This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
File:                     1-UPazrEkL_c3jI93uUDcUM03Qiw.cer (raw, json)
Hash identifier:          YbI650nX1ZVR1Ai8JqNuR//iau239KazP+Dfbl2oq28=
Subject key identifier:   F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BB92F4134FC4B040CE5A343EC83ACAB68
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 13 Jan 2026 21:07:20 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 216283
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b9:2f:41:34:fc:4b:04:0c:e5:a3:43:ec:83:ac:ab:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 13 21:07:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f943daceb1242ff7378c8f77b940dc50cd37422c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:d3:d1:03:41:5b:5f:27:24:5d:80:cc:c4:
                    24:4e:e6:82:9c:58:0c:ad:fb:44:3f:5f:e3:9a:c1:
                    39:07:6a:93:11:5a:ef:e4:bb:bc:8a:59:fc:a1:62:
                    b2:35:47:a0:a3:46:bb:a3:5c:37:be:71:ce:6a:4d:
                    16:d1:8b:3c:6e:d7:a9:2e:8f:13:5e:67:33:3b:4d:
                    fc:f0:f4:a0:dc:5e:24:2c:49:55:90:5b:bc:ac:99:
                    39:91:58:bf:46:10:7a:1e:91:74:38:3c:29:41:84:
                    3f:70:12:de:4c:9a:e4:16:06:64:52:b1:74:05:34:
                    ba:42:70:7a:a6:c2:56:0e:8b:f6:6b:a5:ff:40:8a:
                    ab:12:91:26:d0:ae:46:c4:97:75:0d:cf:f3:31:df:
                    a7:98:ca:34:e0:07:bd:47:c2:ad:85:22:e7:2e:0d:
                    61:eb:2d:ae:ff:16:8f:39:56:17:80:39:9d:3e:16:
                    19:f0:99:67:07:3a:c0:1d:b0:ac:28:83:a8:66:8a:
                    7a:fd:39:02:b5:36:ef:d6:af:95:90:8e:31:28:a0:
                    f7:da:30:5e:1f:e8:f1:ed:d8:12:e3:49:2e:25:c1:
                    82:4e:97:aa:ce:3a:ba:4f:56:64:ec:da:b4:fd:a6:
                    7c:77:22:b2:9a:ad:20:3a:71:d2:c8:84:76:75:b2:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216283

    Signature Algorithm: sha256WithRSAEncryption
         3b:bc:4d:e7:4e:85:e2:47:60:3b:fe:6b:b5:1a:79:2b:dd:f7:
         d2:82:8a:aa:d1:36:ca:17:41:90:25:87:ea:66:40:d4:63:03:
         d7:74:bf:26:6a:71:97:b6:f7:ee:fa:86:08:d2:b2:75:73:46:
         0a:2b:d6:dd:e2:fc:26:25:51:ea:8e:ac:13:e4:13:45:7d:c5:
         40:48:80:39:7a:2c:29:79:21:af:98:cb:27:c0:49:f8:bf:d4:
         98:bf:c4:db:17:6c:d5:1c:c9:71:19:6a:da:79:89:f0:c6:fe:
         e1:63:9a:28:3e:a4:04:53:01:43:78:5b:e9:01:77:e1:3d:f4:
         52:fd:29:ee:04:73:40:d4:01:b9:19:b6:4b:17:18:38:a5:67:
         1d:5a:c8:4b:62:42:b6:d8:7d:5c:d6:e8:f4:0c:7d:7c:3e:65:
         cf:eb:a8:6e:a6:0f:c2:b2:36:a4:6e:04:ad:cd:94:20:69:93:
         10:05:ff:de:2e:50:3f:47:16:c3:44:2d:a4:b6:6c:de:48:c1:
         27:f9:c0:fa:f8:31:bb:8d:e7:44:2a:30:3d:1b:63:c5:52:6c:
         84:db:d5:c2:0e:55:79:c1:c3:2b:a6:0b:5a:52:bb:a0:d5:08:
         95:aa:58:ed:36:56:9e:5f:ed:a1:ea:04:1d:b2:bb:48:bc:02:
         ab:36:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----