This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
File: mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer (raw, json)
Hash identifier: H+Xjj966soZgWr7ysCTErzGC4cmLkJl7ENUEDS+mn4o=
Subject key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B364509BB33ACEA88A2BE2AC6A89D3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207196
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:45:09:bb:33:ac:ea:88:a2:be:2a:c6:a8:9d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:e8:27:56:a1:c5:e1:23:b7:5f:7a:a5:0c:
95:6f:1e:d1:a0:0c:e0:d0:45:cd:56:fd:7e:f9:f9:
5b:a7:ae:2d:1f:89:98:3c:66:66:9e:98:58:c5:ce:
ea:a0:a1:a9:e5:fa:86:0c:23:08:0a:6a:02:d3:b0:
f2:39:42:6b:6e:b2:a8:e7:f9:42:ec:b4:dc:c6:fe:
95:77:1b:79:de:ca:c8:95:b3:dc:7e:fd:d2:9d:93:
65:87:ec:58:87:08:8b:ca:33:01:0d:c0:3d:b3:9a:
7e:dd:78:5d:af:3b:79:49:6e:00:2d:fb:0e:b4:04:
8e:ed:78:00:e0:13:4f:d9:0b:ea:9d:fd:eb:a9:42:
6d:a0:88:18:f8:ce:59:7c:b1:0b:08:0d:62:23:c1:
d1:5b:f8:6d:40:84:19:ea:70:fe:90:e6:e0:d3:ca:
17:8c:2f:18:6c:10:af:a3:e4:42:26:69:e5:6f:8d:
2c:2c:3c:70:e2:2e:e4:d2:08:18:70:c9:72:81:2f:
8f:2d:b7:7d:c8:99:1b:26:e2:0c:6d:ed:2a:1b:ac:
52:56:1c:58:47:54:7a:96:d1:44:1d:85:cf:43:d1:
4b:5b:e8:4e:2e:25:dc:13:3e:34:6b:54:6d:f9:25:
4c:d6:a2:82:63:c7:24:94:aa:07:d2:73:9f:76:eb:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207196
Signature Algorithm: sha256WithRSAEncryption
a6:84:89:3b:6c:30:88:ce:93:97:59:0c:cc:f3:3a:6a:7d:d1:
ac:01:cb:95:e2:2e:8d:2b:2d:5a:e0:8f:2c:20:78:40:05:03:
c5:a9:f0:5f:2c:f8:b9:bf:5e:e8:e5:d9:60:90:f0:59:4e:9e:
e5:fd:ce:61:00:45:8a:90:0a:34:73:7c:2e:b2:f6:31:37:c0:
ac:fd:b8:61:08:da:5c:e1:95:9f:15:0e:37:e1:b1:67:ba:83:
13:b8:56:b5:e6:eb:b7:e5:72:66:36:f6:b8:42:35:a5:a8:05:
d9:70:12:8c:11:eb:b3:37:1d:1f:2b:1e:0f:27:aa:d3:68:df:
1e:f9:bc:a1:64:e9:d4:94:c6:d3:ff:73:5a:88:0e:62:b9:2f:
0d:f1:6c:cd:3d:a2:08:82:f8:c7:79:30:4f:d3:46:b1:d7:55:
ba:d3:d6:5b:b7:a1:3b:eb:d1:2b:62:11:4f:d8:80:58:4f:f9:
33:9e:0f:b9:95:2d:9b:ea:c2:a2:4a:f1:8f:4b:77:db:b5:97:
9f:6f:9f:bc:40:fb:c7:11:87:fe:97:50:c7:dc:c1:bd:d5:cd:
94:ad:fb:57:b3:93:4b:98:f5:67:12:d0:58:00:bf:e0:ef:cf:
b1:87:2f:35:b0:62:a4:a2:7c:fa:ad:1e:6c:e4:ef:1e:4f:66:
19:c9:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:05:36 2026 by rpki-client