This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer (raw, json)
Hash identifier:          LQpBXH3QNtV916e03qrQcfDqpJ3H7bPbl4G/Jehd+EQ=
Subject key identifier:   ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5B4736FD18AAF73D9EDE8F6C222FB9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:19:20 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.24.7.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:47:36:fd:18:aa:f7:3d:9e:de:8f:6c:22:2f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:19:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:e0:3c:3a:40:ed:06:60:39:36:bb:77:6a:
                    61:3d:e7:5d:0c:9a:01:8b:eb:e6:f4:82:8d:17:ff:
                    55:3d:f7:8a:c9:46:c2:66:82:c9:68:18:01:68:d6:
                    dd:31:e3:4d:03:c0:f7:18:dc:28:5d:83:81:c3:db:
                    f7:f3:5f:84:49:4a:15:04:b1:d3:ee:cd:1a:00:7c:
                    30:85:61:76:79:66:f3:8e:c9:2d:53:c6:5e:93:10:
                    b7:f2:b5:5f:f6:d5:bb:18:56:83:d6:66:47:a8:49:
                    06:f6:67:6f:14:89:95:45:5b:86:d0:4b:b7:bf:c6:
                    61:44:5e:83:e4:7c:87:50:c5:d2:96:85:8e:b6:d5:
                    58:cf:06:df:54:16:ae:ef:b7:3a:5e:36:97:64:98:
                    9a:bf:f0:8a:cd:37:2f:92:54:72:01:65:1d:cf:cd:
                    ef:91:2b:2c:6d:12:c3:ae:82:e0:73:77:14:25:61:
                    c4:5b:53:e3:f7:bf:1f:5a:2d:fa:ac:de:36:ab:dc:
                    b8:e2:b2:37:5d:a9:ee:01:a3:a9:c7:f2:28:96:89:
                    96:35:00:89:d5:62:6b:68:a9:e3:61:78:5d:ee:81:
                    20:97:f0:92:bc:72:4c:dd:e0:22:0b:98:64:d4:3b:
                    3b:03:fc:f5:7f:10:d5:5e:88:06:c8:ad:6a:5a:8e:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:83:4c:fa:e0:f8:64:56:c7:25:23:29:7b:e5:f9:13:90:e9:
         4a:10:b2:cb:92:a7:a5:be:c9:c8:9f:7e:d2:f8:2d:d5:2e:08:
         68:dd:1f:d8:aa:6f:f1:39:f7:94:d1:84:15:32:4c:f0:60:d1:
         cd:d4:c5:3d:72:b5:1e:93:2f:3f:a8:b5:65:b7:c0:52:47:2a:
         0a:a0:3a:b7:0f:7f:b2:8a:00:99:53:cd:fa:ed:ec:1b:9d:19:
         13:c0:0e:14:3e:ab:c9:fa:44:73:17:5f:c8:8c:4f:9b:e7:ad:
         22:76:15:f1:1c:fd:35:91:58:c1:9f:9a:ea:5b:2d:a6:5f:4e:
         43:17:e4:f4:a8:42:73:39:4f:a8:7d:b8:ad:37:d0:77:8e:2b:
         8f:17:64:e7:56:87:99:4f:e9:3c:41:7d:4b:b3:67:03:41:e3:
         fb:c6:dd:52:84:67:cd:4c:45:2e:4c:3a:61:99:9d:99:24:bf:
         a7:2c:2e:5e:8d:7f:b5:19:e9:8d:18:9c:ad:c7:71:1f:c4:91:
         69:e2:8a:8d:e2:33:13:a9:53:f6:b2:22:81:0b:44:d3:4f:bf:
         fa:da:a9:88:17:be:ef:f0:7b:75:fb:4f:d3:ae:cc:8a:bd:cc:
         d5:62:00:18:b7:91:d8:4d:ee:43:b5:02:7e:09:7a:ea:39:ff:
         a3:21:ca:5c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZt6W0c2/Riq9z2e3o9sIi+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDI0MTUwMTNmMmU5YzRlZTU4ZDdjMmRmZWVlYWIyODE2OTJkODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRLgPDpA7QZgOTa7d2phPeddDJoB
i+vm9IKNF/9VPfeKyUbCZoLJaBgBaNbdMeNNA8D3GNwoXYOBw9v381+ESUoVBLHT
7s0aAHwwhWF2eWbzjsktU8ZekxC38rVf9tW7GFaD1mZHqEkG9mdvFImVRVuG0Eu3
v8ZhRF6D5HyHUMXSloWOttVYzwbfVBau77c6XjaXZJiav/CKzTcvklRyAWUdz83v
kSssbRLDroLgc3cUJWHEW1Pj978fWi36rN42q9y44rI3XanuAaOpx/IolomWNQCJ
1WJraKnjYXhd7oEgl/CSvHJM3eAiC5hk1Ds7A/z1fxDVXogGyK1qWo6yAQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFO0kFQE/LpxO5Y18Lf7uqygWkthXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzdkYWJl
Ny1kZmYxLTQ2NmMtYTYwMC0wMzExZDBkNWRkYmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvN2RhYmU3
LWRmZjEtNDY2Yy1hNjAwLTAzMTFkMGQ1ZGRiYi8xLzdTUVZBVDh1bkU3bGpYd3Rf
dTZyS0JhUzJGYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRgHMA0GCSqGSIb3DQEBCwUAA4IBAQBFg0z6
4PhkVsclIyl75fkTkOlKELLLkqelvsnIn37S+C3VLgho3R/Yqm/xOfeU0YQVMkzw
YNHN1MU9crUeky8/qLVlt8BSRyoKoDq3D3+yigCZU8367ewbnRkTwA4UPqvJ+kRz
F1/IjE+b560idhXxHP01kVjBn5rqWy2mX05DF+T0qEJzOU+ofbitN9B3jiuPF2Tn
VoeZT+k8QX1Ls2cDQeP7xt1ShGfNTEUuTDphmZ2ZJL+nLC5ejX+1GemNGJytx3Ef
xJFp4oqN4jMTqVP2siKBC0TTT7/62qmIF77v8Ht1+0/TrsyKvczVYgAYt5HYTe5D
tQJ+CXrqOf+jIcpc
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:25:29 2026 by rpki-client