This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
File:                     EVNfj6S19RUz1yTq-Q26mXFfxvw.cer (raw, json)
Hash identifier:          F4WAqo0nYs/M4D3/0Wf8pRLK9KrkXvJ+d3KZQD+0q7Q=
Subject key identifier:   11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A32D9B688F3BF50EDE5D6862B80038
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:18:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 204195
                          IP: 185.115.236.0/22
                          IP: 2a06:2780::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:2d:9b:68:8f:3b:f5:0e:de:5d:68:62:b8:00:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:c6:96:68:04:2f:f6:ae:32:19:1b:fa:31:
                    df:84:6d:ab:e3:17:2b:0b:5c:fb:c5:33:f2:a7:9c:
                    44:21:b0:3f:5d:a1:b3:47:38:97:bf:e0:39:73:4d:
                    b9:8b:a1:3a:9c:e0:33:d4:54:e9:92:a3:ad:e1:46:
                    e7:7d:e7:df:fc:7f:ef:b7:71:9a:e9:0b:1c:f1:eb:
                    d3:ea:52:42:56:93:ed:81:0d:49:e1:c4:99:39:05:
                    d5:27:d1:f2:2d:b8:a1:fe:fc:4b:e5:9b:e4:8d:26:
                    94:c2:b2:0e:01:d7:9f:93:32:87:16:df:34:d3:33:
                    c3:d2:ea:27:e1:95:ec:c2:73:1d:2a:84:a6:3f:d8:
                    e6:79:97:3f:b6:d3:2f:f0:c6:13:38:78:d8:d3:a8:
                    4f:67:18:42:e9:f2:14:30:0c:27:7c:b2:5e:d4:4c:
                    97:f0:3b:31:96:f8:b8:79:1d:e3:6a:d6:9d:28:48:
                    1a:86:23:b9:53:3b:ba:1b:a6:0c:b4:4b:27:e4:d9:
                    5b:45:06:46:68:a2:99:d3:a8:6d:12:e6:8c:e5:da:
                    6d:78:79:ab:c5:e7:73:3b:91:05:d4:37:99:8d:37:
                    79:bf:1d:48:83:d4:2b:1c:78:22:d8:ce:ed:c1:3e:
                    bf:67:6b:58:08:50:ea:f1:b5:e8:14:95:21:01:c9:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.236.0/22
                IPv6:
                  2a06:2780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204195

    Signature Algorithm: sha256WithRSAEncryption
         34:38:96:51:56:a6:5d:eb:42:81:32:a5:fc:cc:12:e3:c0:22:
         b2:42:7f:1f:02:d9:95:5d:ef:e1:22:a6:9d:a1:a6:67:5f:9c:
         7c:c7:5f:9a:fe:11:4e:7e:3c:d8:9c:84:a2:c0:b6:1b:e0:04:
         70:07:43:6d:4b:0e:43:11:77:ee:0f:21:96:dd:14:44:1b:5f:
         82:86:88:4a:86:18:d3:f9:04:29:2d:67:a9:0e:c3:eb:ab:8f:
         b5:79:4f:26:93:fa:53:97:c0:fb:49:be:4e:31:a1:de:d0:d4:
         8a:43:df:e9:b5:6c:c7:a8:1e:93:8a:7f:0b:aa:e2:1d:be:7d:
         5c:68:3e:c1:18:97:55:3f:17:ef:08:30:43:34:d6:bb:ef:82:
         8e:b2:f1:2f:36:2c:cc:1e:50:5e:07:7e:4b:d2:8b:53:6d:c0:
         83:84:11:c0:4a:76:a5:31:94:ec:78:2e:18:c1:2b:96:7f:94:
         49:2a:ca:37:35:34:21:a9:98:06:bb:e1:de:76:8f:ab:49:60:
         d2:a0:24:e4:f1:2c:21:a9:36:38:0b:16:99:7d:62:13:04:de:
         e4:38:c3:0e:a7:3e:c4:20:b5:93:4f:22:68:c0:39:ab:0a:0f:
         db:a8:8b:1a:c2:9c:f3:81:0d:eb:c7:f2:ad:8d:8f:ef:2f:c8:
         38:fd:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:10:17 2026 by rpki-client