This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
File:                     8yyk3zLccfQREE-UtRrBS2Z1gks.cer (raw, json)
Hash identifier:          mLeWvMHGl0B/feheGCkbKdzGBlg0E9BzLAzlEVfmK1I=
Subject key identifier:   F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C70B221009129AC3F54C00E0B7379E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:11 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 144.2.252.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:0b:22:10:09:12:9a:c3:f5:4c:00:e0:b7:37:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:c0:08:f1:91:d4:30:08:e0:7f:98:dc:ab:
                    9a:c6:98:c3:13:7b:88:be:cb:9a:e2:01:9a:05:8f:
                    f6:ac:36:be:13:b1:12:9a:53:99:6a:60:f1:0b:6f:
                    ef:4d:63:97:7f:f3:6d:0e:73:dc:ad:f9:78:67:9f:
                    25:20:b1:56:2a:ad:25:92:e3:98:09:a0:29:b5:03:
                    f6:68:5e:cc:23:c8:d1:d1:c8:a6:88:3c:6e:cc:10:
                    d8:72:7d:f8:cf:df:f1:ba:8e:7e:14:1b:91:e4:58:
                    31:75:e1:e3:90:70:be:22:71:bd:bd:a3:1a:c8:d0:
                    4f:1d:d1:50:3c:64:2a:23:34:85:f9:50:4a:95:1d:
                    dc:6a:a0:cb:61:40:d9:28:ce:09:13:b6:01:a0:d5:
                    df:34:b6:d4:16:8e:27:c1:43:12:4e:3a:11:0b:21:
                    1c:a2:a7:4b:71:5f:1b:2e:61:3f:3a:e3:bc:06:18:
                    47:33:a1:37:b7:eb:83:32:0a:58:53:df:40:87:6e:
                    47:48:c1:b9:17:fc:26:1b:bd:11:b1:86:b1:ed:39:
                    be:25:a1:24:98:02:38:e7:bf:05:79:ca:e3:38:b4:
                    9e:c7:5d:5c:1a:69:70:22:1b:87:7e:13:22:23:ee:
                    58:51:57:59:ea:a4:7d:35:ce:4f:c7:24:01:3c:bc:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.2.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:50:3f:28:1e:0b:42:04:cf:d9:d6:d2:53:4c:86:20:4c:db:
         c5:d7:af:10:f4:bb:ae:d9:c5:95:2c:17:ca:1a:df:5f:6b:bc:
         7f:92:81:37:bb:4f:40:34:f8:df:b5:98:bc:ca:ab:9d:b0:54:
         0f:8b:e4:17:1a:e0:36:2c:95:9f:19:ae:95:80:a4:75:4d:72:
         4e:f0:45:d0:b4:a6:88:20:7b:68:92:3c:22:5d:73:8f:fd:cf:
         9e:61:65:84:0f:05:63:72:14:76:3d:92:19:5d:83:d0:97:db:
         a0:0b:52:dd:63:92:e1:94:67:80:92:a3:e3:53:38:33:4d:1c:
         8b:32:9e:d6:81:23:30:2b:a3:e1:22:fd:22:3d:3b:78:00:eb:
         63:fd:cc:86:46:a7:fe:e0:4a:2a:78:59:5e:e7:70:d3:31:d8:
         68:94:62:fa:fb:85:dd:66:f5:3c:3e:1e:8b:63:ca:44:e6:79:
         60:04:bc:5a:de:05:42:fa:70:d2:83:f0:42:7a:c1:86:ab:57:
         45:f1:6d:e3:79:d9:6b:68:8c:d4:a2:e6:30:ee:29:ca:53:15:
         47:7d:42:2b:9f:fb:ab:6b:a0:4d:04:e5:4a:73:67:75:a5:40:
         fd:98:be:ee:b2:25:1f:d7:ee:07:0d:85:88:2d:cb:e2:20:f2:
         5d:d5:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----