This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
File: eSxdjDLKpGYjFoWMZb6-EshhrWc.cer (raw, json)
Hash identifier: DtLlZHgBmcihS92tv5J9lz2vg/xqHB2xfuzEm2/ADCI=
Subject key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B775913CFE122E632E8EF0C5C2E28463C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49672
IP: 91.212.178.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:13:cf:e1:22:e6:32:e8:ef:0c:5c:2e:28:46:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=792c5d8c32caa4662316858c65bebe12c861ad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:b7:61:a6:06:d1:c1:cb:2e:b1:8b:ff:df:
99:d1:49:f4:a6:57:c1:cd:ea:23:9a:23:90:50:65:
dd:ec:ba:77:f3:2e:de:ac:c1:2f:b7:9d:eb:ce:f6:
fc:f0:62:26:82:c7:0c:62:6d:06:23:22:ba:83:40:
ab:a2:3f:79:e3:9b:e2:c5:f6:2a:7c:65:aa:b4:5a:
be:41:75:d9:48:23:f9:46:63:0f:7c:79:74:98:2e:
15:56:ed:b4:e1:44:56:4e:a6:3a:8d:d8:c8:6c:c4:
af:2d:88:db:1f:0d:20:c1:0e:06:3b:bd:0c:25:eb:
a5:82:73:f0:12:ee:7d:ac:9a:7a:46:32:14:3d:06:
bf:cb:02:ef:b3:cd:e2:50:67:a6:9c:3b:da:3c:3a:
ee:6d:25:5f:38:c4:f7:4f:e4:c5:c8:60:e0:8a:55:
ca:b7:0a:42:f9:28:7f:02:06:16:ce:bd:d6:f0:a7:
ad:5d:7f:0d:90:59:9c:da:b8:1f:07:88:48:eb:53:
8a:18:fe:72:22:ae:cd:b3:36:7b:f4:8d:f1:7f:88:
fb:9b:e8:71:a9:59:56:ca:5e:4d:65:59:a3:dd:3f:
cb:24:f6:86:51:40:24:1e:29:d8:ea:df:c5:12:d8:
00:34:7c:d6:e4:fc:2c:95:5e:91:3c:d2:92:4b:c1:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.178.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49672
Signature Algorithm: sha256WithRSAEncryption
02:aa:91:a8:7a:fc:f5:3e:4e:8a:07:2f:a3:95:82:06:fb:24:
41:16:7c:2a:cc:d2:ae:d9:67:a1:ac:77:32:2f:5a:ed:34:51:
11:5b:87:bc:61:a9:88:56:ed:27:c4:c6:f8:1f:97:26:43:8f:
4a:19:61:95:19:0c:60:1b:40:ed:89:20:79:04:6b:77:bb:ea:
cc:c7:a6:0c:76:36:c6:19:ff:b0:94:17:bc:b2:f3:98:32:27:
58:27:7f:cf:d6:55:7d:87:0e:fe:58:a2:6b:3a:59:41:ab:b6:
06:a6:bc:31:f9:07:a0:2b:4b:22:e1:15:af:04:03:87:d7:1c:
62:2a:cf:02:e6:29:77:01:b8:c2:58:b1:95:53:6f:63:82:d9:
41:29:98:42:67:38:c4:d4:9a:83:ed:6e:11:c6:16:aa:86:30:
74:45:98:0b:90:2e:b0:80:94:f6:a5:d7:e4:15:45:ef:b4:21:
8e:9c:04:f5:69:d1:4e:d6:ae:4c:65:7e:b8:49:46:a4:22:ac:
da:19:00:19:95:b5:35:eb:c7:f7:be:3e:56:b6:37:43:31:30:
76:38:be:28:e4:96:c5:66:c6:be:b6:6e:68:d4:91:7f:b2:6b:
fb:ba:23:0c:30:80:0d:91:9b:bb:e1:69:a6:2f:fc:06:32:e9:
e3:80:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:50:07 2026 by rpki-client