This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.cer (raw, json)
Hash identifier: Rx6syIE0hdyD4rlAi1HS7ZVSvq0/LjNPt7lJxuiZqQs=
Subject key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797DF0B0113382B1EA49950F7281FA22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:17:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210149
IP: 192.66.100.0 -- 192.66.115.255
IP: 193.163.56.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:f0:b0:11:33:82:b1:ea:49:95:0f:72:81:fa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:74:c2:8a:77:63:9f:ac:e4:81:50:6e:20:
59:b8:17:2f:e7:87:e7:80:f5:3e:ec:99:52:40:83:
84:39:00:fd:7b:42:c1:70:2d:8e:1e:e2:a9:0c:93:
df:c6:67:80:55:a9:a0:df:66:82:13:cd:7c:57:0c:
61:82:73:b2:05:df:87:01:d7:dc:be:35:86:1c:f3:
76:04:b5:ac:54:dd:83:64:20:66:8b:64:15:58:d3:
80:e2:99:a9:13:f7:66:1a:2b:92:51:00:54:9e:a8:
2a:cf:0a:6a:a4:cc:f3:f4:0a:a4:62:71:bf:f0:16:
bb:ce:9d:f1:b7:a7:2a:5b:ed:33:6c:c9:96:fb:33:
61:91:5b:2f:ff:d4:d7:c4:43:d3:ce:41:ed:f4:d9:
ca:29:18:fd:ea:3d:3f:85:c6:2f:0e:3d:ce:6e:34:
07:cc:1c:83:7e:24:67:83:7a:03:6f:f2:a7:b6:e5:
76:ae:d7:72:7f:1a:80:fc:76:e0:bd:31:b6:c1:6f:
25:eb:08:6e:30:12:43:06:4b:eb:98:99:e9:db:4c:
c5:fe:ba:e9:a5:dc:c5:99:58:e2:cc:e4:e7:b7:e1:
bb:20:14:c0:e4:04:34:a7:28:88:8b:76:c1:48:77:
b1:ff:16:63:64:6f:b5:2b:14:2b:24:a5:7e:ec:03:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.66.100.0-192.66.115.255
193.163.56.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210149
Signature Algorithm: sha256WithRSAEncryption
97:de:d8:83:f9:b7:44:d3:ef:12:ea:b0:9c:8c:70:05:45:b5:
22:76:51:e7:11:90:8a:af:a3:15:c2:1b:bb:b6:64:8f:f2:a4:
80:72:0e:c6:f4:f2:7b:0e:bf:b3:ed:6d:12:31:4f:8e:e3:df:
15:cf:6e:5a:6b:5d:14:13:34:9d:bd:b2:84:9d:1b:05:fd:e9:
3c:7c:47:17:3d:e5:b5:8c:27:af:e6:14:68:a8:3e:3d:6f:79:
9a:83:7f:af:f5:66:30:67:11:dc:e0:9f:10:24:c0:f5:d5:bc:
d5:d4:a8:0c:71:9d:d1:51:1e:3f:f2:e6:a3:87:cd:2d:25:64:
a4:e7:6e:78:bb:aa:30:ee:44:33:f1:f5:74:0f:06:15:c0:1c:
d4:50:62:e5:57:c6:fb:ba:82:15:47:c8:c2:19:c7:3a:70:b2:
0f:19:ec:83:74:a3:f5:51:39:73:27:37:72:b1:4e:90:27:e7:
1f:d2:c4:ea:3d:9f:fc:d2:c8:0e:a8:47:ff:3d:8e:a8:4b:1c:
87:34:f3:c8:eb:e7:b2:64:f6:ac:bc:d3:cd:56:92:22:1e:6c:
77:93:b3:02:15:7c:73:df:97:48:67:8d:3c:30:62:1c:17:8f:
8e:d6:16:31:2a:c2:79:ad:bc:20:a3:7a:cf:de:1f:e6:d9:46:
d6:9e:ae:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:05:22 2026 by rpki-client