This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
File:                     2AtJfVG9n0e4T2k9aH--jPbP-3U.cer (raw, json)
Hash identifier:          yEGS/beUUnFNVo1IfQQbJgm62VsWoiR8oU05qaVqcJA=
Subject key identifier:   D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5B539CBEFACA7534CAB3BF63403636
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:19:24 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 216325
                          IP: 185.94.183.0/24
                          IP: 2a13:d940::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:53:9c:be:fa:ca:75:34:ca:b3:bf:63:40:36:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:e7:7f:09:0d:fa:3a:06:48:61:ad:1e:15:
                    49:2d:0c:ba:c3:ea:55:31:e1:36:17:f5:34:20:10:
                    99:c0:f1:71:4f:f9:a9:05:cc:8f:2a:37:72:2c:f4:
                    ba:b8:fa:ba:72:ac:06:2a:98:4b:0f:cb:d2:19:bb:
                    36:0c:65:5c:f5:72:53:6c:6d:5b:43:bd:8c:a4:a0:
                    a5:ec:83:bf:16:ef:52:ca:3d:46:dd:85:93:2a:43:
                    34:00:80:a9:4f:96:f9:43:2f:4d:ce:1b:a7:14:7c:
                    b3:63:ae:0a:1c:71:4c:83:53:63:9c:65:36:06:f0:
                    a5:b5:2b:44:96:34:38:06:23:5e:11:ad:c8:84:d2:
                    8f:e9:17:a9:5f:43:51:80:5b:aa:34:4b:cc:60:58:
                    23:2e:f1:0c:15:d6:79:38:5b:46:e8:c2:58:5a:b1:
                    f6:29:ec:e1:18:2f:4a:46:d5:c1:39:89:54:91:ee:
                    83:30:f9:98:a0:01:8c:50:c7:38:53:5e:16:91:9e:
                    f1:e2:3a:20:fd:a3:50:19:e8:00:ec:93:b2:54:88:
                    f4:e6:fe:40:62:3c:1f:05:b1:f5:1f:4e:5c:dd:ef:
                    6e:28:d0:c3:d7:43:b9:a0:25:09:76:80:c1:1a:a8:
                    e4:3e:fb:1f:73:3a:da:72:ce:bd:8c:f4:5f:52:33:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.183.0/24
                IPv6:
                  2a13:d940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216325

    Signature Algorithm: sha256WithRSAEncryption
         07:e1:b0:53:e8:c9:43:97:bc:8a:86:86:c5:62:77:2a:e6:7b:
         b5:43:6f:0b:ee:d8:2f:a1:06:97:51:14:9e:fa:45:7a:ae:c4:
         db:3c:ca:a1:2d:c3:f4:83:67:2c:55:fe:95:ba:cd:8d:46:a2:
         c5:1d:48:e1:22:99:94:91:e2:16:52:e1:c4:91:db:fe:e8:25:
         59:ea:3e:a4:fc:0a:d9:88:1f:63:40:3a:f6:4b:74:05:fb:fa:
         98:95:50:98:9e:09:ef:22:92:99:7a:8e:24:a1:86:91:b5:4d:
         25:b4:a4:27:f1:e7:61:54:d3:6d:94:62:8e:37:0c:64:75:d0:
         3d:55:03:ee:48:4c:16:a8:62:3f:59:c9:ac:e2:36:90:c1:7a:
         2e:63:3a:37:80:05:1f:4f:21:db:4b:e4:a4:e7:98:c1:85:01:
         12:8d:74:d2:9b:a1:10:cc:b6:81:04:fa:66:2b:cc:b2:c6:6c:
         85:60:07:b6:e7:19:5f:75:39:34:ed:71:8e:d6:4f:39:46:2c:
         ab:61:de:11:bf:f9:13:b7:1d:86:45:c4:9e:eb:e1:29:d3:5f:
         33:0c:42:ab:be:b7:1c:46:4a:6e:0b:f9:55:12:b6:69:a6:86:
         62:1a:e6:54:3d:ec:46:88:7c:73:27:82:90:ef:67:cc:25:3e:
         9e:86:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----