This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
File:                     7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer (raw, json)
Hash identifier:          Vvy932RvRr0Ou3l3C9kiJK1FzEKgrvZ7EopMtmfeDkY=
Subject key identifier:   ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F14F3457E87546B5C3639283F325FC7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:20:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.8.50.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:f3:45:7e:87:54:6b:5c:36:39:28:3f:32:5f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:20:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:c0:a1:8d:44:ac:dc:f0:dd:34:d5:b1:af:
                    19:2b:a3:5a:e5:4c:ff:09:66:60:34:51:29:23:f9:
                    c6:3c:1d:92:b6:71:31:07:d7:d4:b0:c8:4d:77:de:
                    14:70:61:69:bb:b9:69:6e:5c:40:44:da:6f:41:ac:
                    6e:9d:76:37:d9:11:aa:31:df:d2:2d:1e:27:70:37:
                    72:81:5e:92:be:32:73:9e:ee:bb:65:d2:86:b3:f1:
                    83:a9:7a:0c:9b:75:9a:79:b3:fb:19:6f:b2:0e:58:
                    d2:61:77:0d:39:1a:b8:31:b8:9b:a2:7d:21:5a:ae:
                    2f:d2:a6:30:f6:ed:51:24:ec:a5:73:8e:bf:20:56:
                    e0:aa:c4:29:57:f5:b2:14:f6:c3:b0:37:54:b6:02:
                    35:4d:88:7a:4a:51:fc:1d:94:e3:74:b5:f5:27:85:
                    0f:98:b2:6a:36:8d:bf:87:e6:84:29:43:61:51:19:
                    13:bf:31:a4:4a:77:dd:3c:c9:f4:4d:d7:99:34:20:
                    cd:54:7f:f8:fb:b0:17:49:98:00:22:86:d8:b4:0b:
                    34:b3:31:46:77:db:94:ce:df:d4:bf:49:e9:0d:48:
                    86:86:9f:2b:cf:1f:f6:c1:20:9f:7a:94:f5:61:43:
                    a8:fe:d2:72:86:9d:e4:df:d7:87:29:a9:ca:9c:a9:
                    3d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.8.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:80:49:c2:8c:a8:a2:d2:f2:9a:f2:8f:06:10:2d:54:d9:
         90:7f:83:a2:91:76:21:a4:0e:f3:b3:9e:63:80:ca:23:63:9a:
         6e:2d:85:a2:cc:0a:2e:ed:15:87:22:cd:9b:e2:e3:f1:6e:4a:
         88:28:27:2d:20:93:c1:b8:e2:0e:30:58:36:78:09:f5:37:94:
         68:f8:29:3d:fc:2f:16:29:85:d7:79:7b:2f:e9:c8:32:ee:7a:
         1d:cf:ac:ba:41:a2:74:f7:52:46:82:65:68:3b:83:dc:8b:52:
         f9:c8:11:7d:03:b9:b6:cf:5a:8d:83:3f:0d:aa:82:c2:39:6b:
         52:f4:b1:32:65:09:9d:62:a2:96:87:83:28:cf:42:b0:52:b9:
         36:93:5c:69:2d:62:12:23:78:63:6a:a8:32:09:fc:5b:10:32:
         18:05:39:3a:b7:2c:0c:18:49:11:c0:0e:bc:e3:0c:26:dc:24:
         0a:66:54:3b:2b:fa:ee:e2:cf:20:fb:ea:68:17:1b:4b:10:04:
         45:05:48:04:e1:a8:18:e0:ed:f2:5c:d0:43:ce:49:27:e2:b0:
         ef:2b:83:b8:67:db:03:35:2e:8c:24:6e:ca:06:44:16:7d:5c:
         a8:9a:77:ee:eb:68:24:a7:53:ea:5d:8d:54:4e:3a:b5:d4:70:
         1f:35:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----