This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
File:                     HRAqymzxNRE4UpTnfb4nN2jAoEs.cer (raw, json)
Hash identifier:          qdLGNuyBtKlOz6xz3WFY6ShED2cZvu52ZML1LXGtMmY=
Subject key identifier:   1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E391F8C788E5C13964875CB6C6298C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:20:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 202408
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:1f:8c:78:8e:5c:13:96:48:75:cb:6c:62:98:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:20:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d102aca6cf13511385294e77dbe273768c0a04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:c9:4f:d4:73:5f:d7:dc:d6:e8:e4:30:3b:
                    a3:1f:19:d0:a0:c5:38:46:8f:3e:2a:a7:36:29:83:
                    18:f2:43:8f:08:1a:64:db:fb:63:5d:94:79:b1:3c:
                    11:40:fb:3f:53:bf:a1:d9:66:2f:0e:dc:72:62:ef:
                    7e:1c:e4:92:cc:f0:23:a5:7a:3f:5e:81:33:31:f4:
                    76:cb:bc:14:a5:7a:90:6c:0e:15:9e:25:a8:f5:ad:
                    df:41:4d:28:4f:07:4a:d0:49:11:60:bc:8b:68:1d:
                    b7:a9:08:f4:49:3d:32:4d:34:92:fd:71:9f:38:3a:
                    1e:01:15:58:71:e7:31:fc:02:83:c9:9d:e6:3c:b1:
                    4c:f3:3b:ee:1c:84:f2:32:ae:9e:0d:52:24:a9:fa:
                    e0:01:f7:13:70:e4:dc:1a:eb:d1:2f:11:10:93:35:
                    1b:1e:71:9b:86:e2:16:b6:29:4e:34:9b:a6:87:0e:
                    8e:c3:ae:60:13:33:32:ab:11:2d:d0:1f:7c:29:44:
                    8b:3e:3f:8a:6f:69:37:a0:0f:19:d5:81:84:05:fc:
                    5b:41:97:9c:ae:92:d0:a9:57:36:ae:ba:31:4c:b2:
                    3b:8f:54:8a:d8:5b:ea:5c:e1:a0:bd:07:5e:a3:32:
                    fb:7a:57:3d:69:95:c5:57:60:b2:70:4b:81:35:eb:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202408

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:03:32:16:76:31:db:1a:6d:5e:0d:3c:31:ab:26:c4:f1:
         c5:3e:15:e4:10:d2:44:64:49:c3:c4:48:6c:ca:59:1e:bd:26:
         7f:6a:f4:37:1c:8b:a9:08:c6:fd:05:03:c7:4b:f3:45:30:e4:
         21:b5:0a:b3:f9:fe:66:74:96:32:87:04:e6:6e:c5:ff:b1:6a:
         2e:c4:da:2a:1c:ef:af:e1:96:ae:3f:f4:29:f0:c3:9c:4d:61:
         d9:b4:28:90:04:f3:1e:98:7a:a8:dd:9d:b6:4b:15:19:d9:6f:
         33:19:b9:9a:ca:33:29:4f:c1:14:b5:5f:cc:00:41:c0:66:83:
         dc:8f:b8:d5:36:81:75:7b:31:d1:3c:2f:06:39:73:d8:04:79:
         12:e7:8a:e2:92:d6:c8:f1:52:9c:e0:29:0b:b6:a0:a0:f9:d7:
         6d:04:f9:31:ca:77:48:53:b5:20:e5:bf:5b:8c:e2:6e:67:21:
         d4:46:7a:b1:f7:02:ae:f5:bd:b4:65:af:df:81:25:18:9d:14:
         03:86:78:1b:6f:b3:5f:08:74:35:01:11:0a:4c:76:de:5b:8b:
         df:84:5a:cf:37:7b:49:72:52:2c:b6:86:0c:5b:73:f4:10:ad:
         13:81:65:04:fb:45:3a:0e:f0:f6:84:99:c5:62:7a:27:34:da:
         7f:45:02:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----