This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
File:                     GbZo5W_iW9bcU4AO4XdQYezAkgY.cer (raw, json)
Hash identifier:          np4mCPRuDhRQ4QBbvbJMYImNQyWnQKFGjPSDm89N2mc=
Subject key identifier:   19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E379E0FBDA9A9217E264100F676DCA3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:18:52 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 50727
                          IP: 193.107.228.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:9e:0f:bd:a9:a9:21:7e:26:41:00:f6:76:dc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19b668e56fe25bd6dc53800ee1775061ecc09206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:fe:0b:5c:a9:b0:f7:5f:7f:9f:d6:40:4a:
                    c6:12:49:61:81:6e:99:e8:10:7a:79:c4:b0:81:39:
                    aa:35:20:77:2d:54:88:67:c2:cf:a0:fb:e5:ff:71:
                    d3:8c:4b:02:30:b4:8f:d2:a8:67:dd:87:7d:4e:01:
                    53:a7:69:8a:0c:c9:95:37:14:44:bf:bd:83:dc:b2:
                    6c:66:92:0e:63:f3:0c:bb:aa:d1:f5:e8:23:0c:c9:
                    76:22:96:2f:51:b6:76:b0:8c:a6:30:eb:42:12:c3:
                    2c:c3:bd:bc:63:89:7d:03:74:1f:4b:72:0d:6c:8f:
                    b4:a7:82:7a:4a:57:a3:f0:13:21:1a:c3:66:9a:c9:
                    fa:45:36:87:a9:9d:c7:27:ad:90:be:ed:e2:3d:46:
                    2a:37:be:21:6c:d6:0e:28:d5:03:c2:32:d5:25:2e:
                    cf:01:f7:65:12:6e:35:12:c1:ff:6a:ec:a6:8c:ee:
                    a3:43:7c:24:d4:c2:02:4d:34:e8:63:cc:46:99:c5:
                    95:44:04:e6:45:48:53:9f:10:c7:9a:e2:57:d6:f5:
                    5b:f5:ce:a7:10:fb:46:0b:65:a4:a0:ea:bf:c4:99:
                    6a:48:75:02:47:aa:c3:78:70:e0:5e:64:ec:ac:59:
                    02:09:9c:73:f8:91:85:52:a3:fd:a0:f9:d7:7f:5f:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.228.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50727

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:63:1a:e9:7b:67:dc:06:a1:53:25:3f:25:2e:ae:13:1e:
         ad:e7:11:b2:d6:9d:db:ff:89:71:e9:53:d0:51:af:cf:9d:a3:
         68:b5:7d:bf:c4:20:b6:db:b0:a8:e4:55:a9:6f:94:36:14:39:
         90:5e:08:44:1c:58:90:e0:0c:af:bf:d5:6a:8e:5e:f7:b8:66:
         f0:8a:19:87:50:d7:34:36:5d:16:43:04:6c:c5:20:54:38:b1:
         0f:28:9b:71:77:26:df:7e:2d:15:ef:b9:b5:fc:e4:b9:a6:fc:
         f8:b1:11:d4:23:f5:00:17:69:5b:80:ea:8d:11:15:61:28:73:
         68:d7:72:bf:64:c7:84:47:48:5b:78:f8:d7:26:e7:c5:34:3b:
         23:e9:ce:9e:67:d3:0e:3b:a8:59:66:10:b9:f9:ca:9b:90:1a:
         36:9b:86:1d:92:b3:ca:b4:b4:92:86:21:bf:d4:0c:34:dd:e2:
         06:80:c3:7d:09:a3:e4:40:6e:9d:f8:c9:8d:cf:5d:35:5d:4f:
         fd:21:18:26:5b:95:2c:db:e7:1d:91:d0:09:64:9e:a6:d5:0c:
         bc:2c:24:c1:2d:ca:50:e2:89:43:2e:e3:1a:7c:bd:e2:4d:6c:
         c2:45:eb:5e:14:de:dd:fc:2b:26:2f:89:39:20:5c:0f:f2:51:
         73:26:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:10:35 2026 by rpki-client