This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
File:                     4Uk5uDWV4u-2lFa83yOGalB59vU.cer (raw, json)
Hash identifier:          o7TYcq1HN+IzNQctGDnLG56ZHY0u93eVy8nonGgqNWg=
Subject key identifier:   E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E37DD656D2512A84FCE605F0D02F0D7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:19:09 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 206841
                          IP: 185.174.184.0/22
                          IP: 2a0b:b300::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:dd:65:6d:25:12:a8:4f:ce:60:5f:0d:02:f0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:af:97:c8:ff:50:4e:78:3d:3e:11:74:ba:
                    71:1b:22:12:e4:49:ce:51:8c:3c:f1:64:26:44:ce:
                    2e:c6:51:16:0d:86:a5:f0:8d:f0:22:9f:41:8a:a2:
                    d8:74:47:75:62:4a:5e:bf:e0:2f:07:36:6c:25:75:
                    28:f6:fe:56:c0:13:07:22:f5:32:24:5f:e9:5e:bf:
                    18:c5:32:e6:24:4d:1b:a6:d4:7e:4a:89:e4:ec:26:
                    df:ea:e7:ef:13:63:2e:c9:dc:6d:c4:1b:2a:ec:b3:
                    1c:6b:2c:9c:04:7c:60:e4:f5:80:87:06:30:3b:c6:
                    65:3a:d9:31:82:d6:c8:c5:c6:8f:d8:a6:a5:fa:af:
                    ef:6a:dc:d5:ab:60:14:b5:1c:6a:84:4a:8e:b1:e8:
                    81:56:08:10:a6:33:26:b3:b2:5a:30:5d:5a:8e:4e:
                    7d:f9:66:5e:0a:d8:4f:f5:f0:dd:8b:d5:69:13:e7:
                    8b:9f:77:73:35:a4:7c:05:8c:21:08:ca:81:0e:9e:
                    2f:ab:1b:73:56:5f:10:92:13:65:ea:89:29:63:24:
                    29:a8:36:10:a3:65:71:7f:58:bc:68:4c:58:70:ab:
                    c1:74:e5:e2:48:31:46:34:75:68:82:3a:5a:56:14:
                    96:87:74:3b:f6:02:4b:be:4c:cb:0d:41:50:42:84:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.174.184.0/22
                IPv6:
                  2a0b:b300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206841

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:ad:d8:b7:54:c8:c8:bc:c5:43:1b:55:fa:b9:94:f3:69:
         6c:89:e2:58:c1:49:ef:9b:63:f5:7b:35:7f:f1:37:df:da:61:
         91:f1:6c:42:7b:b5:74:31:bd:bb:dc:7b:2a:82:bc:b2:6a:eb:
         b8:f1:94:d1:5f:08:c6:3c:b8:08:ee:df:a8:8b:be:c7:d2:d2:
         34:03:43:ca:bd:31:49:4d:96:5b:76:ec:66:68:a9:63:99:d6:
         f9:74:e7:01:f5:29:53:a2:7e:8b:c8:25:55:dc:e6:f0:6a:25:
         ed:2e:04:46:40:dc:d1:5a:29:f0:69:21:a4:c0:7b:76:ae:25:
         79:4e:04:e1:94:af:80:e4:d8:b3:22:99:25:4d:a7:d6:4f:37:
         ba:a3:f0:c8:0e:e1:9b:90:9e:bb:8c:18:9c:fb:66:06:66:fd:
         f4:23:cb:89:82:08:4f:6f:68:05:23:23:33:88:68:6a:81:3d:
         94:e0:7f:e4:76:ed:e0:08:22:8b:2d:18:78:f1:f5:cb:8a:fc:
         86:69:b0:3a:92:73:9d:70:df:76:8d:ea:2b:73:a4:ae:56:d7:
         fd:a8:34:12:11:e0:ae:8a:da:cd:49:64:ff:50:b5:8b:b4:e5:
         95:a6:81:31:97:e8:23:91:a5:3f:8d:43:ba:2e:9b:33:12:37:
         6f:a6:0f:0b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt+N91lbSUSqE/OYF8NAvDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTQ5MzliODM1OTVlMmVmYjY5NDU2YmNkZjIzODY2YTUwNzlmNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdyvl8j/UE54PT4RdLpxGyIS5EnO
UYw88WQmRM4uxlEWDYal8I3wIp9BiqLYdEd1Ykpev+AvBzZsJXUo9v5WwBMHIvUy
JF/pXr8YxTLmJE0bptR+Sonk7Cbf6ufvE2MuydxtxBsq7LMcayycBHxg5PWAhwYw
O8ZlOtkxgtbIxcaP2Kal+q/vatzVq2AUtRxqhEqOseiBVggQpjMms7JaMF1ajk59
+WZeCthP9fDdi9VpE+eLn3dzNaR8BYwhCMqBDp4vqxtzVl8QkhNl6okpYyQpqDYQ
o2Vxf1i8aExYcKvBdOXiSDFGNHVogjpaVhSWh3Q79gJLvkzLDUFQQoRF8wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOFJObg1leLvtpRWvN8jhmpQefb1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2Y5MGZk
YS0wMzRkLTQ0ZTAtYTgxMi1jZDYzMGRiYzFkMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvZjkwZmRh
LTAzNGQtNDRlMC1hODEyLWNkNjMwZGJjMWQxOC8xLzRVazV1RFdWNHUtMmxGYTgz
eU9HYWxCNTl2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCua64MA0EAgACMAcDBQMqC7MAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMn+TANBgkqhkiG9w0BAQsFAAOCAQEAfOGt2LdUyMi8
xUMbVfq5lPNpbIniWMFJ75tj9Xs1f/E339phkfFsQnu1dDG9u9x7KoK8smrruPGU
0V8Ixjy4CO7fqIu+x9LSNANDyr0xSU2WW3bsZmipY5nW+XTnAfUpU6J+i8glVdzm
8Gol7S4ERkDc0Vop8GkhpMB7dq4leU4E4ZSvgOTYsyKZJU2n1k83uqPwyA7hm5Ce
u4wYnPtmBmb99CPLiYIIT29oBSMjM4hoaoE9lOB/5Hbt4Agiiy0YePH1y4r8hmmw
OpJznXDfdo3qK3OkrlbX/ag0EhHgrorazUlk/1C1i7TllaaBMZfoI5GlP41Dui6b
MxI3b6YPCw==
-----END CERTIFICATE-----