This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
File: fVexU-7RELy9FNx-M_1H8C4v4HE.cer (raw, json)
Hash identifier: EVnTm5M0ZrQuYJyn0haxOGvzrwRw22LYF9+ZTjcVVv4=
Subject key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CED37D970F943B643221727E1CF899A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:17:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 31236
IP: 82.112.64.0/19
IP: 94.198.48.0/23
IP: 160.20.214.0/23
IP: 2a00:92c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:37:d9:70:f9:43:b6:43:22:17:27:e1:cf:89:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:1a:0f:46:cc:6d:b6:08:31:39:b7:e8:67:
09:29:5f:e4:1c:9d:8e:7e:8c:2b:92:f7:32:35:9b:
d0:99:88:e9:79:d2:49:42:06:5c:fd:94:de:ee:e9:
ae:ba:ce:87:c7:6d:e1:4e:b4:4d:68:2f:ab:69:0f:
92:d7:32:bf:65:cc:c3:6d:90:be:23:fa:86:ca:38:
e2:16:7c:da:fb:86:c9:9b:d6:a5:f1:81:05:06:5d:
8a:d0:8a:e8:dd:c3:08:2c:18:ac:69:a5:95:ce:13:
fe:c5:5a:76:41:2a:4c:23:2b:21:33:f1:73:ca:d6:
fe:d8:95:af:c6:c6:21:e0:53:7c:16:df:b3:98:79:
40:c7:03:32:5f:a6:d0:3c:ba:de:6e:97:79:99:d3:
0e:ee:d6:4f:f8:6e:26:37:86:b6:8a:3e:8c:27:14:
d0:10:b3:68:89:6c:10:31:71:28:0f:9f:2b:fe:be:
df:d6:7d:2e:87:92:01:71:7a:fa:8e:aa:f2:b6:06:
55:26:51:13:69:84:03:17:fb:cd:db:f2:7a:c9:1a:
99:8a:94:d0:24:5c:66:71:fb:87:d0:e1:ba:e7:95:
5e:23:6c:5b:aa:d1:4f:0d:19:84:d8:62:5e:88:3e:
9c:5f:a4:10:af:f7:07:3d:46:33:ee:6b:9e:41:0d:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.64.0/19
94.198.48.0/23
160.20.214.0/23
IPv6:
2a00:92c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31236
Signature Algorithm: sha256WithRSAEncryption
8e:93:e9:6d:e3:1c:ff:64:61:40:08:1f:86:98:c7:b8:55:bc:
26:a0:97:a4:34:0b:ae:42:07:13:3a:ef:32:2b:42:31:48:70:
b1:4d:bb:79:45:e0:1c:c4:87:c1:75:cf:40:6e:b6:d4:b1:13:
c5:31:d0:67:a9:05:26:7a:43:c7:4c:4e:0d:8a:53:84:c2:da:
63:43:7c:d0:e0:ee:e4:09:62:ba:07:01:b2:26:03:68:38:b1:
37:10:68:40:c6:05:5d:24:43:f0:c7:63:9d:6c:b9:24:37:10:
9b:32:3c:8b:57:7c:32:54:bb:ea:dd:dc:8d:ca:c7:c9:0d:8d:
70:d6:84:42:9a:2d:e2:2a:7a:95:f0:74:49:c7:c6:a2:c0:d3:
15:83:32:6e:1f:1f:08:2b:d8:65:d6:48:28:39:2d:c6:96:3d:
71:db:da:36:a3:69:bc:d4:a1:0f:15:de:be:54:e5:e2:e4:c3:
80:10:13:45:05:65:86:f4:ae:5c:0d:2a:d9:cb:17:73:9b:bc:
a3:14:f9:15:1f:34:c7:10:a7:b2:54:81:f7:5d:1d:e6:64:5e:
79:1a:d4:e7:d3:70:4c:1b:7a:a2:2e:c1:4c:2b:a8:99:9b:5e:
af:c1:33:75:e3:85:6e:89:4b:a1:0c:7b:66:65:46:a5:ed:3d:
28:6e:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:57:35 2026 by rpki-client