This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
File:                     1-x_03y78aezBkupa79ezuX9YCQE.cer (raw, json)
Hash identifier:          3DUHo2xPCNXXOUovl05x8cbZOFCGS6QfMWi/8ouu2JI=
Subject key identifier:   FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C6D1D5D38DF3549E42ACDF7FF0C915
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:17:57 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 197437
                          IP: 46.151.136.0/21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:d1:d5:d3:8d:f3:54:9e:42:ac:df:7f:f0:c9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:20:0a:6f:ee:eb:8c:f1:2d:c0:12:ae:4d:
                    ed:75:b3:96:b7:aa:88:09:6e:65:9b:c9:e8:d3:10:
                    77:6f:cb:0b:2c:cc:a9:f6:9e:41:31:08:08:e0:fb:
                    7f:7f:35:fd:29:4b:35:0e:9b:29:7c:0b:86:c9:15:
                    e0:49:b8:fa:b1:9c:01:a8:75:79:66:ce:ed:02:10:
                    d5:91:af:97:4f:0f:8a:80:b7:87:96:c1:2c:70:ab:
                    2a:fb:1c:4d:04:68:b7:ad:22:80:8e:57:8e:0c:73:
                    7e:da:65:4f:49:ea:0c:b3:04:87:7e:9c:bc:31:af:
                    f7:ed:cc:4d:0b:cb:bc:76:12:b6:7a:26:69:54:c1:
                    62:a1:a6:65:6f:52:08:25:79:5d:82:06:3f:ac:f5:
                    18:71:70:e7:b2:50:c0:47:a1:1c:35:5b:34:f3:9a:
                    29:68:13:b8:fb:6f:1d:6d:ca:0e:30:30:18:f7:d7:
                    dc:ce:83:43:0b:ee:70:c4:19:4b:4a:e9:fd:64:ca:
                    85:9a:8a:29:c1:83:68:b5:d0:45:6a:5e:85:23:c4:
                    81:84:57:1e:4b:5f:3e:5c:16:5f:19:2a:08:5f:cd:
                    ce:f6:df:f5:e1:68:72:04:63:f1:8a:93:94:de:37:
                    cf:9d:88:e6:51:c1:38:08:d7:26:7d:7e:29:04:df:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.151.136.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197437

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:9e:22:4f:71:1f:bb:b8:40:b2:52:d9:ff:5a:18:ae:b7:
         3c:dd:2c:69:a1:bf:e5:4a:c8:81:e2:9b:73:92:b2:17:16:0a:
         fc:a1:0b:61:7c:44:17:ab:42:2c:74:6d:f3:c8:db:9e:c9:70:
         09:71:82:ba:9c:84:d9:1f:f7:30:c9:54:99:29:b1:35:f3:6b:
         d2:ea:90:26:55:e4:1d:4f:64:02:77:97:a6:ac:78:90:69:95:
         a7:48:6f:d0:29:51:40:13:d3:c8:90:20:b8:0b:42:a1:76:e0:
         e5:b3:99:34:85:77:7b:67:cb:ea:ec:6e:6f:e8:08:d3:9a:ff:
         e9:b0:1b:f6:c1:0c:50:4f:de:30:ff:3d:c4:dd:ca:1f:ba:c2:
         ec:eb:1e:0f:a9:6a:ee:8c:ca:fc:f7:e0:bb:92:25:91:7c:cc:
         a6:35:3f:c2:e0:64:4f:42:7a:e8:97:be:3a:17:55:f5:c7:18:
         4e:c8:92:43:8c:70:bb:f4:02:05:bc:8f:cf:de:3a:7e:d8:e2:
         22:82:52:66:77:e3:30:2b:dc:48:35:6c:e8:1f:50:cb:8a:14:
         cc:df:1a:91:6c:04:84:b0:d3:61:52:9d:64:66:66:83:e5:c3:
         6f:0f:53:3d:18:c0:42:30:e1:37:df:31:60:49:98:d7:01:cd:
         e1:84:7f:64
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZt3xtHV043zVJ5CrN9/8MkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjFmZjRkZjJlZmM2OWVjYzE5MmVhNWFlZmQ3YjNiOTdmNTgwOTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A0gCm/u64zxLcASrk3tdbOWt6qI
CW5lm8no0xB3b8sLLMyp9p5BMQgI4Pt/fzX9KUs1DpspfAuGyRXgSbj6sZwBqHV5
Zs7tAhDVka+XTw+KgLeHlsEscKsq+xxNBGi3rSKAjleODHN+2mVPSeoMswSHfpy8
Ma/37cxNC8u8dhK2eiZpVMFioaZlb1IIJXldggY/rPUYcXDnslDAR6EcNVs085op
aBO4+28dbcoOMDAY99fczoNDC+5wxBlLSun9ZMqFmoopwYNotdBFal6FI8SBhFce
S18+XBZfGSoIX83O9t/14WhyBGPxipOU3jfPnYjmUcE4CNcmfX4pBN+gIwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFPsf9N8u/GnswZLqWu/Xs7l/WAkBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzY3OWUx
NS1lMWEzLTQyYjUtOWI3Yi0zZjFjMDIzYWRhMDUvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNjc5ZTE1
LWUxYTMtNDJiNS05YjdiLTNmMWMwMjNhZGEwNS8xLzEteF8wM3k3OGFlekJrdXBh
NzllenVYOVlDUUUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAy6XiDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDAz0wDQYJKoZIhvcNAQELBQADggEBAG/KniJPcR+7uECyUtn/WhiutzzdLGmh
v+VKyIHim3OSshcWCvyhC2F8RBerQix0bfPI257JcAlxgrqchNkf9zDJVJkpsTXz
a9LqkCZV5B1PZAJ3l6aseJBpladIb9ApUUAT08iQILgLQqF24OWzmTSFd3tny+rs
bm/oCNOa/+mwG/bBDFBP3jD/PcTdyh+6wuzrHg+pau6Myvz34LuSJZF8zKY1P8Lg
ZE9CeuiXvjoXVfXHGE7IkkOMcLv0AgW8j8/eOn7Y4iKCUmZ34zAr3Eg1bOgfUMuK
FMzfGpFsBISw02FSnWRmZoPlw28PUz0YwEIw4TffMWBJmNcBzeGEf2Q=
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:52:14 2026 by rpki-client