This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer (raw, json)
Hash identifier: K04/bz9aglifArQ9t1e7Bj0LrcpFuHZcg5QIwoDPHtY=
Subject key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA4D5CD62080DD3439F9F4F06E1B4C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.145.100.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:d5:cd:62:08:0d:d3:43:9f:9f:4f:06:e1:b4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:3e:61:52:1a:5d:e8:c1:fc:89:d0:6b:e9:
72:f0:3f:d0:eb:d4:53:a4:25:53:3b:cb:2c:91:02:
87:56:fe:30:42:1f:25:a4:1e:89:e6:a1:ef:04:22:
dc:f7:e0:d1:fe:4f:5a:c3:e4:b8:99:e0:42:6b:96:
fa:a3:5b:42:1f:a4:95:fe:7e:b9:82:1e:d7:8c:21:
af:10:8b:6b:96:25:f8:8c:dc:e2:97:d1:74:ac:75:
ea:4c:22:b0:23:c5:da:62:af:69:54:fb:ef:93:d0:
93:66:f0:b6:ee:aa:14:3b:2c:05:6c:12:6c:47:b9:
48:92:f5:f2:fc:32:b6:a6:9f:1b:11:fa:39:1f:c1:
d7:a6:02:e4:29:b9:7c:90:77:3b:52:8b:de:16:72:
fa:e2:31:dd:3b:22:eb:a9:01:d2:0d:40:8b:3b:84:
d1:36:e9:ae:ae:e7:4d:ba:1d:c8:a9:b5:1b:c5:cd:
2b:4d:dc:6d:45:c5:ab:e5:07:a4:73:5d:4d:bf:65:
01:76:9d:af:f2:a5:4f:a8:d0:27:b4:42:a4:79:e1:
34:20:e3:0f:b3:0a:ce:ca:c0:a2:70:bb:67:cc:c0:
ed:6e:93:75:4f:52:33:87:8e:40:70:d7:f7:f9:0f:
4f:56:a0:07:f3:0e:4b:f1:56:92:ca:f8:a3:db:a2:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.100.0/22
Signature Algorithm: sha256WithRSAEncryption
48:be:be:38:11:08:a0:22:7b:b5:3f:2c:4c:8c:bb:1e:e8:8b:
8a:e3:ec:cd:8d:cc:fb:66:20:fb:ed:83:9d:4f:f9:80:3d:89:
d7:50:f0:85:a7:23:d9:b3:89:aa:a2:20:ff:a1:d4:eb:40:0f:
76:29:f5:48:08:08:74:9d:0f:c2:bf:ab:89:bd:9d:dc:f0:10:
f3:2b:a0:fb:18:4d:55:11:b6:77:27:e8:36:7b:79:81:38:32:
3a:b1:2b:a0:54:20:d7:00:e4:1f:ea:15:a0:e6:87:81:c3:81:
61:ad:e5:d5:d3:0b:aa:fd:9f:6d:ab:a5:86:0f:9f:99:b0:72:
a3:a4:e5:28:9c:12:6e:b7:07:16:fd:01:3a:25:49:4d:db:83:
09:a7:87:6b:96:d2:49:93:43:c0:02:35:75:f2:2a:b9:03:07:
37:68:75:6a:a1:20:e5:a5:c0:a0:44:a4:98:3b:16:bd:79:af:
09:06:8f:71:a4:e8:8e:60:47:04:ce:17:9d:1f:f1:11:5f:d7:
05:99:b1:35:cc:05:50:5c:c8:9f:b5:57:80:91:b6:bc:6b:5e:
85:ce:19:10:ae:99:73:3a:e3:15:81:2d:b7:f7:bf:36:fb:ce:
30:12:fb:db:77:a1:9c:75:71:52:03:af:af:47:f3:7b:e7:de:
d9:a1:91:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:07:41 2026 by rpki-client