This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.cer (raw, json)
Hash identifier: xwZq+QV7hX1GMUD5HwvrM441oE8Fp9194h6gsbWiUuQ=
Subject key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ED44D2417348978B0AD0D730744E97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:19:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216275
IP: 91.226.144.0/23
IP: 91.229.203.0/24
IP: 2a13:e740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:44:d2:41:73:48:97:8b:0a:d0:d7:30:74:4e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:06:72:47:c9:90:1f:ca:59:7a:0a:d3:d2:
e3:1d:a0:cf:13:7e:79:25:0e:a7:1a:b0:cc:4a:88:
4e:a9:a5:62:26:87:6e:20:a7:fe:d9:8c:31:13:67:
24:d6:90:cf:39:19:51:b1:6a:e6:62:97:dd:33:00:
c4:e5:d7:9b:5b:72:36:1b:b2:f7:ad:7e:b4:87:3f:
0a:da:64:17:a6:be:8e:ad:52:7d:f2:3c:4e:86:b7:
7e:63:d1:5c:01:26:1c:8e:27:b7:45:f3:04:55:93:
41:3b:fb:71:30:7a:d3:2a:78:0e:b1:2b:77:40:56:
df:18:b7:6e:09:2f:0a:16:48:89:8e:0d:27:80:3d:
c8:2e:48:87:4e:0f:4a:7e:19:cb:54:a2:39:51:7b:
c5:5d:96:4c:46:54:77:89:d0:aa:3b:d4:7f:93:5e:
5d:22:d3:e5:d8:61:bf:5b:63:08:47:b0:13:c8:dd:
5a:a8:50:78:a0:c2:a3:c7:26:9e:2e:57:c7:e5:c3:
59:f9:d0:e3:6a:e0:cb:49:13:93:6f:3b:3e:68:1d:
f9:5b:0b:e0:87:d3:cd:bb:f2:88:13:75:e7:3f:2e:
83:6b:e1:cc:22:1d:a8:3a:5a:08:1c:73:21:ef:69:
24:1b:e6:d5:ab:d6:fa:91:9d:a7:7a:77:db:d2:4f:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.144.0/23
91.229.203.0/24
IPv6:
2a13:e740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216275
Signature Algorithm: sha256WithRSAEncryption
5c:e5:12:de:83:c4:00:a8:b0:72:2a:56:69:77:a5:5c:dd:96:
33:6e:06:5e:33:3e:77:72:24:42:1f:90:06:7c:f1:91:4b:27:
c8:4a:ed:c4:5c:8c:52:5a:aa:76:09:42:09:e1:18:4e:3e:65:
41:5c:7b:9e:24:20:4b:27:b0:14:ae:fd:b1:26:09:cd:3c:21:
3a:05:df:2f:36:1e:b8:d7:fc:20:dc:85:ba:c6:35:36:35:9e:
50:17:2e:9d:e7:d8:9a:d9:a2:bf:bb:30:cb:96:c8:a7:c2:fb:
f3:61:a3:3f:97:df:82:77:77:54:46:67:9f:88:40:79:ed:5c:
71:7d:fa:a0:fa:8f:9e:d5:ea:8f:91:d0:79:9b:b3:3d:6e:59:
64:a5:d8:0a:ea:fa:e9:1d:bd:14:67:d2:c4:a6:32:0f:08:10:
04:e7:e2:03:d0:69:61:04:dd:35:7f:19:48:9b:ae:dd:e2:a7:
54:44:45:a3:51:cf:2b:71:54:7a:89:0f:df:3f:86:cd:aa:83:
f9:72:0b:65:21:8e:96:82:0d:ec:af:fc:0c:88:7e:7a:77:8a:
9c:a3:59:03:78:fc:02:75:83:cd:85:55:42:86:34:50:ac:48:
74:68:c7:e0:9b:42:a5:e3:97:2a:37:33:a2:3b:83:25:80:e1:
e7:d2:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:08:24 2026 by rpki-client