This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer
File:                     6u-o-3F64LhsHl1nA1DSxzuefE4.cer (raw, json)
Hash identifier:          ZzL3hNilnOLfHCEPn/NQo97O6yKZMh6PC4aHg2ONBo4=
Subject key identifier:   EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7834920BBA24D7B11623722D3E5F2C41
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:17:49 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 204261
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:92:0b:ba:24:d7:b1:16:23:72:2d:3e:5f:2c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eaefa8fb717ae0b86c1e5d670350d2c73b9e7c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:e6:1b:46:0f:75:20:2f:b2:a7:0c:e2:cf:
                    8a:8c:04:8b:4c:5f:a5:2e:e3:b4:94:7b:ba:39:cc:
                    7f:08:12:f1:66:e6:8c:59:19:f0:f8:7e:ee:8f:fd:
                    35:a9:85:bb:63:be:0e:d3:a3:61:b3:a6:d9:b9:b8:
                    1c:1d:e8:03:22:1f:01:3d:5d:b6:c8:fb:7a:a9:13:
                    7b:e8:a0:0f:e0:38:09:0a:8c:fd:9b:2b:bb:7f:e1:
                    57:c3:11:e2:95:91:75:49:f8:fa:c3:9d:4d:58:8b:
                    87:c7:4f:b8:ab:50:1e:d0:e1:52:33:38:b6:3c:06:
                    bc:ef:7e:39:bf:37:b5:59:d2:77:04:43:f4:71:9a:
                    63:0c:01:9a:6a:0d:79:78:13:d6:01:c9:06:3e:17:
                    9a:25:fa:5d:a5:d6:0d:40:2b:ef:80:8e:2a:92:74:
                    08:03:b0:48:aa:43:75:eb:ba:63:ef:74:f6:a0:fd:
                    44:37:c3:88:5c:b9:1e:75:29:3c:80:cf:7a:f0:20:
                    d2:25:62:36:63:0d:ef:94:5f:53:b8:99:60:e3:12:
                    86:c9:69:58:9a:44:e5:e8:de:36:f9:de:94:a5:4e:
                    9a:3f:b6:0c:a1:14:15:82:b5:c3:7a:40:b8:a0:7c:
                    bd:5f:72:5c:f5:a1:c0:54:cb:f2:ce:89:92:f9:e9:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204261

    Signature Algorithm: sha256WithRSAEncryption
         52:55:79:d7:3f:04:d7:0c:d0:9f:a4:59:1f:61:cd:93:9c:b7:
         83:a4:36:4c:df:68:61:fe:fc:7a:3d:86:9a:ff:8d:e4:92:7c:
         a7:3c:4f:1f:b9:c5:cb:fd:b1:51:b3:ec:77:87:bb:70:f2:c8:
         dd:31:c2:e7:8e:e2:f8:73:8e:f3:9d:8e:cf:ad:07:e4:0b:9d:
         d8:69:77:3f:e2:07:09:42:de:b9:da:5b:e5:3a:40:b7:62:09:
         6b:83:4b:86:53:57:1a:97:c1:92:42:1a:a3:84:78:91:d3:f4:
         7d:74:80:15:02:7a:85:7d:44:7b:6a:55:73:21:f4:3d:85:5c:
         f3:8a:0e:ed:ad:71:79:1d:03:f5:ce:49:8e:ac:5f:ab:81:9b:
         e7:74:4e:2f:62:7c:ce:1e:7c:da:ef:f2:50:19:ba:1f:30:32:
         df:bd:2a:e2:b3:9f:98:7f:71:f5:93:44:2d:76:88:ef:eb:2b:
         45:fd:f3:e0:1b:a1:58:17:f5:f2:05:bc:79:25:d0:62:a9:52:
         55:96:fb:5a:65:ef:1a:e0:73:57:d9:9c:57:2a:60:54:b4:3b:
         76:ee:c9:93:9c:8a:4a:ca:2a:d6:7e:15:ca:82:fe:d0:09:4e:
         db:71:d3:3a:fe:20:80:3a:7f:45:64:89:85:c0:04:51:1f:be:
         f8:fa:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:52:20 2026 by rpki-client