This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
File:                     5rtLno321mTvy3e0EEFcg0phd4I.cer (raw, json)
Hash identifier:          L0QGNiuH9mvLPgHkkr1Ef4DGoJ85CyI/H5Y/6XJrw3Q=
Subject key identifier:   E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7AC9002B1D3B57D2EE4623718A15CA5A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 18:19:11 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214517
                          IP: 2001:678:3b4::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:00:2b:1d:3b:57:d2:ee:46:23:71:8a:15:ca:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:c5:d0:11:4d:86:a6:d4:59:44:c2:97:42:
                    28:09:e7:65:a1:00:c4:8b:44:7a:5a:56:ac:f1:45:
                    bc:07:a5:39:a5:39:79:99:8c:5e:ce:7d:7a:c9:fd:
                    15:29:b4:e1:1e:e5:1a:dd:9c:d9:b2:4d:10:8c:89:
                    94:2c:a0:90:fa:b9:09:cc:45:9e:7f:07:66:4b:9d:
                    ac:39:19:31:ae:d6:71:3c:3f:7d:6e:1e:6a:ef:ee:
                    ff:10:0e:f3:ff:d2:bd:a7:93:6f:20:23:c6:78:b7:
                    52:1e:fe:81:75:b0:9d:7a:57:8a:12:11:cc:bf:b8:
                    5e:b6:ee:96:33:8f:16:e3:57:ce:48:13:84:d5:b4:
                    a2:8d:27:38:f0:21:82:9d:fd:5d:05:d7:cc:c5:ef:
                    a5:fc:76:e6:3d:29:61:5f:34:65:b3:bd:69:bf:ab:
                    ba:9a:de:76:18:4a:9e:32:ef:af:be:3d:2c:a9:7f:
                    0e:7d:4c:f5:09:73:85:69:18:e3:8f:2b:40:d9:27:
                    ee:5d:12:dd:3b:18:d5:35:10:78:34:de:47:d1:91:
                    32:d8:1a:a9:0d:b2:20:20:09:82:01:99:62:32:c2:
                    d3:80:89:d3:e2:28:22:5c:6a:9b:29:7c:57:ac:e6:
                    12:84:dd:3c:a2:41:bd:3a:fd:e6:8a:62:9b:05:d6:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:3b4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214517

    Signature Algorithm: sha256WithRSAEncryption
         04:12:48:1e:b3:4d:87:74:e2:89:73:c7:3d:98:b8:81:3d:f2:
         21:de:8b:dc:c9:3f:19:8a:ca:d8:f6:bb:23:de:93:27:e8:79:
         88:ef:d0:a4:43:91:f7:9f:f5:0c:24:61:c3:c4:c9:7e:a8:f5:
         5e:7a:ce:97:c4:61:64:cd:37:14:dc:a5:d2:e3:02:b2:6e:cd:
         84:07:96:a6:1c:14:86:11:73:8f:18:18:c6:90:ba:58:8a:30:
         fb:51:9c:df:7e:0b:dd:64:d2:67:e8:e4:70:b9:02:0d:11:ef:
         11:de:7a:a5:44:0a:4f:be:5f:7c:43:6c:fe:bc:c7:ff:0d:1f:
         cd:f5:fe:b1:5e:83:31:55:15:6a:d2:e1:7d:b6:7a:92:79:18:
         ea:c9:17:5d:47:d5:e6:16:d7:74:7e:82:51:14:6a:62:9a:de:
         bc:66:68:da:39:e9:c9:72:d2:75:e7:58:2d:eb:7c:25:54:5b:
         7c:4c:3a:68:c0:89:c9:03:26:09:29:a0:b9:dd:f8:f9:8f:d7:
         50:39:5a:30:b7:05:46:71:c1:ca:a7:36:9c:64:d5:d2:6f:5f:
         e4:07:4f:72:6f:0a:e9:98:75:c5:ea:88:27:31:4a:d5:77:44:
         dc:c6:01:b4:ca:70:49:18:14:83:8e:cd:c1:39:0c:ae:e8:16:
         aa:0b:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----