This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer (raw, json)
Hash identifier:          A1Q48oPpJqSXQWqgl51xqoD61lw/HARssYkBWnpsUWM=
Subject key identifier:   D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A29034A098CA0B0EAF76054A224392
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:17:58 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 57109
                          IP: 91.230.184.0/22
                          IP: 2001:67c:720::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:90:34:a0:98:ca:0b:0e:af:76:05:4a:22:43:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d54b82d719144002051da0f88c768de440ac20bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:eb:39:71:64:b5:98:e9:f1:e2:f3:4f:64:
                    b1:eb:14:ec:a1:d2:f7:00:2b:ab:f5:3f:4d:ec:72:
                    8e:99:2b:15:6d:5e:5d:7b:89:78:c6:86:ac:68:8a:
                    71:bf:17:fe:d5:bf:c9:d4:83:1f:cf:6a:dd:52:b0:
                    4b:69:24:73:ea:94:4a:a7:4d:41:3e:8e:5e:95:b6:
                    a2:ff:9e:e2:fc:b9:87:73:73:1f:90:59:84:75:af:
                    09:37:fc:f0:81:8f:33:72:76:1c:40:32:84:72:fb:
                    5b:28:db:a7:10:bc:2d:11:8b:91:66:b3:f5:26:27:
                    fa:15:f3:fd:f7:0d:b0:80:b8:65:70:a1:4d:0d:2b:
                    bc:33:b4:84:ec:dd:2f:36:d2:3b:bf:59:c2:eb:fc:
                    89:3f:69:36:1a:5f:58:33:b5:3e:57:0e:27:84:3b:
                    62:f7:f9:bb:e8:01:07:2b:7b:78:86:37:56:a6:2b:
                    4a:5c:3f:7e:9f:6a:8c:31:e6:80:81:a5:1d:18:66:
                    85:91:d7:75:8c:46:c2:ef:ba:50:8b:47:e2:48:ca:
                    30:05:01:1b:b8:83:73:fe:83:1e:80:8a:84:b3:e5:
                    fd:7c:21:60:2d:f4:68:fe:33:fb:ae:ea:cf:c2:ff:
                    71:c3:72:be:b5:57:ab:c4:c0:be:45:55:ff:59:1a:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.184.0/22
                IPv6:
                  2001:67c:720::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57109

    Signature Algorithm: sha256WithRSAEncryption
         0e:1a:8f:67:46:0c:c9:59:85:58:bf:c0:89:d2:b0:4e:48:39:
         4b:ca:3a:fb:69:87:b6:f1:70:a0:43:bb:a9:2e:c6:cc:b7:6a:
         63:2a:41:44:87:b3:eb:52:f5:be:1c:b6:9f:ee:d5:8a:f5:cb:
         20:d0:22:f2:4d:70:92:ac:9a:91:c1:c8:d5:fc:93:44:29:e7:
         d9:d2:f9:a9:82:43:72:52:1b:1c:5a:41:5b:55:1f:ab:51:52:
         47:b6:93:15:90:bd:09:e0:5b:a8:b7:7e:2e:1b:57:cd:b4:dd:
         e2:22:6c:96:a9:16:54:29:83:b7:fa:b6:94:45:38:86:e8:f7:
         3c:86:af:6c:3f:6d:a0:2a:02:06:17:ac:d5:70:4a:72:92:8a:
         45:4d:80:1a:01:61:2a:15:cb:71:e9:b6:5d:20:80:e4:47:b8:
         ca:05:44:d1:c8:af:66:b3:b5:bc:ba:01:4a:46:02:4a:c6:15:
         15:e3:af:e0:e2:bf:e3:4e:ed:77:d1:8a:ae:c0:41:e3:e6:50:
         c7:e7:82:8b:74:59:d0:e3:06:5f:91:b1:6c:b8:01:d4:f5:12:
         92:27:f1:8b:d0:87:c7:d5:42:25:8f:2d:50:68:89:4d:c6:68:
         7b:c1:a0:cd:d2:c1:4d:3b:74:a2:87:c9:f9:2d:b7:30:4a:3c:
         b1:01:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----