This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer
File:                     48uGjyIUmP6iUVXOAH_AGbc3_7A.cer (raw, json)
Hash identifier:          RYGiVDzjzyT6Zd1v54f2YvKdh2xB/+nrws/2cI5bnvI=
Subject key identifier:   E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BC6514D520077CF9EA0D084A88D815DD9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 16 Jan 2026 10:19:35 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 47672
                          IP: 91.208.93.0/24
                          IP: 91.231.92.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c6:51:4d:52:00:77:cf:9e:a0:d0:84:a8:8d:81:5d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 16 10:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3cb868f221498fea25155ce007fc019b737ffb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:a9:32:9f:62:2f:bd:7b:be:e2:86:6b:1c:
                    32:0b:44:df:82:a5:65:10:c1:af:54:a7:66:17:eb:
                    0c:5a:14:85:91:0c:5a:ca:3b:86:23:b8:e5:4f:27:
                    97:fd:99:53:bf:ae:91:e5:1e:9c:f9:ed:aa:6b:0f:
                    36:c3:f8:4a:9d:1d:5f:bc:dd:a3:aa:2f:70:6c:ee:
                    cc:c8:f8:b3:a1:bf:10:67:11:72:73:37:d7:86:0a:
                    c6:ef:fa:8f:05:fb:5c:b2:41:05:13:ac:25:0d:a9:
                    de:de:a5:69:6c:79:f7:8f:64:2c:3f:83:fb:8b:68:
                    e9:d4:35:f8:3d:d2:f2:61:16:10:52:99:59:24:ac:
                    a3:85:6b:20:39:ab:2a:fc:ad:a8:c0:af:c2:87:44:
                    51:fd:c2:8d:bc:59:ed:25:c3:24:a2:39:af:cb:24:
                    03:c8:a4:e3:ee:f6:5a:c6:4c:1f:c2:b4:7f:1e:1b:
                    f9:c2:75:d2:b4:aa:3d:86:08:94:ba:6c:c4:84:01:
                    30:b4:cc:e1:fd:d4:88:03:e0:88:2c:61:7c:fe:b0:
                    76:ff:f9:81:1f:0f:c5:0c:ac:b6:50:76:a7:78:aa:
                    0c:23:89:8d:fe:60:ba:f8:90:18:8f:ce:48:08:2a:
                    43:11:99:ec:a4:54:53:cf:35:24:26:d5:08:08:30:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.93.0/24
                  91.231.92.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47672

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:0a:61:5d:53:a1:39:bb:6a:bb:9c:dd:df:95:cc:1a:fe:
         fd:ee:ff:59:36:7d:89:9a:30:ff:47:fb:63:1d:da:02:91:b5:
         86:fe:3c:67:08:3f:37:0e:18:fe:6f:77:44:bc:52:74:ff:ca:
         52:94:0c:54:fd:9c:94:58:51:9f:1b:03:5e:26:f7:73:52:2d:
         a6:9b:83:d0:5d:72:a1:8f:e1:f5:db:4e:6f:bd:2e:c9:ff:2a:
         af:62:e1:ec:ec:ca:48:31:44:19:fe:ca:8d:73:a4:66:3c:19:
         38:54:9a:79:fc:04:cd:b0:72:d8:7a:a0:d6:57:cf:c2:5a:f9:
         b9:95:bb:1d:d0:24:27:47:7f:81:0d:53:db:bb:c5:e4:c3:4d:
         f7:cf:4f:d5:ad:3f:d5:a3:ea:48:5f:0c:fd:0c:d7:d3:84:17:
         14:66:15:29:80:c0:a5:bf:0e:cc:fb:c6:b4:9c:a6:15:e7:74:
         a8:fd:ac:c1:32:17:d0:dc:4e:dc:14:a3:26:54:e0:a4:76:d4:
         90:60:a8:70:07:b0:46:41:1b:99:41:38:63:04:3c:10:9c:3d:
         79:f9:5a:8e:57:7d:56:21:fe:41:cc:78:b3:21:5a:3f:fd:b1:
         ce:1f:22:31:7d:b1:95:eb:c6:63:ae:1f:c1:96:ed:11:5f:2f:
         11:b1:63:26
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZvGUU1SAHfPnqDQhKiNgV3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTE2MTAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2NiODY4ZjIyMTQ5OGZlYTI1MTU1Y2UwMDdmYzAxOWI3MzdmZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RipMp9iL717vuKGaxwyC0TfgqVl
EMGvVKdmF+sMWhSFkQxayjuGI7jlTyeX/ZlTv66R5R6c+e2qaw82w/hKnR1fvN2j
qi9wbO7MyPizob8QZxFyczfXhgrG7/qPBftcskEFE6wlDane3qVpbHn3j2QsP4P7
i2jp1DX4PdLyYRYQUplZJKyjhWsgOasq/K2owK/Ch0RR/cKNvFntJcMkojmvyyQD
yKTj7vZaxkwfwrR/Hhv5wnXStKo9hgiUumzEhAEwtMzh/dSIA+CILGF8/rB2//mB
Hw/FDKy2UHaneKoMI4mN/mC6+JAYj85ICCpDEZnspFRTzzUkJtUICDCGmQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFOPLho8iFJj+olFVzgB/wBm3N/+wMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzFhOWFk
MC0yYmIxLTQxNGYtODY2Yy1hOGYzMWM4YjllMDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvMWE5YWQw
LTJiYjEtNDE0Zi04NjZjLWE4ZjMxYzhiOWUwMy8xLzQ4dUdqeUlVbVA2aVVWWE9B
SF9BR2JjM183QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAW9BdAwQBW+dcMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwC6ODANBgkqhkiG9w0BAQsFAAOCAQEATDMKYV1ToTm7aruc3d+VzBr+
/e7/WTZ9iZow/0f7Yx3aApG1hv48Zwg/Nw4Y/m93RLxSdP/KUpQMVP2clFhRnxsD
Xib3c1ItppuD0F1yoY/h9dtOb70uyf8qr2Lh7OzKSDFEGf7KjXOkZjwZOFSaefwE
zbBy2Hqg1lfPwlr5uZW7HdAkJ0d/gQ1T27vF5MNN989P1a0/1aPqSF8M/QzX04QX
FGYVKYDApb8OzPvGtJymFed0qP2swTIX0NxO3BSjJlTgpHbUkGCocAewRkEbmUE4
YwQ8EJw9eflajld9ViH+Qcx4syFaP/2xzh8iMX2xlevGY64fwZbtEV8vEbFjJg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:32 2026 by rpki-client