This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
File:                     3vg4UDz7wFKD_erdRkSke_14P84.cer (raw, json)
Hash identifier:          XnaBk+Rwylt0mCHhopVhA/PIJTGp/BS+gwZs0411qO8=
Subject key identifier:   DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7EA6A54EA93B488636AFF71935302180
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 12:20:09 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 210633
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:a5:4e:a9:3b:48:86:36:af:f7:19:35:30:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:20:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=def838503cfbc05283fdeadd4644a47bfd783fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:ad:71:1b:44:cd:19:3f:b7:74:99:41:bf:
                    da:24:a8:94:8b:b7:4d:83:f8:9d:bb:99:be:47:de:
                    b6:c6:78:37:43:b9:30:f8:6b:95:df:51:d4:97:65:
                    de:cf:70:17:29:ca:de:34:d4:8e:cc:2c:26:08:b4:
                    19:26:f9:72:ed:7c:ca:c3:f7:4a:21:66:33:21:41:
                    9f:a2:d6:2e:27:86:33:43:48:3e:c5:14:df:f6:61:
                    78:23:e4:87:31:cf:46:cd:89:9b:d8:b0:95:d6:b4:
                    76:7f:76:9b:01:98:f4:eb:cc:66:5d:ac:76:02:9b:
                    16:11:4c:04:22:7c:95:da:37:a6:fe:45:ec:aa:b8:
                    fb:29:ae:0a:bb:e3:6d:d3:83:04:ac:b3:84:41:d8:
                    76:4d:80:03:98:59:52:d0:ed:1d:52:b0:85:8b:23:
                    fa:bf:0f:d7:ed:47:d1:31:d0:ca:1a:8d:0c:d9:7c:
                    5c:2a:5e:c3:c3:92:68:53:b9:4b:f9:7e:23:39:7e:
                    a6:13:9e:13:2c:00:4e:22:f2:49:4e:ec:b6:da:be:
                    35:87:23:3d:62:9a:5b:f0:d3:01:4e:81:ce:de:97:
                    40:f9:2d:2d:db:64:45:5e:09:de:47:28:ef:35:2a:
                    ed:f3:30:4b:6d:b4:6b:34:e1:32:99:8d:e1:ba:4f:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210633

    Signature Algorithm: sha256WithRSAEncryption
         36:7a:cb:54:f4:65:8b:6b:e6:12:a7:63:c3:6b:4b:e8:5d:ad:
         ba:55:d6:4f:70:50:b9:06:3a:c7:f0:30:dc:5a:a0:31:9d:89:
         53:be:75:7f:e9:cd:45:d4:29:57:1d:d5:a0:59:5f:20:81:e8:
         6a:75:9d:87:2f:64:0e:f8:4f:e0:b0:08:c2:ae:90:a0:3b:dc:
         45:be:39:c6:10:ff:dc:48:e4:27:9c:6a:c5:a4:4e:77:57:69:
         87:d0:b3:ab:77:a7:61:16:e8:01:f8:0c:58:48:5f:83:0c:b0:
         24:ad:d6:64:e8:47:b7:d1:3a:17:1a:37:04:3a:53:23:84:91:
         97:0d:f4:79:45:7d:0d:9f:9e:7c:5a:4f:77:fc:12:b4:6c:f9:
         89:4e:22:24:4f:74:88:40:d9:d8:0c:a9:7f:b9:c4:76:8a:1e:
         9d:d0:d1:70:ee:0f:03:ec:e2:d3:f7:e6:b6:65:ca:63:55:24:
         90:87:3a:0a:ed:01:d0:2d:9e:fb:90:ed:d4:8e:74:1b:92:0a:
         23:49:18:c1:7f:7a:9c:0d:76:ba:25:a6:c9:6f:0a:16:4e:17:
         94:28:aa:7b:ff:72:9c:ad:66:96:9a:6a:a8:84:b8:95:56:fc:
         3a:5e:53:e5:77:f4:4c:47:c0:36:d6:4d:92:82:2e:9a:02:bb:
         cb:86:ce:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----