This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
File:                     0wUa-GYelCUtF1k103l-nsos2Aw.cer (raw, json)
Hash identifier:          UQ6V5//cM6H38w4+TD58uU8W9x1ZDQPOD0htDp1KKSc=
Subject key identifier:   D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7DC97AEF413CE6C5286A967C4BC35653
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 08:18:34 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 57355
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:7a:ef:41:3c:e6:c5:28:6a:96:7c:4b:c3:56:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d3051af8661e94252d175935d3797e9eca2cd80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f2:28:63:d5:d4:78:76:80:bc:60:62:40:d7:
                    c2:b3:3a:3b:48:bb:9f:81:1b:13:db:dd:77:9f:e6:
                    19:bb:6e:8c:e1:c4:7b:3f:39:08:61:22:8d:56:07:
                    34:24:c5:b7:df:29:9e:f8:ac:e9:06:5e:fa:45:40:
                    e6:85:0a:1a:60:13:46:b7:6a:dd:e3:52:43:d7:35:
                    64:f9:b9:48:c0:00:1f:0c:8f:96:e9:8e:4c:fa:88:
                    ce:da:28:a2:8e:2a:bc:32:ac:cc:cd:44:23:ac:a3:
                    14:8d:de:e5:cc:08:a2:12:74:ac:81:74:21:a1:5e:
                    be:f3:e1:90:37:23:50:a5:90:5b:ba:96:e6:ba:51:
                    cc:d2:35:9f:43:0c:04:54:8b:46:7e:8c:18:2e:5e:
                    7b:af:cf:71:1f:30:1e:6c:67:61:94:24:6d:9d:d2:
                    75:99:e7:e1:87:aa:db:a8:d1:96:ef:63:02:b5:14:
                    63:aa:be:57:64:f3:7c:57:9b:4c:df:46:0b:0f:41:
                    77:51:1b:51:88:24:27:c0:7f:bb:c6:3f:11:00:ca:
                    b0:0e:ad:38:da:62:57:f2:93:75:4e:51:c9:02:72:
                    76:1e:fe:44:3b:ae:4f:35:1a:0d:bb:7d:c3:f9:40:
                    d0:cf:a4:f8:d7:b3:7c:b8:67:1a:5e:f0:34:65:6e:
                    c0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57355

    Signature Algorithm: sha256WithRSAEncryption
         36:f7:ee:28:15:a3:56:e3:cb:3e:1f:8b:4e:9c:99:a0:2f:e2:
         68:e9:31:9e:c7:c2:75:62:db:06:16:e2:f2:1a:04:cc:0a:bc:
         3e:41:35:d7:3c:bc:ff:50:64:94:a7:1a:4b:a9:a1:08:55:d8:
         9e:84:f7:f2:02:db:32:17:49:e5:ae:c6:49:1b:db:1d:49:c1:
         2a:8c:54:1b:a1:ab:3b:63:e8:c9:25:27:73:fc:83:09:aa:e5:
         71:3c:22:72:79:56:52:95:25:1a:7a:b9:7d:71:3f:74:89:d9:
         6d:61:27:ad:70:fc:e5:3f:a4:9e:15:9c:f4:d7:dd:4f:80:eb:
         82:c0:59:ef:38:67:e2:56:aa:9e:fd:51:f0:d0:a0:e7:02:4f:
         be:0e:44:8c:a1:72:84:55:08:d6:4f:4b:19:42:85:c2:19:08:
         03:9a:9e:68:bc:35:44:aa:e1:7f:9c:df:d9:6f:7a:d8:26:99:
         ca:50:78:5f:0c:7c:50:91:46:ff:f5:2f:63:cd:5f:ed:dd:82:
         eb:f7:3e:8e:3f:35:68:78:25:d6:09:32:d1:15:ac:46:0f:28:
         ce:53:8c:87:92:33:9b:d7:c1:01:14:e4:ca:c1:cc:a3:b6:27:
         37:2e:1a:8f:1b:b0:6a:e6:b1:27:91:6b:fd:3e:48:9d:cd:25:
         85:b3:47:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:34 2026 by rpki-client