This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
File:                     9fqTbNBbJl9g8zNAqMY952gvw18.cer (raw, json)
Hash identifier:          Zm36QWZIyxM5CQeFVjkaD1k/LQwtwM1esvgPUkX2jFU=
Subject key identifier:   F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7AC7DE5274067C86B542D263CAC55734
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 18:17:57 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 215993
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:de:52:74:06:7c:86:b5:42:d2:63:ca:c5:57:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:74:b6:61:cc:d0:9d:d0:38:a2:0c:b6:21:
                    bb:dd:8e:d8:bc:4b:77:09:77:72:7b:78:3f:4e:96:
                    b2:6c:33:27:b5:6a:f1:83:ba:4c:94:0f:89:65:e5:
                    f1:41:74:66:ff:26:fc:56:cd:23:84:47:d9:6d:b0:
                    80:9e:0b:8e:26:9f:53:d0:58:5d:cd:91:e3:47:f3:
                    4d:59:30:f9:dc:90:27:b4:9b:ce:ea:fe:47:f8:64:
                    b7:93:1e:1e:c8:be:03:27:13:20:69:2d:41:dd:c4:
                    21:39:4a:36:40:52:22:2c:27:20:70:15:98:93:f6:
                    e9:dd:9d:27:70:fd:60:b8:7f:5e:64:82:35:ec:01:
                    35:92:c8:b5:73:de:f7:1a:eb:f7:10:22:ec:88:4c:
                    f4:b7:b5:fb:c6:ec:95:05:73:c8:dd:fe:d5:f0:ba:
                    50:36:19:e0:30:b8:c9:d5:31:6d:a8:b2:c9:45:6b:
                    14:8a:4a:5f:29:d8:8e:0c:e2:0a:7d:f6:d9:b8:1d:
                    99:bb:95:0b:68:92:31:b2:a6:01:ef:16:e9:cc:9f:
                    55:39:ca:f4:ff:2a:21:65:d5:2f:ea:d1:04:0e:14:
                    37:21:f7:88:f4:3b:70:07:93:65:2c:ae:0d:c1:82:
                    d0:15:cd:24:e9:40:db:23:c4:e7:65:71:c5:cc:15:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215993

    Signature Algorithm: sha256WithRSAEncryption
         a9:d1:93:ef:32:61:0e:72:bf:ce:19:85:b2:61:0e:b6:1a:d0:
         df:90:91:1d:d6:51:3e:12:aa:7b:22:8f:fc:43:61:cd:22:f9:
         ae:ac:92:70:50:d5:11:9d:69:1a:a0:e7:2d:f3:07:13:82:66:
         e9:35:57:bd:aa:12:59:80:78:33:f6:68:9d:bd:bd:fd:2d:22:
         6b:41:96:ae:c0:f3:71:86:5e:44:a3:97:7b:24:25:b0:8e:37:
         18:47:6f:fd:f5:82:a6:2b:6d:3d:54:96:58:a0:a9:6a:35:0a:
         62:8b:a3:a2:4f:62:e7:a9:2c:d7:0f:f4:3d:2d:17:e3:2f:76:
         c6:37:16:f1:94:df:1b:4d:c7:e2:3b:34:5c:72:bf:d1:22:cd:
         81:76:f7:cf:c1:a7:66:bc:96:fc:59:d4:ce:ee:fc:61:8c:35:
         5b:55:d1:6a:b1:65:86:e5:85:47:5e:de:00:9c:ee:53:16:b3:
         14:71:c1:bc:d6:21:10:ee:ee:2a:bd:9c:6e:10:b5:40:c8:38:
         f1:2e:1e:84:38:b0:df:cc:95:18:f4:0a:02:8e:2c:df:53:2a:
         f5:17:91:48:cc:45:31:b7:f7:5b:09:72:80:bf:ea:1d:94:b3:
         12:47:69:21:92:4a:b5:75:53:92:c9:ce:5e:9a:c1:fc:e1:7a:
         e8:00:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----