This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
File:                     614owu_zzzXDwcw9Z7qj3wUFX5k.cer (raw, json)
Hash identifier:          15u1vaFjf2W06EcWjX3ucWy47MGmvfyErQ6ct3w1yEk=
Subject key identifier:   EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA39E191130AD7A9363512115D94FEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:17:59 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209220
                          IP: 2001:678:a38::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:9e:19:11:30:ad:7a:93:63:51:21:15:d9:4f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:0c:bc:4a:44:c2:cd:53:c8:37:24:ee:b4:
                    db:4b:18:bc:6f:34:28:db:aa:7a:67:5a:d1:b0:27:
                    19:8e:fb:d8:9e:70:34:e9:6d:62:b9:74:f3:a5:dd:
                    82:65:4a:aa:ae:3f:e8:58:26:cf:b1:3a:f8:5c:95:
                    89:09:0d:90:79:aa:6c:31:ea:74:6c:36:b4:9c:2c:
                    01:23:0b:92:84:a9:5a:18:5f:f1:69:7d:17:37:39:
                    da:d0:16:76:d9:9a:ab:b1:59:a4:c7:3a:3d:5f:90:
                    d9:4b:bd:1e:c1:3e:08:22:c8:70:16:3b:27:5c:66:
                    cd:41:81:11:c5:5e:ab:84:0a:57:95:22:64:94:59:
                    84:50:e9:05:45:e3:8e:86:d0:fc:fb:2d:15:f9:3f:
                    9e:7b:4b:a3:47:02:31:a4:a3:2a:7d:d9:e7:3a:c6:
                    86:da:c8:9d:39:dc:05:9c:4b:01:89:f8:11:b2:62:
                    61:b5:e3:cd:47:7e:19:60:c6:c1:c5:aa:64:fa:d8:
                    a3:fb:87:f7:18:e6:33:17:70:3c:42:8a:f4:42:36:
                    59:7a:cd:db:e7:f8:29:1f:ea:55:1e:8e:76:8d:45:
                    74:90:ad:f5:92:b4:11:b0:2f:21:c4:82:c0:9d:c9:
                    61:43:52:08:95:f0:8e:2d:80:77:c2:1f:0c:ac:b9:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:a38::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209220

    Signature Algorithm: sha256WithRSAEncryption
         59:1d:61:55:1b:92:7f:fa:b6:f1:10:59:aa:e6:7a:ef:9a:de:
         e6:c6:27:66:c8:f5:90:85:65:49:d1:13:50:11:69:c4:41:b3:
         ce:53:cf:03:d2:ef:00:d6:96:c4:8c:b1:55:59:a7:2b:5a:18:
         a1:13:10:f5:0c:0a:47:a8:5e:39:09:33:10:68:11:53:96:e1:
         ee:c1:5d:57:b5:13:57:5a:a8:20:78:19:97:88:9d:d6:7d:29:
         bb:97:79:18:89:87:4b:26:33:c2:ea:95:b5:46:af:5b:3a:96:
         70:4e:1e:33:8f:6b:e7:e9:c9:08:88:8d:ae:7c:f6:5b:9f:ca:
         c3:e4:e2:f2:61:0d:5a:1b:3d:95:c1:f1:37:8c:33:f1:be:42:
         4f:c9:18:70:e1:46:af:a1:55:46:3f:90:96:0f:24:b6:42:08:
         84:b5:a4:4e:8e:6b:82:57:4e:2e:ef:0d:1e:3d:a0:65:d6:e5:
         06:76:44:45:08:1e:a9:98:b4:17:31:82:f9:fa:26:a2:54:3e:
         3c:64:ed:82:9d:3d:cd:a2:4e:bf:2c:c2:b4:bc:ed:ff:fe:24:
         3f:a5:8c:08:ff:f2:75:c6:5b:dd:1e:dd:de:d4:89:61:9d:9a:
         69:59:06:27:85:04:b7:1a:d6:08:2a:c5:e8:f0:bd:93:6f:8b:
         f4:a1:fb:8b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZt7o54ZETCtepNjUSEV2U/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjVlMjhjMmVmZjNjZjM1YzNjMWNjM2Q2N2JhYTNkZjA1MDU1Zjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+sMvEpEws1TyDck7rTbSxi8bzQo
26p6Z1rRsCcZjvvYnnA06W1iuXTzpd2CZUqqrj/oWCbPsTr4XJWJCQ2QeapsMep0
bDa0nCwBIwuShKlaGF/xaX0XNzna0BZ22ZqrsVmkxzo9X5DZS70ewT4IIshwFjsn
XGbNQYERxV6rhApXlSJklFmEUOkFReOOhtD8+y0V+T+ee0ujRwIxpKMqfdnnOsaG
2sidOdwFnEsBifgRsmJhtePNR34ZYMbBxapk+tij+4f3GOYzF3A8Qor0QjZZes3b
5/gpH+pVHo52jUV0kK31krQRsC8hxILAnclhQ1IIlfCOLYB3wh8MrLkQHQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFOteKMLv8881w8HMPWe6o98FBV+ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzc5ODYy
My02ZGJlLTQ2ODgtYTQ2NS1jZWMyNjVkZGFjNDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvNzk4NjIz
LTZkYmUtNDY4OC1hNDY1LWNlYzI2NWRkYWM0Ny8xLzYxNG93dV96enpYRHdjdzla
N3FqM3dVRlg1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAo4MBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMxRDANBgkqhkiG9w0BAQsFAAOCAQEAWR1hVRuSf/q28RBZquZ675re5sYn
Zsj1kIVlSdETUBFpxEGzzlPPA9LvANaWxIyxVVmnK1oYoRMQ9QwKR6heOQkzEGgR
U5bh7sFdV7UTV1qoIHgZl4id1n0pu5d5GImHSyYzwuqVtUavWzqWcE4eM49r5+nJ
CIiNrnz2W5/Kw+Ti8mENWhs9lcHxN4wz8b5CT8kYcOFGr6FVRj+Qlg8ktkIIhLWk
To5rgldOLu8NHj2gZdblBnZERQgeqZi0FzGC+fomolQ+PGTtgp09zaJOvyzCtLzt
//4kP6WMCP/ydcZb3R7d3tSJYZ2aaVkGJ4UEtxrWCCrF6PC9k2+L9KH7iw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 15:11:41 2026 by rpki-client