This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer (raw, json)
Hash identifier: 7yrbqAMl+4NesU/R4G8EdOMbQ4wVLWU+8YMFuDFnw0Y=
Subject key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA561BF771D14E59AD518DD7552F83A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62013
IP: 185.162.140.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:61:bf:77:1d:14:e5:9a:d5:18:dd:75:52:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:ab:47:6d:30:c3:e2:d2:16:9f:8a:9d:2a:
67:1e:f7:f4:03:11:51:69:82:84:aa:b3:e5:16:75:
e3:60:0e:04:d2:69:d7:e7:25:74:1b:57:a4:31:97:
4e:c4:e9:73:26:08:ad:34:c2:e6:a7:5f:90:2d:b9:
14:29:53:8c:3b:b5:98:a7:4e:88:5b:c1:74:f5:3a:
34:40:41:45:82:0d:62:e1:7a:97:0f:c0:f9:cc:0b:
9e:5f:ac:b7:14:f9:d7:24:be:5f:97:81:d9:b1:7a:
58:bc:f2:a2:2e:59:df:54:42:59:72:38:c9:90:28:
81:75:69:24:76:9f:76:0e:13:ab:82:c2:e4:b0:71:
06:38:be:3d:b2:3c:04:35:85:5a:42:5f:53:00:4c:
a2:f7:31:5a:ca:16:ad:4b:71:75:29:4e:ad:d3:59:
bd:2d:44:6c:ed:fd:e9:73:3d:78:b4:22:17:ea:a9:
26:9f:73:68:d3:de:ec:6b:20:2e:84:1f:d1:36:78:
a8:96:80:39:48:3e:78:0a:b2:10:a0:4c:cd:7f:a8:
05:79:e1:42:db:1f:16:41:b1:f8:bc:44:61:9b:5e:
14:f1:3c:40:f5:f2:f9:b1:6e:00:5d:b7:e3:4a:b0:
a5:41:b1:0e:7c:16:96:60:f8:dd:94:39:89:65:bc:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.140.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62013
Signature Algorithm: sha256WithRSAEncryption
01:7d:a2:e5:3b:c0:d1:9a:f1:32:62:14:c8:0a:e4:85:af:ac:
c3:85:9f:13:1f:e1:a0:79:76:39:e8:64:d1:6c:52:d2:56:48:
03:2d:4d:02:17:7b:04:40:23:49:aa:68:67:06:7e:92:17:e8:
f4:a2:2e:ee:4f:6c:7b:20:dc:17:78:fc:ab:0b:14:e4:03:b3:
9b:bf:ae:38:79:2b:8c:a7:c9:a3:a5:7e:d4:7b:21:a0:bc:48:
c5:aa:21:6c:04:67:39:cd:5f:44:f1:e9:27:83:03:43:5f:77:
94:96:82:82:91:71:d7:f5:91:20:ba:98:9b:03:aa:d2:d8:26:
5f:03:9c:10:a3:eb:51:ab:a2:3f:a7:7a:2b:0b:e4:97:de:ea:
a6:93:22:aa:e0:83:a6:00:c5:a7:16:22:15:f5:5d:4d:99:59:
52:9f:99:ee:cc:a9:0d:6f:92:47:3d:40:9d:fa:8b:d2:a0:a4:
18:92:75:b3:ab:85:1c:13:f1:be:43:74:39:55:9d:b4:6b:13:
a9:4e:39:9f:78:63:dd:de:2c:64:d0:6e:ae:f6:65:58:44:e9:
16:a4:83:60:77:f7:ba:01:91:e9:c1:93:e7:7d:f2:61:46:d8:
1d:a3:b5:e5:02:78:bf:f9:37:3e:31:50:b9:70:15:e1:90:9d:
5e:ab:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:04:47 2026 by rpki-client