This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
File:                     1Cq3jtp78B2VtZd07TRry_lqJoQ.cer (raw, json)
Hash identifier:          etRHNvpKJreiyAf/Iqi57l1zDLuJ7Pr5l53W4VXPtJ8=
Subject key identifier:   D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E38BDD077368988098D66D667A98617
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:20:06 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 207276
                          IP: 185.112.72.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:bd:d0:77:36:89:88:09:8d:66:d6:67:a9:86:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:20:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:57:2e:fe:47:5a:fa:84:fb:9f:c3:90:9f:
                    40:62:4c:93:8b:9b:a9:b6:f5:30:16:f5:be:f9:36:
                    c8:ee:d0:e0:84:24:90:e1:6f:48:0a:6b:4c:92:55:
                    5e:77:0c:17:8a:35:13:f4:fa:9b:79:f8:18:38:c6:
                    b5:d0:9e:a0:4e:e0:11:31:2e:ea:d1:7a:e1:b9:7c:
                    c9:56:10:78:29:a2:20:59:dd:65:e7:37:4b:24:92:
                    9f:92:f9:ea:b3:91:7f:ce:c5:cf:6b:8c:af:ef:ab:
                    8c:1e:02:05:f9:a1:0d:52:e0:87:bb:d1:54:28:07:
                    ef:6e:0c:9f:31:3b:d8:09:0b:8e:46:ef:55:dc:99:
                    af:73:83:f0:c4:58:20:32:ff:0d:dd:83:67:44:32:
                    64:49:6d:d0:42:5b:4e:64:15:d8:7e:51:b6:3f:e1:
                    83:55:d5:38:45:24:37:9f:53:b0:c8:33:8d:8c:5b:
                    ef:0c:7f:fc:7b:d9:a7:a4:06:f5:56:32:e5:44:5e:
                    0a:93:fd:0f:96:7c:df:b3:32:25:a6:ad:5c:56:ca:
                    5f:a1:fb:8e:89:ea:f6:3a:db:f0:d1:93:79:53:3b:
                    30:8d:ad:29:40:5b:d8:65:4f:9e:8a:b9:00:8e:d2:
                    51:9b:ee:9e:37:6b:71:a4:62:ea:84:71:fd:82:d6:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.72.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207276

    Signature Algorithm: sha256WithRSAEncryption
         5d:92:2d:69:5b:83:78:0f:9b:43:5e:76:f6:1c:f6:87:17:f4:
         41:96:5a:80:38:53:21:64:07:47:bf:cf:e1:db:ee:d5:32:7f:
         fb:61:a0:a3:ea:3e:4c:94:c8:e5:49:27:bf:0c:c0:f9:6e:9b:
         c5:35:87:49:bc:17:37:3e:c6:fa:ef:86:ee:7a:57:b9:f2:e1:
         09:56:73:ac:f3:dd:ae:73:3c:e0:07:24:73:6f:bf:33:df:79:
         b4:93:e7:29:7a:5c:69:20:9d:cc:cd:61:30:26:52:8c:9d:cf:
         3d:1e:a3:60:15:1a:e0:04:00:9f:cc:e6:bc:b2:03:0d:af:7a:
         17:ca:6d:48:77:af:80:dc:f7:93:e5:7e:54:2b:6a:2b:6c:f9:
         2e:4f:23:ec:42:46:5d:58:bf:1c:27:e7:63:38:31:e6:12:1c:
         15:e1:6d:67:d5:e7:36:82:b5:01:da:c5:81:ca:1a:55:33:a2:
         21:aa:0a:c9:ee:72:5f:18:a1:a6:1b:65:e0:be:a7:a7:56:0c:
         94:a6:17:51:7d:92:04:7a:67:d8:a9:e2:ed:c6:cb:5e:98:67:
         0c:7d:c6:f7:80:49:7d:8e:0d:26:68:c8:54:4f:13:71:c9:38:
         2c:fe:4f:4c:42:a3:2c:e3:4d:74:b0:4a:2b:f6:92:43:00:a7:
         3e:69:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----