This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
File:                     CPRr-iBG-8mOYn9ANIMnESO-ygo.cer (raw, json)
Hash identifier:          2MVg8kkZU7nNPyQgyctDiyXFkkuYhhc999+aRUSLQ6A=
Subject key identifier:   08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CEDA2275B4D9C0D7FDADE6B862001FE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:18:26 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 91.196.107.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:a2:27:5b:4d:9c:0d:7f:da:de:6b:86:20:01:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=08f46bfa2046fbc98e627f403483271123beca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:c1:ec:5b:68:f0:b3:2e:a6:4d:40:0d:4d:
                    0c:34:3a:90:c1:b9:96:90:34:e7:96:29:1a:1c:04:
                    37:9b:f6:2e:31:a9:a8:5f:c6:7e:99:81:66:aa:41:
                    4d:c8:c3:43:4c:a6:b1:5d:0d:3f:48:90:93:d5:7e:
                    38:70:24:1d:d7:97:b6:54:6d:2e:c2:c6:75:64:ba:
                    34:69:d2:b5:cc:38:0c:ad:d8:f7:11:69:f6:7a:fe:
                    c1:ed:a4:7e:05:02:a1:b2:15:94:fd:9d:e8:27:b0:
                    a5:0e:83:bb:55:47:39:26:0b:aa:5d:a2:54:19:8b:
                    fc:8b:c1:fa:03:4c:40:85:00:4a:09:f5:c9:a6:22:
                    32:36:58:1c:da:10:bf:af:a5:83:ed:51:55:e6:f8:
                    97:fe:d4:87:a3:b7:cf:f7:90:4b:c4:2a:c8:78:03:
                    f2:3d:96:d5:f1:75:d2:d4:06:a1:42:96:cc:1b:cb:
                    53:1f:07:08:e8:4c:ba:36:14:eb:10:ce:7a:dc:20:
                    dc:c6:69:65:c7:24:7e:a6:4c:18:ac:ea:b8:54:08:
                    c6:02:d3:b1:78:bb:be:e7:80:26:54:e2:da:5f:70:
                    8a:e7:e2:8c:81:57:4d:1d:ae:17:3e:5e:74:5e:09:
                    25:49:a3:96:59:ea:13:e9:18:9d:19:07:f5:c0:91:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:54:8b:77:18:6e:12:ae:ab:ae:65:d6:80:d5:d5:d3:08:
         d3:fa:88:82:ce:69:b7:fc:82:f8:4c:b1:86:6c:0d:ed:fb:da:
         f9:8d:f8:fe:35:05:0c:61:8a:28:9a:ed:3a:52:98:99:42:c7:
         78:94:82:12:2b:bc:b0:e3:57:99:67:24:4c:b9:e9:5b:b1:44:
         b1:37:23:1a:06:c1:14:1f:3e:3a:25:55:e3:ea:23:e9:af:66:
         be:ed:81:ba:d5:ba:01:0d:28:dd:63:07:7e:ee:03:ad:a9:c7:
         e7:c2:eb:62:20:3f:a5:8d:ef:a1:fc:b6:c6:02:fe:b2:af:80:
         8a:fe:ec:5a:8d:ae:81:f3:cc:18:65:43:3d:29:9f:23:f9:fd:
         76:73:3e:db:6a:36:86:bd:1b:0a:22:c4:30:dd:6a:1b:e7:2c:
         bc:c8:48:47:1b:62:49:0e:88:91:57:7d:32:f1:4f:c4:b5:ae:
         78:c5:76:59:46:43:9c:15:69:4a:7c:0a:d8:b2:87:cf:14:01:
         88:b3:92:f8:88:d1:e6:e8:d0:8f:38:88:89:74:73:26:e8:46:
         a1:4b:e0:27:00:42:1f:17:ec:56:e6:05:53:ee:f6:e7:34:ac:
         3b:de:db:d5:85:e1:3b:d5:c3:01:ad:42:80:95:8b:b5:ad:7a:
         1c:02:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----