This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E8QF935QykXWfYTqFxflyYtDbt4.cer
File:                     E8QF935QykXWfYTqFxflyYtDbt4.cer (raw, json)
Hash identifier:          n+69OE2UrHswczZR3l5skQz3ZDKAEhPNUHVh/PFNNTo=
Subject key identifier:   13:C4:05:F7:7E:50:CA:45:D6:7D:84:EA:17:17:E5:C9:8B:43:6E:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77591106806E81A0F3869071E82A656A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:18:04 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 212227
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:11:06:80:6e:81:a0:f3:86:90:71:e8:2a:65:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13c405f77e50ca45d67d84ea1717e5c98b436ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:1f:28:6f:47:53:25:88:d9:c3:e6:3b:8c:
                    b2:ff:4a:56:de:93:f2:40:30:7e:b8:c0:84:f9:59:
                    41:39:cd:21:2b:37:1e:ad:9b:a0:91:fa:b5:5e:33:
                    0e:02:81:cc:f2:c7:3b:8d:55:ee:80:81:06:67:72:
                    18:35:cc:6a:99:f1:48:95:cc:ce:92:96:53:a2:92:
                    fa:57:7c:4d:c1:eb:1b:07:fe:b2:31:9a:1d:73:4e:
                    ee:ae:e5:d6:85:77:02:fe:d8:98:34:9c:72:5d:93:
                    73:fb:b1:02:fb:44:73:fc:42:57:d1:22:d4:7e:b9:
                    0c:45:b5:5c:4a:99:95:09:3f:e7:67:a7:3f:08:fe:
                    bd:7d:a2:c7:88:4d:57:38:a7:18:93:39:50:aa:19:
                    ed:93:0d:82:c8:24:d7:01:75:3f:34:bb:8b:f0:15:
                    4d:17:55:fb:cb:64:aa:a4:f0:79:a0:53:8c:5c:6b:
                    32:b6:b7:bc:77:78:51:c6:c9:80:d2:53:ae:8f:a4:
                    63:04:11:80:a1:5f:b7:b5:27:5e:b1:0d:5e:8b:d7:
                    4c:29:be:15:cd:20:80:18:e5:39:6c:2e:84:64:60:
                    11:53:73:b9:8e:c7:75:80:b2:35:f0:6a:ff:99:4c:
                    2e:d5:a5:d6:16:a7:ae:9d:ee:58:3f:8c:91:cd:86:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C4:05:F7:7E:50:CA:45:D6:7D:84:EA:17:17:E5:C9:8B:43:6E:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212227

    Signature Algorithm: sha256WithRSAEncryption
         54:7f:98:8d:56:e1:57:2c:8b:c0:fd:b6:5c:24:5b:9d:59:a6:
         45:5b:0a:f4:a5:54:b7:c9:18:42:80:b8:67:ff:0e:b0:66:57:
         11:89:12:dc:4e:d5:63:4e:52:c0:94:e0:38:57:ab:49:b9:14:
         1b:16:4b:7c:50:ab:df:fd:c5:75:25:2f:65:77:1d:07:9a:8b:
         d1:72:05:5f:bc:6b:d9:13:1b:b2:36:38:ee:10:da:57:f5:53:
         8e:43:ef:a1:4b:2d:c9:09:b1:69:7e:18:94:18:21:9e:b2:5b:
         88:06:76:02:94:d8:6f:de:96:ae:1d:63:b5:64:4a:2c:39:2a:
         ed:6b:43:e9:a1:61:12:36:6d:ed:5b:da:e3:4d:85:52:91:3f:
         7c:0b:42:35:d9:30:a4:32:4f:c4:ab:5f:7b:f6:11:de:d5:72:
         21:ae:0f:8a:68:80:99:0d:39:6e:63:6d:09:78:32:51:40:72:
         96:3e:1e:d5:ed:b6:19:88:43:f5:f0:ad:c1:c2:2a:39:6e:e4:
         6e:1c:f4:db:97:5e:b0:39:eb:f0:e3:f7:c2:60:d2:62:89:c0:
         f6:6d:71:8c:4c:81:de:5e:9d:0f:5c:c0:1b:cb:af:71:94:18:
         bc:fd:00:90:1a:48:65:ee:01:f4:7a:af:05:83:a9:e3:95:3b:
         86:54:1b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----