This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w9a4Z_-YTcfF6szS2j-Szzxnfas.cer
File: w9a4Z_-YTcfF6szS2j-Szzxnfas.cer (raw, json)
Hash identifier: Z6kX7LDn6EMG2paFnklbqRCy2C35pvybY0nsjLQdljA=
Subject key identifier: C3:D6:B8:67:FF:98:4D:C7:C5:EA:CC:D2:DA:3F:92:CF:3C:67:7D:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C120A10E1C5BD0D79C613DB2B8314D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/0/C3D6B867FF984DC7C5EACCD2DA3F92CF3C677DAB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215126
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:0a:10:e1:c5:bd:0d:79:c6:13:db:2b:83:14:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3d6b867ff984dc7c5eaccd2da3f92cf3c677dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:11:a7:5d:ac:9b:c4:f8:ae:5a:9a:dd:23:
c4:36:30:35:ea:c4:9c:4f:dd:97:7c:0b:24:0b:72:
81:ec:f5:f0:f7:49:31:6e:04:ca:04:a3:df:d1:90:
52:ef:2d:43:f9:75:1d:b6:03:7d:cc:b1:44:e9:5b:
c5:c4:0f:b2:dc:8d:21:97:58:ca:86:0d:2d:ff:cc:
23:60:78:be:45:8d:b6:5a:92:87:fd:6e:f7:4a:b3:
0a:20:45:fa:bb:53:b7:05:19:a7:be:8a:80:5d:c7:
d6:f3:91:29:78:5c:9e:f4:5c:cf:83:9d:9b:61:50:
76:f7:c5:1f:41:bd:b6:38:03:21:b6:f6:9d:b2:d3:
d2:3c:ef:d3:a8:4e:36:1a:d6:f8:0f:0f:0d:c5:39:
9c:f6:c7:a2:55:35:bd:5f:14:64:d1:99:cb:fb:61:
c0:3d:cc:f5:48:1a:82:d0:92:a4:ef:98:e9:dc:af:
f1:f8:0d:de:68:13:35:0b:53:25:e6:f8:9f:fe:e9:
3d:24:8d:77:ee:3b:3c:9a:f1:a6:71:20:bb:54:b6:
eb:15:81:59:d4:a1:b8:3b:df:cb:85:f3:bf:23:c9:
f6:74:0b:56:53:82:a2:85:17:33:91:22:26:06:0f:
15:90:98:9d:68:3a:77:de:c2:f1:22:bc:ee:74:e9:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:B8:67:FF:98:4D:C7:C5:EA:CC:D2:DA:3F:92:CF:3C:67:7D:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/0/C3D6B867FF984DC7C5EACCD2DA3F92CF3C677DAB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215126
Signature Algorithm: sha256WithRSAEncryption
9e:26:f5:bf:8f:83:03:91:df:9b:bf:d3:5b:a5:4e:82:ab:75:
9d:9c:72:25:ad:b3:46:d5:42:27:8e:e0:52:72:38:54:ea:18:
66:0c:a8:b1:0d:75:6e:5b:19:31:b7:74:42:2c:00:3c:ff:1a:
e0:91:63:77:7c:cb:7d:ef:fa:80:bb:1e:ab:15:0a:44:85:f6:
92:32:46:a5:d3:c5:d8:58:62:ab:86:6f:d1:32:bf:1b:37:6f:
d4:8c:2a:66:cf:f5:3b:9a:ef:82:ed:67:b9:03:a5:90:0a:4c:
35:09:fd:46:14:22:ed:3f:a6:64:c7:a4:41:df:5e:13:ec:c0:
dc:4a:2b:04:ad:7e:37:9e:13:12:fd:a0:6f:13:35:2a:2f:e9:
d0:d9:5c:59:d6:e6:4d:bd:bf:90:89:dd:fb:15:b3:52:7d:6b:
e6:e5:51:18:bc:54:66:24:b2:e1:fe:9d:b6:a5:3b:ef:70:51:
5b:57:65:93:55:85:04:e9:e8:92:0a:30:2a:16:85:85:36:4b:
01:7b:3b:6b:05:65:3a:45:8f:81:a6:7d:96:77:b7:95:79:60:
4b:69:74:a6:c1:d3:c3:56:45:f5:13:39:3b:da:f8:65:e1:a4:
b0:b5:e2:a9:2e:d9:6b:56:df:99:af:ce:07:63:ab:91:58:b0:
91:cd:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:52:41 2026 by rpki-client