This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer
File:                     GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer (raw, json)
Hash identifier:          n2K9w75YewLfotUOi3lKc2TQQ+yHmE8p/Pv1J4TH3L4=
Subject key identifier:   1A:34:16:89:45:1E:53:5B:F5:5C:CB:7D:35:1A:57:0C:89:34:58:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BB76CAC9A613426A0A875F5020A88C721
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 13 Jan 2026 12:55:11 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 202396
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b7:6c:ac:9a:61:34:26:a0:a8:75:f5:02:0a:88:c7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 13 12:55:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a341689451e535bf55ccb7d351a570c893458d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:38:d0:31:a7:62:32:dd:f1:3a:d9:e1:fb:
                    1f:91:17:d6:08:56:1b:65:5d:37:62:43:4e:3f:ff:
                    f9:67:c4:b8:f6:b6:1c:6f:aa:46:2c:b0:bd:4d:fe:
                    95:d3:f9:be:2d:3b:a9:1b:c5:b5:a7:e9:88:71:8b:
                    72:54:1f:04:9e:84:c3:f0:78:da:a6:8e:c6:ae:44:
                    54:61:c0:45:39:ee:88:c0:95:77:f9:14:5e:54:18:
                    f4:04:c2:51:80:b3:fa:0a:33:31:af:93:2d:fa:cc:
                    95:49:56:83:18:7d:b1:ce:57:4e:8a:36:70:67:c6:
                    8e:19:94:7a:27:f8:6f:07:7b:25:27:16:87:19:b1:
                    6b:a6:80:fe:a6:45:d6:45:67:48:df:7e:55:be:27:
                    37:ba:e4:e5:ac:c4:e7:8e:12:94:39:ef:28:d9:e6:
                    09:69:41:75:38:d8:08:a7:44:ab:04:d6:62:ec:fb:
                    82:cc:cc:46:08:2b:1f:7e:10:b9:3a:b7:05:80:82:
                    4d:0c:63:71:da:21:36:b6:a5:bc:e2:ba:65:85:c0:
                    58:8b:cc:dd:56:ea:4f:74:17:92:ee:a1:39:70:c4:
                    0d:c4:6a:d3:e2:bc:de:ee:ee:50:9e:95:d0:d5:34:
                    a5:db:cd:31:57:11:0f:d2:de:23:c1:17:72:00:45:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:34:16:89:45:1E:53:5B:F5:5C:CB:7D:35:1A:57:0C:89:34:58:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202396

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:b1:e0:61:2a:6e:4b:0c:b7:42:aa:a7:3e:af:ae:40:51:
         9e:3c:c4:89:7a:ee:aa:68:ef:ba:e2:67:9a:fe:bb:2b:a3:1c:
         db:1b:cd:bd:44:e8:4a:23:e5:8f:17:de:b8:26:0c:a1:74:5b:
         64:56:c6:63:46:ff:51:61:37:90:92:ed:6a:b3:00:ef:4b:b2:
         6e:42:11:b9:4d:5d:f9:d0:ed:6d:2e:21:27:b3:59:11:bf:bc:
         9e:a6:8d:d8:87:75:cc:d4:a0:d3:2e:fd:23:6b:8c:17:3e:28:
         49:94:85:f3:4e:3f:ed:0d:4b:d1:93:1e:5c:36:20:44:13:40:
         aa:c1:36:da:16:6c:34:37:8e:da:7a:34:cd:e2:81:12:81:d5:
         d9:e4:5a:90:69:2b:9b:42:c6:fa:ce:8e:e9:25:de:82:e4:bd:
         9c:a2:e1:e2:f5:78:dc:49:ad:4e:73:0a:9a:38:0a:e3:cd:75:
         9c:8b:59:3e:01:39:f2:8c:bd:50:d7:d2:6d:d4:58:e7:2d:2f:
         7c:7b:60:27:5a:e0:40:26:c2:96:dd:e9:6f:43:d7:59:b6:20:
         8a:01:60:a8:f5:0f:69:f3:21:c0:50:b7:5f:d5:16:7d:b9:92:
         fb:b4:42:af:d0:a3:8d:ad:c9:d2:44:8a:90:4a:88:34:cc:b5:
         78:72:02:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:41 2026 by rpki-client