This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
File:                     8-hh3LY0GJOsTmMm723kNEHmaUM.cer (raw, json)
Hash identifier:          G2KIB5wujl5CO9g1qrYDqqdqdtxMqsLcefNar8Mfhdw=
Subject key identifier:   F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79114B41544130C5C61D35EAC0BBD8AF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 10:18:55 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 21061
                          IP: 193.110.8.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:4b:41:54:41:30:c5:c6:1d:35:ea:c0:bb:d8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f3e861dcb6341893ac4e6326ef6de43441e66943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:a1:de:98:4f:28:e4:12:b1:01:bd:4c:72:
                    5c:b8:b1:56:6a:08:55:2b:20:e6:be:25:df:8a:b6:
                    e2:ef:e8:c9:a2:6c:b0:16:b9:21:b3:25:9c:b6:6f:
                    f6:d4:c4:b4:40:89:91:9c:8d:65:bd:3a:bf:6b:70:
                    df:3c:cc:b3:94:97:36:dc:e7:32:eb:96:11:07:73:
                    ca:13:ac:ca:f2:1c:2c:ba:8a:cc:66:6f:e9:80:6e:
                    49:ac:98:03:ba:a0:d2:5f:14:f1:08:43:a1:7e:2d:
                    9d:db:97:22:84:94:2f:02:47:a3:da:79:28:f7:5a:
                    60:f1:5d:a3:0f:f2:22:56:eb:1e:d0:ac:ee:d3:72:
                    85:ec:e0:61:f5:ad:ef:c9:28:4b:db:b2:ef:d4:81:
                    2d:05:bc:54:75:d7:cf:90:3b:12:8b:45:5a:4d:bb:
                    6b:35:8a:12:6b:02:d3:38:1a:54:27:14:1c:b6:78:
                    fb:cd:b4:8b:89:ae:5b:4f:96:cf:83:ee:6b:78:c5:
                    50:14:34:57:50:1a:2a:7d:a0:3f:53:c9:98:59:76:
                    ff:40:57:a3:59:c1:3b:0c:5c:9f:97:29:5d:7b:bf:
                    be:97:6d:f6:29:0a:3f:52:25:79:0d:34:49:6f:43:
                    de:58:a7:10:46:a5:a6:7f:9f:94:ff:cf:f2:51:01:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.8.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21061

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:f5:5e:17:f2:47:10:23:e8:50:27:34:4e:22:dc:46:97:
         b0:3f:92:bc:35:31:a3:a9:9b:8d:f3:ef:10:2a:e5:ca:3f:62:
         c2:0e:26:78:28:10:d7:83:8f:60:34:51:69:5b:34:28:da:3c:
         9f:c9:a7:67:c4:73:c5:11:4a:7c:9e:6e:61:17:4f:c0:72:08:
         01:51:cd:b0:1c:d4:32:82:c5:8e:2d:d1:ba:ed:ac:2a:50:56:
         b8:bd:03:f8:14:88:f6:74:a0:d7:f9:f6:a0:46:69:80:a1:79:
         de:60:93:fa:40:70:fa:1b:c0:cb:f4:39:08:c6:52:e9:8d:5a:
         a6:d0:33:42:6d:59:c3:fa:38:dc:8f:e9:8e:b1:41:a6:04:d2:
         5f:51:4c:94:20:66:fd:df:40:49:52:c6:d4:4a:58:41:63:af:
         4e:b6:70:85:cc:37:a5:89:c8:68:d7:69:07:7b:21:87:e6:61:
         ea:06:05:13:1d:4a:e0:f3:35:bc:48:ca:75:32:7e:9f:19:a0:
         c2:25:ec:2a:ac:28:45:50:64:33:56:96:67:6b:53:dd:31:6d:
         e0:e3:38:a2:b5:fb:11:13:9d:ae:ec:85:6a:dc:7e:ac:10:fb:
         47:93:2c:31:a8:97:c0:75:44:82:06:0c:75:d2:0c:bc:d2:fa:
         6c:17:11:c7
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZt5EUtBVEEwxcYdNerAu9ivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2U4NjFkY2I2MzQxODkzYWM0ZTYzMjZlZjZkZTQzNDQxZTY2OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvSh3phPKOQSsQG9THJcuLFWaghV
KyDmviXfirbi7+jJomywFrkhsyWctm/21MS0QImRnI1lvTq/a3DfPMyzlJc23Ocy
65YRB3PKE6zK8hwsuorMZm/pgG5JrJgDuqDSXxTxCEOhfi2d25cihJQvAkej2nko
91pg8V2jD/IiVuse0Kzu03KF7OBh9a3vyShL27Lv1IEtBbxUddfPkDsSi0VaTbtr
NYoSawLTOBpUJxQctnj7zbSLia5bT5bPg+5reMVQFDRXUBoqfaA/U8mYWXb/QFej
WcE7DFyflylde7++l232KQo/UiV5DTRJb0PeWKcQRqWmf5+U/8/yUQHCKwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFPPoYdy2NBiTrE5jJu9t5DRB5mlDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyL2Y3NDQ2
My00YjUyLTQ4ODMtODUyOS0zNGVhMDIxZDk3MzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZjc0NDYz
LTRiNTItNDg4My04NTI5LTM0ZWEwMjFkOTczMy8xLzgtaGgzTFkwR0pPc1RtTW03
MjNrTkVIbWFVTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwW4IMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AlJFMA0GCSqGSIb3DQEBCwUAA4IBAQAU2PVeF/JHECPoUCc0TiLcRpewP5K8NTGj
qZuN8+8QKuXKP2LCDiZ4KBDXg49gNFFpWzQo2jyfyadnxHPFEUp8nm5hF0/AcggB
Uc2wHNQygsWOLdG67awqUFa4vQP4FIj2dKDX+fagRmmAoXneYJP6QHD6G8DL9DkI
xlLpjVqm0DNCbVnD+jjcj+mOsUGmBNJfUUyUIGb930BJUsbUSlhBY69OtnCFzDel
icho12kHeyGH5mHqBgUTHUrg8zW8SMp1Mn6fGaDCJewqrChFUGQzVpZna1PdMW3g
4ziitfsRE52u7IVq3H6sEPtHkywxqJfAdUSCBgx10gy80vpsFxHH
-----END CERTIFICATE-----
Generated at Mon Feb 9 15:11:50 2026 by rpki-client