This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer
File: mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer (raw, json)
Hash identifier: S029ukhgBtLweS3iCNkx7A9Wqca/xnixL7N0HgQmC5c=
Subject key identifier: 99:83:E9:4F:2F:97:A5:24:C3:F1:CB:F4:86:30:58:D3:B6:51:06:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB6ACDB9B359B2068DDA4AB39951C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:18:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204078
IP: 2001:67c:1368::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:6a:cd:b9:b3:59:b2:06:8d:da:4a:b3:99:51:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9983e94f2f97a524c3f1cbf4863058d3b6510616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:93:eb:d6:aa:8c:da:88:ff:7b:e1:e1:24:
a0:92:ed:a5:b2:04:87:3b:67:12:ca:b6:df:77:96:
d1:a6:76:11:54:5e:67:9e:38:00:bd:5f:6e:c5:38:
18:5c:3c:fa:20:0d:64:cd:db:bc:ee:91:f2:d1:1b:
e2:58:53:38:9c:d9:cf:8e:92:f9:90:22:ac:a4:95:
e7:95:6d:bc:db:98:8a:d1:07:a3:9b:e9:40:da:9f:
1f:69:91:2f:4d:a1:4c:40:c9:5f:38:a3:fd:d4:5a:
25:8b:0c:bb:94:4b:e2:cb:00:d3:42:5d:3e:97:e6:
32:cf:94:64:51:30:8f:5c:d4:d0:34:85:56:47:ef:
e7:f0:2a:84:4d:0a:13:cf:64:bc:72:9a:d0:d8:ba:
53:df:39:a9:9d:f4:5c:9a:12:07:8a:88:8c:61:4b:
4c:a8:9b:fa:ce:dc:c2:37:41:4e:15:7c:e7:64:d2:
cb:57:16:fe:59:11:9a:b7:a6:0c:d7:9d:94:d1:14:
40:e1:78:ab:47:7f:57:70:69:63:ba:5c:17:cb:5d:
14:54:fc:aa:9a:73:30:e7:1d:68:ef:86:f2:04:97:
bf:45:82:ef:a4:2d:ac:b4:bc:3c:e8:ce:8e:3c:36:
ac:7f:ee:93:c1:92:50:05:44:43:0c:d1:ca:70:44:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:E9:4F:2F:97:A5:24:C3:F1:CB:F4:86:30:58:D3:B6:51:06:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1368::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204078
Signature Algorithm: sha256WithRSAEncryption
78:45:ec:6b:44:0a:a5:e9:a6:85:6f:a7:b9:5d:ab:2b:f2:f3:
6a:8a:ac:5b:38:8b:0b:8f:34:f4:7b:3c:a0:9d:2c:a2:93:ac:
63:4f:e3:b6:25:9e:2a:31:72:db:65:12:54:71:a1:96:b6:77:
be:fd:9d:41:7a:24:17:22:f5:02:04:b7:bf:bd:51:12:34:68:
3e:f0:6b:62:20:d1:6a:6d:43:b0:21:e8:e8:7f:a4:e7:9a:87:
e8:a2:7e:8f:0b:b3:75:70:bf:4d:e1:2d:0a:a1:be:49:6b:83:
32:ca:18:91:bb:ff:0b:3c:c0:a8:e0:52:63:dc:14:51:d2:96:
a1:a1:cb:2e:b7:99:61:8c:71:8d:c0:f4:2e:30:72:71:65:4f:
f6:6d:94:5c:c5:55:f9:93:11:01:eb:8e:fa:9d:f6:1d:e9:4d:
47:f0:32:d7:80:14:b0:9e:72:c8:44:1c:29:87:ae:df:ee:a9:
ae:af:e3:a9:93:9b:83:28:9a:cd:5a:3d:06:1c:14:65:08:3b:
35:37:a1:f5:14:b8:a6:7f:d6:cd:62:16:16:98:e7:73:81:f7:
a8:b2:4e:bd:60:85:00:d8:34:86:3b:27:55:44:cf:79:e3:3b:
03:71:d7:af:aa:99:e3:69:78:e0:b0:c5:46:50:47:d4:61:7b:
5b:74:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:46 2026 by rpki-client