This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
File:                     2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer (raw, json)
Hash identifier:          kUeJzg8wdYHpes5OXBj+ib0/2ZP8p8KIX1AlzL2ssYc=
Subject key identifier:   DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F15542BBE21C682CA768F6F803290FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:21:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 34418
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:54:2b:be:21:c6:82:ca:76:8f:6f:80:32:90:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:21:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:b5:6d:f0:11:8a:1e:ba:1e:43:9a:79:77:
                    c3:97:4d:82:4d:d8:fb:21:25:3b:fe:e9:9b:e0:49:
                    1e:36:57:c0:bd:1c:9a:bc:df:04:b9:57:0c:7a:90:
                    82:b3:32:c3:87:cc:d8:c8:71:71:05:a1:8c:e7:cb:
                    28:dd:13:7d:a9:d9:e3:ab:ad:fc:6a:a5:62:91:7a:
                    20:bb:62:fb:fc:b7:e0:39:6c:38:18:e4:9a:9b:f8:
                    6e:27:a2:e4:6d:ef:76:ee:ee:a3:a0:da:9d:2c:a0:
                    b9:73:ea:90:75:2a:b4:ed:e2:f6:58:c5:09:c1:62:
                    df:58:de:21:48:81:ee:66:37:8b:6f:50:a1:ca:6d:
                    43:19:19:87:fb:a3:fb:42:c1:90:49:57:a5:87:ed:
                    60:23:65:25:e8:5a:a5:8f:ad:47:09:21:db:92:75:
                    d2:bb:e3:6a:fe:92:e8:8c:72:2c:86:db:f8:cb:65:
                    6b:0a:5b:83:65:a5:19:92:81:5f:00:ef:ab:75:60:
                    81:3d:5a:b5:8d:5a:7a:60:69:d5:48:d3:69:24:6c:
                    e5:f9:72:ed:fa:c8:40:3f:94:99:1c:c7:8a:6e:6d:
                    af:6b:2b:3c:fd:cd:9e:94:5a:e7:d3:e3:6a:5f:c5:
                    89:40:71:e1:f3:55:1f:e6:95:2c:2a:02:cb:2e:b3:
                    da:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34418

    Signature Algorithm: sha256WithRSAEncryption
         99:d9:44:78:4f:3f:ef:f3:b1:ed:13:10:18:bc:21:6a:a2:34:
         3e:2d:a9:f4:3d:a7:4a:3f:f8:a8:f4:e1:ae:e6:3b:55:c3:01:
         c8:55:0b:da:4d:c3:92:6a:8d:2e:98:86:a2:08:54:0d:7c:11:
         f7:8f:12:9d:46:a6:9e:d5:fa:ec:f2:33:96:d7:56:1d:24:15:
         29:80:4f:e8:4a:7d:a1:75:9d:78:76:28:f7:89:70:bf:86:17:
         3f:64:a6:97:b2:d4:7d:ad:29:d7:6d:f0:de:63:cb:da:3d:fd:
         50:f2:6a:70:cf:dd:4a:85:83:d7:53:33:98:3c:a3:5d:d8:6d:
         74:30:f8:49:f4:ca:f3:62:f7:d9:1f:d4:4a:3f:21:d2:09:1c:
         4b:2d:0b:67:d9:5b:25:b0:13:dd:a6:f6:60:72:35:83:ab:6f:
         45:6c:09:7d:62:39:64:07:82:08:37:2b:ae:b4:76:8c:c7:63:
         30:a6:64:e2:71:8a:31:88:67:cd:b9:77:01:c3:7f:48:ba:03:
         ec:db:78:5c:a6:f1:be:08:71:99:a3:a5:2a:21:d6:b3:01:6d:
         7f:a1:b8:d8:d8:0a:06:30:e1:e3:18:d7:be:fb:e2:a9:4e:a4:
         97:9d:74:c3:61:f4:7e:5a:60:c8:3f:ce:d2:5e:4a:6a:c2:7f:
         03:24:cc:2b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt/FVQrviHGgsp2j2+AMpD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWU1NzYzMWY2MGFkYjEzZjBhZTM2ODY3MWNlMGY4NzQyZjU5NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5u1bfARih66HkOaeXfDl02CTdj7
ISU7/umb4EkeNlfAvRyavN8EuVcMepCCszLDh8zYyHFxBaGM58so3RN9qdnjq638
aqVikXogu2L7/LfgOWw4GOSam/huJ6Lkbe927u6joNqdLKC5c+qQdSq07eL2WMUJ
wWLfWN4hSIHuZjeLb1Chym1DGRmH+6P7QsGQSVelh+1gI2Ul6Fqlj61HCSHbknXS
u+Nq/pLojHIshtv4y2VrCluDZaUZkoFfAO+rdWCBPVq1jVp6YGnVSNNpJGzl+XLt
+shAP5SZHMeKbm2vays8/c2elFrn0+NqX8WJQHHh81Uf5pUsKgLLLrPaowIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNrldjH2CtsT8K42hnHOD4dC9Zd/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzBlODI1
YS01YmI2LTQzMjctOWEwYS00MzlmMzZlMTY1M2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMGU4MjVh
LTViYjYtNDMyNy05YTBhLTQzOWYzNmUxNjUzYS8xLzJ1VjJNZllLMnhQd3JqYUdj
YzRQaDBMMWwzOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCGcjANBgkqhkiG9w0BAQsFAAOCAQEAmdlEeE8/7/Ox
7RMQGLwhaqI0Pi2p9D2nSj/4qPThruY7VcMByFUL2k3DkmqNLpiGoghUDXwR948S
nUamntX67PIzltdWHSQVKYBP6Ep9oXWdeHYo94lwv4YXP2Sml7LUfa0p123w3mPL
2j39UPJqcM/dSoWD11MzmDyjXdhtdDD4SfTK82L32R/USj8h0gkcSy0LZ9lbJbAT
3ab2YHI1g6tvRWwJfWI5ZAeCCDcrrrR2jMdjMKZk4nGKMYhnzbl3AcN/SLoD7Nt4
XKbxvghxmaOlKiHWswFtf6G42NgKBjDh4xjXvvviqU6kl510w2H0flpgyD/O0l5K
asJ/AyTMKw==
-----END CERTIFICATE-----