This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
File:                     7b5zqycw806U8SDpv8Va9EBTafY.cer (raw, json)
Hash identifier:          a9wnJNsNfvGY7RX2rBAVYsww88ya+iGGqaMLcRjK8VU=
Subject key identifier:   ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7FF152B317677F7959703092E259C6DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 18:21:20 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:d34::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:52:b3:17:67:7f:79:59:70:30:92:e2:59:c6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 18:21:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:54:5d:f6:e9:1d:6d:90:9b:08:ed:70:23:
                    e3:93:e1:7a:db:e4:7a:92:09:db:9c:b9:5a:51:6e:
                    ac:4d:a9:a1:87:77:e3:d3:e4:c0:5c:78:06:4f:a8:
                    53:6b:56:d6:fb:00:e3:17:b2:9f:79:a8:f1:67:6a:
                    86:ef:da:e6:e1:d2:53:f9:18:b4:3b:06:46:5f:3a:
                    bd:cd:31:8d:8c:f0:f7:eb:4c:d7:45:12:e8:08:4c:
                    fa:12:87:16:93:90:45:37:a3:71:ef:d6:fb:bb:e4:
                    cd:30:d9:c5:c3:06:c3:8e:21:d2:2c:f2:7a:80:24:
                    b8:bd:b2:40:24:fa:2a:19:fe:f5:88:37:f6:74:3d:
                    6e:da:37:d4:53:3e:80:b6:06:06:26:c2:5d:01:c9:
                    7e:08:6a:77:03:e8:c0:14:ba:99:78:dc:26:c3:92:
                    36:14:0f:ec:e0:6e:e2:4a:3a:cb:c3:94:0d:9c:1d:
                    33:1e:e3:61:95:a1:f1:5f:45:b5:35:40:27:c8:79:
                    26:c3:56:c3:5a:6e:dc:57:19:b6:b4:7d:73:d7:42:
                    d9:57:2a:a9:6a:c0:1c:ef:f8:f6:50:8a:d4:07:ec:
                    82:43:5a:42:51:a3:7d:f8:65:15:e8:32:77:22:e2:
                    f2:0f:d1:3c:0c:44:c8:97:3b:bb:ec:9b:e4:bc:c8:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:d34::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:9d:cd:12:9b:05:55:7d:99:25:24:10:8a:6d:94:63:08:40:
         84:b2:23:da:c1:97:b6:fb:cb:a8:46:0f:b1:e8:e5:a4:bb:21:
         5d:22:ad:94:e7:1e:36:01:36:9e:2d:63:fd:87:db:81:a4:8f:
         da:5d:c0:5b:e7:00:dc:65:78:14:45:cf:f9:b0:02:49:f6:45:
         58:ac:b2:a2:de:03:60:0b:8e:d9:cf:b2:62:26:fa:2f:65:5f:
         dd:f4:93:b8:e4:85:0d:84:12:de:16:cd:d4:18:5e:d4:33:c8:
         ed:26:47:7a:ea:5a:16:d8:52:01:d6:83:35:31:4b:b6:61:35:
         01:de:7a:f4:22:81:a8:2a:66:14:99:a5:69:16:0e:19:db:5b:
         67:b9:46:95:f4:6d:24:f5:a6:dc:05:70:8c:f5:cb:bf:cd:a2:
         94:89:85:5c:06:22:59:5d:86:e2:7d:6f:75:50:ce:dd:8b:20:
         e0:e7:5b:c5:e4:ec:53:32:9b:9a:9e:71:1d:a9:99:82:e7:8f:
         4a:2d:70:8d:a8:e7:5a:28:19:23:e8:bd:0a:a4:d1:10:fb:96:
         31:fa:75:a8:da:a0:4b:96:e7:76:76:a8:d0:66:37:bf:19:32:
         b9:4c:c4:93:e6:00:13:7f:da:03:50:8c:72:72:38:35:33:0e:
         07:d6:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----