This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
File:                     7N86SgXzcFD3wDedNPT0gUvSCd8.cer (raw, json)
Hash identifier:          BTtbRUUf8AZYQVVcwUaob6BwbU6cZ+Gc9tiMYPozlYA=
Subject key identifier:   EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BE51CE0000D36DC1D772DE65152914E45
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 22 Jan 2026 09:50:33 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 216399
                          IP: 46.183.23.0/24
                          IP: 178.210.224.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e5:1c:e0:00:0d:36:dc:1d:77:2d:e6:51:52:91:4e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 22 09:50:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:52:00:1e:8b:b2:9f:64:58:a1:32:1a:2a:
                    6f:7c:99:2c:40:e0:1a:da:32:7b:7d:72:b4:11:a2:
                    17:c5:bf:ca:7a:bd:e6:a3:da:4e:de:32:6d:3d:ae:
                    ff:f2:fe:db:cd:4f:ca:88:66:ca:7b:24:f9:2e:b6:
                    1d:d0:98:b6:3c:6f:d2:9e:b5:7e:fb:e1:6e:87:b1:
                    70:e7:86:d6:01:44:f2:1d:c0:0f:c5:4e:1e:ba:5d:
                    35:4a:2e:7f:28:5b:ad:ff:e7:6c:62:c3:f5:d8:3f:
                    9c:d3:3d:b4:af:bc:71:fd:8f:13:a4:c3:49:f8:94:
                    ef:e9:7a:af:c0:95:8c:20:31:e0:13:24:1b:d9:6d:
                    53:23:2d:0a:a2:93:07:de:28:8f:da:08:d3:1d:4a:
                    3a:cc:68:cb:d8:f1:56:61:92:97:f2:45:18:a2:f0:
                    cc:0d:64:40:6c:e3:f0:f2:99:5f:f1:62:d0:5f:42:
                    e7:f3:70:34:67:19:60:8e:8b:16:20:61:75:e8:14:
                    1c:04:9c:db:07:2f:bb:30:07:5c:52:84:ce:bf:57:
                    4b:06:5b:a1:d1:96:0c:c8:c3:62:38:c0:81:48:75:
                    ab:8d:d2:54:7a:d4:90:5e:37:55:6d:6c:f1:ae:c3:
                    93:7d:25:3b:ef:21:50:e1:22:76:b4:27:b7:e5:88:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.23.0/24
                  178.210.224.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216399

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:aa:ee:d1:f4:05:3a:d6:08:3f:5e:c3:f7:fa:69:07:23:
         d4:67:e7:b4:f7:6e:10:a4:db:09:8f:8b:86:bc:b8:13:2e:81:
         07:3b:f3:31:96:eb:46:f5:aa:3c:41:63:14:c6:b1:4c:97:6b:
         90:fe:e4:99:6e:ac:93:25:5e:80:db:a5:e1:e5:ee:c5:16:22:
         4d:3e:35:ed:0b:61:2c:a4:a5:a5:5e:53:e6:f8:a8:ac:ff:bf:
         7b:01:7f:48:6b:a4:ab:3c:8e:c5:19:78:6d:fd:78:5f:f0:26:
         1a:da:50:68:8e:e2:79:20:e5:26:d2:c3:6e:85:64:6d:a8:ad:
         48:fd:81:c2:03:f1:34:1f:dc:1f:13:27:de:f7:bd:17:a1:d3:
         55:cc:7c:f2:fa:fe:2d:c4:15:62:8c:ad:bd:85:69:9f:dd:7f:
         a6:31:04:a8:ef:17:8d:40:42:63:a6:c2:ee:4c:69:88:18:ab:
         8e:58:5f:c3:1b:0e:69:de:86:5a:5e:a4:58:94:55:d8:0e:4e:
         24:ac:ea:58:3b:e8:26:99:e2:fe:1f:28:6a:a3:c6:e2:1c:81:
         c7:7c:4a:05:10:82:4e:18:e5:41:4f:aa:4a:d9:36:69:e1:83:
         6b:8a:e2:3a:57:32:bd:84:28:1c:b4:05:1b:dc:76:53:f6:08:
         25:63:90:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 9 15:05:30 2026 by rpki-client