This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
File:                     1sSAuslyYH_atgVZOoS4NkxqsbA.cer (raw, json)
Hash identifier:          WhEvuovNzSV4tFYZTXudyYTBzy3xXzecaQp77n6bimg=
Subject key identifier:   D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CED51011CEE3169EBB1F90C3A700E36
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:18:06 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 64449
                          IP: 2001:678:1d4::/48
                          IP: 2001:67c:d08::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:51:01:1c:ee:31:69:eb:b1:f9:0c:3a:70:0e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d6c480bac972607fdab605593a84b8364c6ab1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:f5:92:7a:70:15:14:cc:bf:cf:7b:3e:72:
                    55:71:42:61:ba:10:d7:1b:a1:c9:9b:77:72:fd:cc:
                    1d:80:aa:23:5d:ec:92:e8:ab:2b:1e:43:b7:3c:e5:
                    93:64:ab:37:9f:da:19:be:16:d1:09:49:10:d6:19:
                    9f:84:c4:97:78:67:d7:7c:dd:f8:f6:c7:27:ab:94:
                    dc:9d:33:8b:63:36:66:7a:81:9f:eb:10:45:72:c5:
                    c5:a9:d2:40:ef:4d:7d:ef:8a:d3:30:98:39:57:43:
                    f4:c8:c4:c0:74:b4:f3:63:8a:fb:b7:20:85:eb:9e:
                    df:22:88:48:03:4b:2e:d1:15:2a:0e:93:a9:63:04:
                    02:db:4a:e7:31:5d:1e:29:47:4e:87:29:ff:13:9d:
                    70:54:46:58:d7:a6:76:58:59:8b:17:cf:a4:00:44:
                    cc:d7:aa:2f:ad:1c:a4:dd:60:0d:be:d0:b2:70:36:
                    a9:e3:2a:a6:90:bd:ab:14:3d:cf:99:c7:f6:2b:98:
                    55:80:39:d2:cd:7c:71:e2:e9:da:27:fe:49:8e:61:
                    f8:b3:3b:e0:ec:4f:b9:21:c4:2c:5f:34:db:95:3a:
                    fe:95:94:ba:fa:e8:51:25:3a:cc:8c:78:60:d8:dc:
                    a2:5a:f9:12:0b:95:6d:f3:09:90:a2:5f:4b:24:5c:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:1d4::/48
                  2001:67c:d08::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64449

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:56:bf:9b:1a:79:15:89:d8:91:38:39:22:2a:31:c1:e7:
         e2:c1:6f:3b:fa:c6:a2:d3:95:32:de:e7:70:aa:ff:48:bc:fc:
         9e:c3:3c:92:e4:f9:cb:90:1e:29:62:48:d3:9b:9c:e3:64:16:
         68:ba:aa:c9:79:09:00:c9:1b:cf:9c:59:01:d7:06:73:e3:8d:
         95:36:d9:22:e3:3c:71:f6:6d:51:e6:3f:4e:d9:60:97:1d:da:
         0f:bf:e1:c2:5e:be:53:a6:c6:a7:e6:7a:f9:3b:b7:f2:bc:7b:
         c9:b9:52:fe:b7:1e:e4:70:d8:30:de:95:62:04:4f:2d:d9:e1:
         3e:e5:c8:b6:c3:72:1b:32:18:5a:ba:1b:55:da:66:69:c2:cd:
         40:f2:64:e0:36:92:62:b6:8b:f8:e2:4f:b4:f7:09:56:6d:5c:
         87:72:99:76:34:7a:d3:0f:0f:0d:c4:a5:bd:d1:7f:75:12:ac:
         b7:82:ab:dc:39:0d:c8:a9:cc:53:6d:0d:3b:f8:f1:2c:9f:16:
         2b:8a:9f:bf:e5:91:f7:c1:ec:ef:7d:c4:6c:36:ba:a6:d2:4c:
         db:f9:07:60:fc:7f:01:76:75:f0:e6:b1:c2:2b:da:2b:83:01:
         7f:0c:87:3f:83:d3:ac:6f:8f:ff:ef:66:f6:b7:17:f7:94:de:
         73:95:d9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:10:26 2026 by rpki-client