This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
File:                     0e1mT0ry-OEZuHomjF1DA_uzYRY.cer (raw, json)
Hash identifier:          AgFYHR0WvvboXnYP01BopRFCNa9eznl8TUA+LN7NHqg=
Subject key identifier:   D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7834875C7A202C85F53BF1F8FFC11B90
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:17:47 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214986
                          IP: 193.36.226.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 23:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:87:5c:7a:20:2c:85:f5:3b:f1:f8:ff:c1:1b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:30:0b:29:a3:63:c7:bb:45:eb:8a:6d:80:
                    e1:eb:4e:56:9f:f4:67:65:c5:ef:e6:2c:cf:85:fd:
                    d8:50:51:52:3b:ef:7b:93:e9:25:a9:db:4b:e0:0f:
                    82:19:db:47:4c:d7:49:61:ca:27:09:2d:b8:b0:c0:
                    e5:ad:95:9e:cc:f4:51:fa:e7:61:e2:96:69:82:a1:
                    3d:75:71:84:56:1e:cc:f7:f5:a0:a0:4f:03:28:ae:
                    bd:9e:40:fc:99:f7:bf:60:b2:92:82:de:c4:8a:be:
                    1e:84:1d:68:9b:0a:ee:09:3e:ca:ea:13:7f:ab:fc:
                    7e:1b:7e:b7:ff:6d:1f:4d:69:c7:ed:f6:dd:c5:79:
                    b1:16:33:d3:61:2a:9b:2c:d8:96:63:ae:84:a8:a4:
                    1d:dc:21:d3:cc:de:8f:6d:23:39:63:c8:53:06:91:
                    03:b9:03:bd:0d:a4:8d:af:c0:73:77:f6:53:fe:26:
                    ba:94:d9:26:03:05:68:54:78:1b:35:34:6d:44:00:
                    81:06:a3:47:f4:f6:46:2b:97:e2:71:98:ea:c6:54:
                    db:30:bd:2b:71:b1:7b:6f:09:4b:1f:45:63:2d:67:
                    d5:6a:7f:c7:ee:91:24:67:13:ba:d5:6b:05:81:37:
                    50:6b:d4:5c:5f:1a:f4:86:33:cc:f1:bb:73:07:b7:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.226.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214986

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:02:30:55:50:8a:d8:ef:f6:96:9a:48:68:07:eb:ab:e4:
         84:6e:d5:69:7b:fb:b3:15:41:3a:26:b4:84:f8:19:fc:fb:a4:
         a3:35:7e:c1:6a:0b:e2:a6:55:1a:58:28:fc:3a:65:f6:7b:d8:
         de:42:2d:c1:da:35:85:2a:12:fd:63:f8:d1:28:40:6c:71:7f:
         75:5d:c8:50:99:41:92:2f:cf:1a:c4:ca:20:f1:d2:61:26:bd:
         82:52:82:ee:2b:ba:05:fc:5c:ed:2b:af:6c:56:1c:b8:a3:18:
         6b:f5:71:7b:a0:51:86:3d:cb:69:a5:0b:2c:b6:e2:5d:1e:2f:
         1e:e9:7c:ec:74:f3:93:7a:01:c9:c5:57:d7:a8:db:d5:e9:3f:
         ed:e7:9c:1b:7d:2d:56:41:a9:24:13:c5:96:59:d3:00:29:5c:
         a2:19:d5:59:67:23:53:af:8f:06:f4:45:38:cb:7e:a8:ab:83:
         d4:40:39:14:f5:8e:09:49:be:47:03:16:9d:c9:9d:31:c3:75:
         ea:86:72:5e:73:04:72:93:22:34:05:c5:45:6f:82:4d:66:70:
         cd:a1:f2:f8:d0:d1:77:77:21:10:5d:ef:b7:d6:3c:14:b9:ba:
         73:13:a1:b1:b5:2d:a2:6d:77:e2:a1:2f:a0:60:4f:65:b6:ef:
         f4:88:38:ba
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZt4NIdceiAshfU78fj/wRuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWVkNjY0ZjRhZjJmOGUxMTliODdhMjY4YzVkNDMwM2ZiYjM2MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL0wCymjY8e7ReuKbYDh605Wn/Rn
ZcXv5izPhf3YUFFSO+97k+klqdtL4A+CGdtHTNdJYconCS24sMDlrZWezPRR+udh
4pZpgqE9dXGEVh7M9/WgoE8DKK69nkD8mfe/YLKSgt7Eir4ehB1omwruCT7K6hN/
q/x+G363/20fTWnH7fbdxXmxFjPTYSqbLNiWY66EqKQd3CHTzN6PbSM5Y8hTBpED
uQO9DaSNr8Bzd/ZT/ia6lNkmAwVoVHgbNTRtRACBBqNH9PZGK5ficZjqxlTbML0r
cbF7bwlLH0VjLWfVan/H7pEkZxO61WsFgTdQa9RcXxr0hjPM8btzB7fAxQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFNHtZk9K8vjhGbh6JoxdQwP7s2EWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2NmNzM2
ZC0zYjhiLTQwZjUtOTdjYy00Yjk1MjliNDhjZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvY2Y3MzZk
LTNiOGItNDBmNS05N2NjLTRiOTUyOWI0OGNlYS8xLzBlMW1UMHJ5LU9FWnVIb21q
RjFEQV91ellSWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwSTiMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNHyjANBgkqhkiG9w0BAQsFAAOCAQEAL2kCMFVQitjv9paaSGgH66vkhG7VaXv7
sxVBOia0hPgZ/PukozV+wWoL4qZVGlgo/Dpl9nvY3kItwdo1hSoS/WP40ShAbHF/
dV3IUJlBki/PGsTKIPHSYSa9glKC7iu6Bfxc7SuvbFYcuKMYa/Vxe6BRhj3LaaUL
LLbiXR4vHul87HTzk3oBycVX16jb1ek/7eecG30tVkGpJBPFllnTAClcohnVWWcj
U6+PBvRFOMt+qKuD1EA5FPWOCUm+RwMWncmdMcN16oZyXnMEcpMiNAXFRW+CTWZw
zaHy+NDRd3chEF3vt9Y8FLm6cxOhsbUtom134qEvoGBPZbbv9Ig4ug==
-----END CERTIFICATE-----