:5f:0a:dd:d5:
63:32:58:a4:22:f3:ad:83:f9:6d:99:bb:34:80:7c:e7:ba:8d:
36:da:34:b4:47:20:1d:bf:63:b4:a2:92:56:a3:f4:27:9d:ad:
d1:fc:fe:5e:b6:07:4f:0d:9d:41:cc:8a:9e:22:88:ab:44:9f:
c9:c5:91:97:f0:f8:25:af:fa:95:ae:35:cd:82:3f:ed:63:5f:
b6:fa:3e:91:36:a0:9f:8e:e3:93:f8:6d:af:17:39:06:80:dc:
6f:e4:53:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:11:35 2026 by rpki-client