This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
File: wv0sdK1vri3dD26cOf3oMYk65vk.cer (raw, json)
Hash identifier: WIdB7coJ29OKn0jFblwYuvnH1iW3SZJN1f1/nYQEV/c=
Subject key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797F24DB237BC9CC0D45B4E44A58D6F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.110.64.0/22
IP: 193.42.143.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 15:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:24:db:23:7b:c9:cc:0d:45:b4:e4:4a:58:d6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:7b:9b:7a:40:ba:b0:f7:5a:99:c5:c3:64:
16:be:40:5e:92:5f:8f:19:f3:23:27:24:8c:83:10:
42:cc:91:a9:bf:2b:c6:5c:08:db:99:5e:84:63:43:
29:a9:09:a9:7f:1a:85:a3:a6:e1:c5:6e:d0:cb:33:
d1:23:98:e1:ce:df:cd:d0:cb:e3:cd:bd:c9:62:f7:
0a:77:4d:e1:df:fd:d4:0f:5e:d7:94:3c:7d:b4:b8:
cd:02:af:44:7a:be:6a:ed:56:63:f5:12:58:64:1e:
71:91:a7:2a:2a:4a:58:1a:5c:2a:ab:2b:d5:3d:5e:
43:b5:68:41:5b:3b:6e:45:19:13:86:ea:04:de:17:
97:5a:0d:02:67:ec:41:08:07:b4:7a:43:2d:ef:29:
03:76:52:b3:70:82:21:d3:a2:e3:3f:e1:f2:24:2e:
b7:f5:81:68:ca:b8:7f:a8:3e:04:a6:13:76:d2:d2:
51:8d:df:fe:45:c8:4b:cb:78:42:ab:a8:b0:f3:9d:
40:63:d2:5c:3e:d1:df:05:f3:eb:ca:cb:22:d8:0a:
11:ea:6d:af:5d:39:81:ee:ef:9c:d7:c4:75:e4:d1:
32:14:85:e1:57:4c:85:63:61:84:fa:d6:d5:47:54:
da:14:4f:51:57:8a:4c:83:45:0e:be:ba:d0:62:b7:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.64.0/22
193.42.143.0/24
Signature Algorithm: sha256WithRSAEncryption
58:31:f5:5b:0a:4f:03:e9:d6:00:e5:eb:10:49:67:b4:7f:54:
a5:bb:31:4b:ad:da:90:75:6d:75:e0:88:e7:74:f0:33:ab:7f:
1f:89:bd:18:4e:34:ad:ea:81:86:9f:b3:78:b5:d1:7f:b2:d7:
74:d4:09:21:8c:5f:55:f4:f4:35:92:5b:aa:9b:01:fe:ab:59:
0d:30:51:4a:52:80:c2:4f:aa:90:9e:89:f9:23:b8:a0:ca:62:
1e:ae:dc:56:c0:0e:bb:27:e9:ab:cc:42:cb:8a:6e:5f:86:90:
73:0d:db:18:1a:58:da:3d:da:55:93:d6:e0:c5:63:ab:fb:69:
aa:10:55:e5:8d:40:5b:84:0d:bc:f6:bf:7c:6c:01:40:52:62:
9d:4c:17:54:45:67:7a:f9:86:0e:34:a3:d0:1c:ec:3c:d0:14:
7c:e1:15:d5:d5:9e:82:3f:7e:75:aa:7e:5d:74:b4:e0:4d:d6:
a9:67:60:bb:c5:85:34:c7:95:74:0f:5a:a1:7c:2f:df:42:10:
17:ce:4e:10:aa:a5:e4:37:d3:54:40:c1:36:86:c0:f6:6a:02:
be:e7:fc:44:da:f9:8a:2d:60:4b:a8:4c:49:c3:12:fb:46:bc:
50:09:8f:18:41:cc:5b:08:c3:3a:e4:c8:96:f3:c8:38:a0:c2:
3c:ba:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:34:58 2026 by rpki-client