This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
File: xn6d6Ogmze4OZfYiWDQ0uBzze60.cer (raw, json)
Hash identifier: Z3FiQEY4D/cMOmGfJbzh9Fwj7rsISVCyXEmIJ4SRjfQ=
Subject key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CED21692D8F9776528ED91CCC9A5243
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:17:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.177.140.0 -- 193.177.147.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:21:69:2d:8f:97:76:52:8e:d9:1c:cc:9a:52:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:3e:80:a7:f1:ef:c6:1f:d5:b5:10:91:bf:
95:51:55:7a:ce:c5:d5:b7:9f:aa:e8:b2:56:c2:d0:
12:b2:c9:70:fa:6c:06:38:d9:60:19:17:27:05:ba:
69:23:43:5b:50:81:4e:c1:e3:86:7c:bb:9b:bd:e1:
0e:55:14:d8:01:02:d9:a2:35:43:7b:4c:3a:29:1c:
8c:bb:ab:58:77:3c:9a:f4:9f:9e:6a:b2:f7:99:d3:
1e:8e:49:2e:9b:6f:4d:18:7b:50:1e:02:5d:6e:c3:
7e:3a:15:6a:b5:d9:dd:40:45:de:85:a8:fb:02:05:
b1:b4:a9:5f:a5:23:9b:f3:d0:be:a9:e9:a4:e7:68:
ed:55:9e:f1:c7:f1:7b:bb:9a:17:77:50:43:9b:27:
2e:b0:b1:d5:30:50:21:2b:fb:c5:62:24:86:2b:8a:
0d:1e:d2:88:be:26:50:6f:5a:30:ad:26:c0:e3:ca:
96:34:82:3a:08:3e:f0:e1:a0:f2:8d:29:c8:e1:41:
f4:6e:7f:a4:8c:26:81:28:7e:bb:5d:ba:bf:41:31:
47:e3:33:3f:3c:34:36:e5:1d:f7:55:e5:5a:60:d2:
cd:85:fc:2e:01:d6:b1:a2:77:60:ba:26:6c:df:95:
28:16:13:53:8f:02:ec:d1:54:5c:60:c5:79:59:cc:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.140.0-193.177.147.255
Signature Algorithm: sha256WithRSAEncryption
1a:3f:81:12:f4:e1:f3:3b:fe:ce:a0:4c:4c:4b:46:f9:6e:33:
55:e4:e6:d1:76:58:37:0f:20:d7:c4:a1:25:55:81:1b:e6:f2:
c2:4d:58:24:39:ee:f4:36:91:22:78:53:94:b8:e5:74:2d:46:
52:89:4d:bd:fc:11:65:f0:cf:48:63:10:10:55:79:b4:b1:a8:
ee:eb:3b:bd:9a:6a:92:31:49:82:a2:ea:84:db:33:3a:77:20:
de:50:6a:5c:d0:22:12:60:6b:f7:2f:13:10:d5:6f:50:8f:51:
82:22:fb:89:04:12:06:8f:2e:be:83:53:dc:92:70:15:45:6a:
5e:42:20:1c:8c:6e:79:ff:23:ed:71:04:c8:c3:b9:a6:a4:13:
84:6e:d6:41:b9:c8:98:e9:a0:ec:00:f5:9a:98:88:d9:0b:7f:
ad:21:a6:9a:43:96:ca:25:33:e3:81:a9:26:9e:64:c0:7d:f1:
19:f9:c0:a1:28:37:47:3f:57:d2:82:4e:fd:04:9c:df:88:c2:
97:2c:51:4b:af:b4:e4:c4:91:dd:c2:1f:9e:44:c1:85:0d:4c:
57:72:96:2c:a4:9c:cc:5b:ca:b6:be:08:ca:8c:e1:77:08:9d:
60:8b:2a:27:1e:1f:f5:4c:56:c5:16:5e:8f:e7:ad:0f:d4:9d:
fa:03:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:16:33 2026 by rpki-client