This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
File:                     3cwuYUgshl3CU8D6lD49os6X2gU.cer (raw, json)
Hash identifier:          3nnlC1Upx4uycjP/gmRz35mOBAFuw8rwiV7SbE+Es2A=
Subject key identifier:   DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C7FCF591C5AB37C2FCB8F85971BA5D0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 02:18:29 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 215535
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:cf:59:1c:5a:b3:7c:2f:cb:8f:85:97:1b:a5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:ab:7e:b6:38:fb:34:26:d6:12:42:c6:13:
                    68:28:1b:a0:32:73:13:17:ee:45:f8:70:47:d5:d9:
                    4e:a0:ec:41:da:ec:e1:5f:fb:dd:e5:f7:68:4c:73:
                    a4:a6:f8:4b:69:df:10:c5:5c:9d:55:c1:ef:bb:00:
                    c4:9e:e7:5b:00:46:78:a7:78:cc:5a:de:78:93:fc:
                    3a:ed:58:ff:dc:9f:f5:33:cb:a0:80:b7:7b:05:aa:
                    61:e1:b0:cb:1d:19:d0:68:1f:1a:94:87:4f:4f:34:
                    b7:04:fc:34:8b:cd:f2:a0:94:98:86:12:fe:ec:20:
                    e6:3c:7a:34:e9:64:ee:23:3d:24:e0:c5:d1:73:49:
                    2a:4b:4b:a1:4b:81:16:f1:97:84:be:da:f9:54:b2:
                    c5:58:c4:e4:63:a8:2b:c3:23:7e:cb:61:99:27:0f:
                    bb:8a:74:97:ff:e7:40:e6:42:e4:1c:1d:45:9e:48:
                    d0:88:be:53:a9:96:2f:0b:d1:24:8c:a4:f9:64:07:
                    8c:7a:19:b7:0f:a0:08:bf:0a:1e:bb:91:09:14:7c:
                    87:7d:fe:3d:40:50:f7:44:52:7d:10:cb:33:d6:21:
                    5d:9e:e1:b0:75:56:1d:9a:11:a0:02:de:5b:e8:53:
                    cb:9c:8f:f1:ae:b9:13:3f:9a:58:d2:1e:b4:07:49:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215535

    Signature Algorithm: sha256WithRSAEncryption
         47:63:76:15:02:65:e2:42:44:82:8c:46:45:f8:a1:cf:6d:68:
         fb:64:fc:a5:49:c0:a5:15:54:05:83:a2:ed:8f:af:80:37:9f:
         cb:ba:94:e2:c6:12:5c:10:69:18:10:4a:d8:3c:c8:01:31:9c:
         47:d0:b6:7b:dc:e7:e1:9f:3a:c6:1e:b9:df:d0:42:43:de:29:
         65:1b:5b:78:72:bb:ff:4a:b5:04:38:04:a2:c3:08:ec:83:51:
         1f:e6:21:c7:17:b8:0c:d2:cd:94:44:16:cf:ee:05:b4:09:63:
         8d:78:0e:1a:d2:5e:6d:ef:b3:6a:f0:59:37:4a:80:7b:b0:04:
         30:0e:2c:d7:40:d6:19:96:83:d1:8e:73:c2:c8:65:97:93:54:
         3d:97:6c:0b:72:be:a0:07:69:1a:91:a0:fa:37:52:4b:f3:76:
         f9:0d:63:4f:7f:29:56:8e:fc:54:dd:c8:a1:47:cb:79:c6:a3:
         55:94:6c:01:09:86:05:e5:af:f1:0a:ca:5f:a8:31:7e:db:ec:
         ec:d5:a5:85:10:28:83:fa:cb:2c:9a:76:58:f2:3c:c1:c3:e7:
         73:c3:0c:dd:6b:cd:b1:7c:0c:2d:63:f5:27:8a:82:56:d0:a9:
         53:08:02:20:2d:1c:63:cb:fc:86:dc:3e:d6:26:7b:b2:f9:70:
         21:18:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----