This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
File:                     0mKOBpte2LRVk0O1tn9atPkiUf4.cer (raw, json)
Hash identifier:          f2LPyB3Ok0BuFgbADxHE6vpcMvXJ6afWJTUshlgJkUI=
Subject key identifier:   D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A31F401292731B0E457EFC970928DE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:18:34 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214539
                          IP: 185.183.164.0/22
                          IP: 2a0b:1680::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:1f:40:12:92:73:1b:0e:45:7e:fc:97:09:28:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:b7:7e:e7:5a:63:25:61:73:90:3e:66:75:
                    45:98:9d:21:11:ba:76:4c:5d:39:45:be:0f:6e:55:
                    0d:d8:13:2b:aa:15:03:ce:c7:ad:09:d8:34:4f:97:
                    e9:4b:bf:67:c5:7c:81:ac:3e:40:34:4d:09:2a:b6:
                    e5:73:9c:fc:13:fb:8b:dc:b5:61:57:92:ee:c4:1a:
                    b4:ee:a2:ef:a9:5e:85:82:58:4c:e0:ca:0b:7d:60:
                    58:3d:40:62:61:0f:c7:c8:b9:f6:95:c6:96:64:3a:
                    cb:f5:6a:af:c6:e7:4e:0f:98:50:fb:e8:a6:b5:d1:
                    a4:0a:8a:73:69:0d:47:21:06:b0:8b:b0:24:45:a5:
                    a4:50:59:ce:03:1e:94:e4:f7:8e:97:05:a1:46:3e:
                    55:d5:e1:ce:02:04:56:05:78:17:5d:6f:85:6e:1f:
                    af:5c:6a:7d:5c:14:23:07:76:dc:01:2d:cf:9b:00:
                    3e:b9:f1:b8:aa:64:cd:a9:db:7a:39:81:ef:0a:a0:
                    81:8e:4c:0b:9c:b8:d6:2c:9e:64:52:68:4e:94:57:
                    a1:13:77:6e:eb:fd:39:3e:d4:41:c7:12:1a:b2:d0:
                    5f:28:a8:cd:08:7a:ac:49:a0:1d:7e:63:6a:6b:49:
                    3d:e9:2b:33:05:d4:d8:f5:4a:69:c6:06:6b:49:7a:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.164.0/22
                IPv6:
                  2a0b:1680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214539

    Signature Algorithm: sha256WithRSAEncryption
         b0:be:26:96:bc:61:03:6b:a3:ae:5f:37:d6:ee:6a:a8:d1:61:
         7c:22:45:a9:3b:80:1b:bc:15:7e:15:87:dc:98:7b:a7:30:9a:
         1b:aa:58:f0:e5:32:a4:40:a0:6f:8f:39:ef:19:e8:04:c7:ad:
         3b:a3:26:9d:88:94:43:bd:05:2c:b3:55:c8:7e:9d:69:fd:15:
         f6:23:25:23:12:73:f0:ae:75:13:cf:8a:0e:28:c9:1f:d4:20:
         cc:b4:b7:4c:6e:03:cd:3c:29:1b:39:62:9d:ad:e5:0c:62:4b:
         21:1d:81:f1:9b:68:6c:4c:de:63:98:45:b8:af:c0:8a:c3:22:
         74:b2:f6:ad:b8:d0:40:d5:24:38:e0:51:bc:a3:c6:63:b0:c4:
         32:aa:7e:9e:9d:b7:9b:74:7f:38:f5:50:3c:83:0c:a1:85:a0:
         42:30:5e:59:d9:e9:2a:38:6d:5d:11:72:70:76:55:ef:1a:1f:
         ac:94:e4:a5:c4:1a:fc:ce:69:74:05:88:5a:74:2e:e5:52:a1:
         95:49:63:39:d8:f2:bf:a9:2a:13:4e:6b:51:fc:ec:f7:65:e0:
         60:f1:da:76:37:6d:25:a7:87:d6:26:21:53:4e:c3:60:4e:7f:
         06:30:3b:3b:f2:96:8c:77:10:ed:77:b4:22:0e:c4:b4:e9:9e:
         c8:e6:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:50:57 2026 by rpki-client