This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
File:                     CY97o0vGVnvTYW1XT3KF3XVW2_0.cer (raw, json)
Hash identifier:          7rV/oLU6QtIvhc+Mn6/MjAUp1636bOkH5Misz5Yp404=
Subject key identifier:   09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E384967CECDFC70527A18983E5940CE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:19:36 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 80.93.192.0/20
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:49:67:ce:cd:fc:70:52:7a:18:98:3e:59:40:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:d8:f8:1d:c5:56:cd:ed:39:90:ca:d1:eb:
                    64:cd:e2:78:0e:59:b4:28:60:87:a7:e9:8c:eb:04:
                    7d:b0:8a:35:13:cc:ae:77:9c:fb:b5:5a:2d:29:52:
                    e9:18:02:d7:69:73:d9:87:f9:ba:72:11:5f:7b:34:
                    dc:65:6f:91:ed:30:ad:97:fb:bd:be:64:24:7f:89:
                    ff:08:21:a3:66:35:d8:51:26:69:f7:bf:33:a7:de:
                    bc:ab:f9:57:14:6b:59:90:b1:0f:14:56:c6:c7:95:
                    2b:5a:96:57:c2:b8:81:e7:96:ba:04:fc:61:4b:51:
                    6b:ef:69:ba:18:45:84:67:99:4f:f2:d4:a1:96:69:
                    42:2e:eb:f2:4e:f7:00:07:95:d0:14:55:6b:cf:83:
                    36:07:32:8e:28:f3:fa:1e:20:00:06:0e:8f:2a:ea:
                    2f:fb:9f:ab:aa:77:fd:de:af:6c:bf:da:58:9b:2a:
                    cb:f7:3a:e4:c7:76:17:a5:e8:55:e0:2f:f2:80:09:
                    09:83:ab:ed:cd:3d:9a:e2:70:4c:c1:49:94:cc:0c:
                    b5:a2:18:d4:f4:c1:83:09:fa:e8:d7:84:be:91:d1:
                    7f:5f:9b:0a:8b:5c:48:d8:94:26:3b:06:08:f9:c4:
                    be:ea:9e:6b:38:2c:b2:22:b7:92:34:09:2e:42:9e:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:56:3e:6e:90:7f:4f:95:3a:53:76:b3:ac:bf:eb:30:b6:d2:
         68:f7:14:d3:43:05:1f:f4:9e:12:0f:c9:8c:78:5d:c4:32:98:
         32:8e:cc:fa:71:78:c0:da:18:59:9e:e1:fc:98:90:ed:4b:7d:
         86:cd:89:16:2c:49:6d:49:42:4d:0e:00:85:dc:ae:33:80:90:
         55:c5:84:08:af:fd:76:69:48:da:97:0f:e9:f5:a0:1f:3e:f5:
         3d:30:36:72:cd:84:fb:3b:59:c4:04:f2:77:08:2f:07:83:4f:
         08:fa:b0:bc:da:46:98:06:74:c9:cc:94:89:bf:32:30:f9:1c:
         08:36:64:f3:c2:b6:1b:d8:c7:67:ac:0a:3c:4e:8e:53:0a:29:
         02:9a:a4:47:4c:5a:8b:c4:8f:31:cb:0e:4c:39:d2:67:b5:30:
         9d:55:e4:70:f6:cc:51:63:4a:b1:6c:b2:28:43:1a:e5:32:89:
         bf:fc:9d:1f:85:93:d4:69:d2:0d:4c:4d:48:00:6c:3e:d1:f5:
         61:e1:74:0b:e2:44:6f:55:99:bd:ae:00:85:ad:dd:e0:4d:a1:
         b7:e1:69:96:3b:ed:24:eb:93:0f:5f:e4:ea:16:b0:83:4c:07:
         de:6c:4f:db:9d:a9:66:40:02:0f:ff:68:ab:30:5d:80:3a:7c:
         06:92:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----