This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
File:                     79pPUsK3lM5LX38h4ySxubEGXRw.cer (raw, json)
Hash identifier:          QO19MP9Y58NTWbE1BiTZG378a8aNZK3Cz8JPmSno6I0=
Subject key identifier:   EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BF9FB7E121069FBA43D480190858D540A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 26 Jan 2026 11:06:07 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 195.182.60.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:fb:7e:12:10:69:fb:a4:3d:48:01:90:85:8d:54:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 26 11:06:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:47:38:5a:74:8c:d0:fe:e7:bd:78:f8:2a:
                    55:3f:e3:84:67:15:60:25:cb:c5:f3:07:8b:25:c1:
                    7a:2c:9a:4d:0a:9b:ec:4d:fc:44:3c:49:8b:34:dd:
                    e9:31:b8:28:37:c6:ec:b9:1a:e6:d7:31:41:b8:1f:
                    94:ee:a4:7d:d9:b1:6f:b8:43:a9:14:06:cc:01:5a:
                    75:d6:38:34:93:3c:fc:c9:e5:99:f7:fe:5d:d9:7c:
                    4e:8e:c9:63:ba:04:21:1c:ad:a3:72:5d:f5:76:17:
                    f6:d4:4f:90:1c:2f:f7:9b:b7:2c:a3:95:19:27:10:
                    97:ba:9a:e5:83:59:93:b6:36:63:fc:8c:39:1b:18:
                    4b:84:ae:19:00:ff:cd:21:3d:b8:fb:dd:cd:9a:0a:
                    15:49:bf:ce:38:74:70:e2:b6:4b:97:49:f1:21:3b:
                    14:ce:2f:ea:c1:42:75:eb:f6:89:32:a5:af:da:c0:
                    df:aa:45:42:9e:86:03:96:3a:78:73:81:25:c0:4b:
                    62:aa:14:52:3c:e5:43:f0:3b:ae:52:4d:8c:3d:0a:
                    d5:08:00:3a:de:57:2a:d0:13:91:90:c1:a3:9d:a2:
                    aa:31:2b:28:14:8b:3e:dc:84:c4:6c:01:05:3d:cc:
                    39:32:11:e8:2b:00:6e:9c:c5:b7:59:c7:ce:a8:62:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.182.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:97:45:39:03:60:f6:8f:b4:1d:13:2a:61:a5:43:99:63:e8:
         df:00:16:51:77:84:71:07:09:be:b0:8c:4c:15:a2:4b:a5:dd:
         ed:ed:91:09:7b:b2:51:e4:67:04:cb:15:f4:c7:d2:55:fe:2f:
         fa:6a:ce:68:1e:a9:f3:cc:d1:8e:fc:8c:aa:61:ed:97:3f:66:
         85:75:03:a5:f8:02:5c:14:05:ad:45:41:e9:f2:44:b8:17:aa:
         89:ba:e8:8e:4e:fb:ff:9f:a9:67:19:dd:44:1f:bb:f9:ca:80:
         b7:a9:1c:cd:9a:61:6a:3c:f9:28:03:10:f6:82:1e:e1:dd:0c:
         b9:57:5b:55:8b:bc:71:6b:1a:ab:25:33:ee:cc:f3:bc:8c:2f:
         65:7e:19:b3:cb:18:91:e4:fc:05:93:63:22:68:4d:39:79:5f:
         f6:ef:3e:43:39:1a:a9:71:f1:75:0f:98:ca:bd:e5:46:2d:27:
         3d:e1:5f:7f:91:d2:cd:c5:55:e5:5f:26:0f:71:f1:86:7e:f5:
         63:2a:ad:ca:7b:7b:da:20:90:e9:91:5a:57:db:11:db:a1:cd:
         e8:2f:c3:c6:e4:d3:5e:15:08:50:d6:bd:a1:46:eb:65:57:ac:
         24:0b:5e:b5:0f:2c:3e:73:f4:66:8b:df:9d:1f:6c:39:6d:9e:
         99:68:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:27 2026 by rpki-client