This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
File:                     Ay1SsyOaHOPN00MxNIzngN3xZMA.cer (raw, json)
Hash identifier:          +sPVIEjM5a/eYh6rJpYHmnynHJ+V8nRIOuxB8EYBRK0=
Subject key identifier:   03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79100636B131F1E994E6D63C92394579
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 10:17:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 91.221.100.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:06:36:b1:31:f1:e9:94:e6:d6:3c:92:39:45:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:e4:a3:3e:fe:a1:0c:ce:13:9d:6e:02:d4:
                    1d:a2:94:d1:81:54:0c:33:55:ee:4c:35:2f:32:fe:
                    f6:ab:dc:bb:45:d2:0b:c5:c0:f7:78:cf:e2:9e:e3:
                    f2:b2:25:dc:73:11:e8:5a:7c:ee:0c:f3:2c:b7:c0:
                    c0:0e:d8:79:d9:43:c4:b8:4f:a8:4d:69:2c:f5:8d:
                    db:f6:1e:ec:48:9b:fd:71:8b:30:e5:08:e8:57:a7:
                    54:d2:9b:8b:0c:f2:a7:9b:09:b4:60:33:3a:c8:5f:
                    6d:ac:07:7b:54:d0:75:a9:96:62:70:e1:2c:97:b8:
                    a0:0d:df:61:fd:bf:b1:32:6d:0b:fc:e3:d5:03:56:
                    9a:c1:fb:1a:c1:bf:f0:55:4c:c7:d4:03:da:44:1a:
                    c5:34:76:23:a7:fd:29:8b:c9:9a:0b:0c:8f:f4:ab:
                    c4:5c:dc:b7:92:16:e7:cc:b7:92:4d:91:ef:64:d2:
                    38:58:4c:9d:3b:1a:41:8a:6f:dc:42:1a:79:d1:12:
                    63:df:e3:d2:b2:28:e4:3e:8d:57:ec:97:6d:a5:6c:
                    ac:e8:a4:c5:8e:cb:c3:85:f2:6c:44:f3:34:f0:ab:
                    f1:be:42:70:63:af:b0:1c:30:62:bb:eb:6d:72:12:
                    43:ec:d5:47:c2:92:d9:6c:21:c4:ab:e8:ca:95:88:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.221.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:c4:e8:ed:37:18:8e:e7:9b:da:4f:ac:68:7c:ca:8f:29:
         36:d2:25:26:31:de:8c:da:f1:70:a3:23:c9:38:9f:3e:e3:22:
         e8:cb:6c:14:6d:d0:f5:c5:03:c8:8a:d6:2c:f9:f6:ef:d9:46:
         58:c9:dd:03:7d:42:0a:f9:c7:37:9f:e4:f0:1b:55:95:0b:c5:
         df:4b:61:7f:8c:64:d6:74:2b:bb:bb:01:7c:90:03:9f:49:5c:
         e3:5b:22:74:fa:6c:e4:6d:df:c5:e3:03:68:67:78:bf:fc:cb:
         6e:0f:66:79:e4:9f:68:56:3a:d1:de:6a:6e:11:63:23:1f:43:
         65:02:72:ed:83:f8:94:da:5b:df:3a:c6:8e:a2:29:0c:ce:98:
         56:01:47:69:ee:b5:84:cd:bb:71:9b:d6:44:8f:45:aa:66:16:
         6a:ed:2f:ef:41:56:3f:2f:9c:7f:a0:57:81:ea:c3:e8:1b:c0:
         be:36:33:60:e1:5b:ca:10:6f:89:eb:8b:a9:77:48:b4:eb:a4:
         a9:cd:4a:cd:fa:ef:bc:51:e5:c2:49:13:e5:4a:ef:0c:9b:4e:
         78:4c:da:bb:75:5d:bb:ac:30:9f:9d:a1:2b:65:ab:f5:11:37:
         8e:26:6a:57:0d:d2:0d:70:44:56:5f:93:5a:92:27:5b:58:4a:
         0a:9e:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----