This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
File: is0usvBhi3LGRtmX08ld2Da90AY.cer (raw, json)
Hash identifier: KCUT+Gm/zhcocv7Whfi1D7G1+EiIAb1hUhRTX5vyFs4=
Subject key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C80DC6387ACAEF956E4E1C849F1A96A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51423
IP: 213.133.224.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:dc:63:87:ac:ae:f9:56:e4:e1:c8:49:f1:a9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:23:70:54:18:ea:f0:09:80:2d:a7:33:40:
df:95:09:6d:a5:82:d3:3e:c8:9f:7d:86:5d:a7:14:
29:6d:97:80:fa:76:dc:2b:60:b7:26:67:f1:82:24:
0f:85:20:69:01:e5:bb:de:5f:de:dc:e3:94:ed:9c:
75:7e:b7:84:44:77:37:25:6f:a4:db:ec:18:ef:19:
d1:e9:fd:94:b3:7d:f8:fa:8a:15:3c:dd:66:8d:fc:
31:cb:fa:6f:24:b9:d9:65:64:68:9d:9c:bc:95:df:
58:74:2a:23:73:7d:f8:cc:92:d4:de:77:e2:11:c1:
6c:7c:e4:e2:92:d6:cb:09:c8:20:81:92:2d:3f:a7:
2b:d3:0e:eb:9e:9f:b6:9f:2c:b8:8c:06:53:d9:2b:
a7:20:8a:52:ef:23:8b:1d:0e:d0:c0:ce:d7:28:74:
15:a5:43:8d:53:92:69:44:b1:a1:82:05:6a:d6:8c:
e6:cf:04:c8:a3:d4:a3:74:79:23:98:83:57:33:23:
b4:37:61:d2:46:4e:32:88:72:ca:a8:5f:ee:2f:87:
e9:90:24:3d:26:df:4d:54:d7:b2:86:d8:75:57:07:
db:66:37:62:5f:7c:b7:92:27:5d:0b:9b:7b:f3:96:
44:6f:13:4d:76:db:4d:01:9b:a6:bd:8d:fb:85:ae:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.133.224.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51423
Signature Algorithm: sha256WithRSAEncryption
57:f1:e8:dc:35:5d:0e:04:74:60:0b:07:13:ca:85:15:28:6b:
49:c3:9f:86:44:f3:7f:5f:ab:ac:42:f3:d8:3b:b1:2c:6c:ae:
ec:26:bd:a7:54:5c:b2:11:71:97:85:d7:03:45:bd:3e:07:35:
8c:79:4c:5b:b9:59:6b:21:37:6d:4d:2d:94:cd:5b:9a:41:e9:
7e:01:a1:78:74:4b:79:8c:b9:0a:e6:65:5d:e4:60:be:ad:63:
70:24:eb:b8:8b:60:a9:f7:30:40:0b:50:e1:5b:c1:7c:90:2e:
63:10:e2:33:8a:7b:27:e4:a0:ac:3b:2b:15:6d:12:cb:de:19:
b2:fe:6a:c5:4b:09:f6:47:d6:38:68:7a:dd:e5:f6:40:75:be:
57:52:45:ff:3b:ca:6f:b7:d5:55:af:32:a0:37:eb:e6:a2:0c:
fd:2f:ba:83:ed:d8:04:b8:77:9b:71:ef:be:d9:83:52:de:c1:
1d:c3:24:1d:17:63:f2:f7:13:8c:71:bf:08:d0:dc:61:74:57:
f0:26:9d:9a:c2:39:50:de:43:e6:66:5b:6a:4b:dd:94:04:d3:
80:5c:4b:00:83:b7:bc:09:b8:d5:d3:e5:1f:48:34:4c:77:1a:
6f:f0:af:71:4a:f6:11:96:5e:74:d0:1f:ff:3a:12:9c:b2:44:
a9:12:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:45:41 2026 by rpki-client