This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
File:                     I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer (raw, json)
Hash identifier:          p6lw6kOwHC7r+EsqtGbdVV/bW9KQ+DucOvBoL8y0cSI=
Subject key identifier:   23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7EA745D4F1B29F293FA108D35B45F754
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 12:20:50 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.143.115.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:45:d4:f1:b2:9f:29:3f:a1:08:d3:5b:45:f7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:20:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:84:3c:98:8d:9d:d1:73:a5:3d:13:e4:39:
                    59:7b:dd:8f:10:d9:7c:be:63:2f:d2:1d:3e:bb:d0:
                    d8:7c:2d:53:c5:38:95:b2:4b:0f:7d:dd:41:88:80:
                    4e:4e:88:86:c9:47:a9:66:3b:ef:1e:ef:81:60:78:
                    68:08:1e:53:35:0a:dc:15:e4:c5:f9:80:6f:ae:16:
                    8c:9b:60:4e:16:0e:1b:d1:f3:46:e9:ad:20:63:a9:
                    a7:5b:f2:17:70:89:97:dd:8e:c1:97:69:7e:f2:8d:
                    ac:34:56:16:c9:db:89:3e:92:6f:ab:1a:85:a8:7c:
                    aa:14:bc:e1:41:df:8c:a3:01:cc:6c:15:76:86:24:
                    ad:79:aa:be:ca:b6:dc:69:df:2e:63:3e:c7:fb:e5:
                    16:ef:6d:d3:d0:ec:d3:2c:a3:f4:bd:de:39:bf:3f:
                    17:ef:7a:6f:06:49:05:75:f4:0f:3a:e4:26:50:19:
                    01:d1:6c:25:bb:5d:ef:14:4a:17:6c:19:87:7a:e9:
                    62:7b:f7:9e:13:14:05:ce:82:78:f6:20:49:04:0d:
                    b8:e8:b6:78:41:13:9e:da:ef:a8:04:9e:ee:72:02:
                    79:4d:d6:b7:82:27:0c:f5:87:3d:69:3c:01:ff:aa:
                    df:66:23:d8:c7:43:c3:7c:91:e9:d3:9e:0b:8e:82:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.143.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:bc:63:4e:5a:f4:8c:30:92:95:a5:fa:f1:83:85:4b:20:fc:
         3b:88:3b:14:2b:5b:ff:06:d8:45:19:cd:68:63:7a:f7:50:4b:
         3d:92:78:20:61:ae:6d:62:1d:94:d6:b2:00:cd:54:16:52:ff:
         11:ea:d2:cc:08:99:d2:e4:14:f2:07:8e:18:d3:fb:0e:bf:f8:
         f8:ab:be:91:17:2e:c8:07:f9:12:47:46:aa:ce:9f:a1:b1:8d:
         8e:57:be:9f:cd:9e:4d:2e:1f:2e:a3:6d:b8:18:9b:95:9a:3a:
         ed:5d:9a:e6:3a:5b:83:37:7a:4e:c1:1f:27:20:5d:fa:06:39:
         5a:d7:58:e7:ba:0e:6a:24:83:39:a3:0c:e6:71:70:01:26:27:
         ce:63:ea:67:18:65:c2:fe:c5:d3:a7:9a:52:42:9d:55:32:56:
         8c:fd:31:9d:75:2c:48:18:8c:b4:38:48:3b:55:98:8f:be:26:
         03:12:50:6f:d7:a4:d9:d1:60:e9:08:a8:53:8d:c4:30:91:b0:
         af:5f:29:2e:64:31:13:3b:35:7d:c3:5e:0b:9a:41:a4:b0:e4:
         11:c7:d3:5e:80:ac:51:44:ca:6f:c6:39:dd:e2:e8:05:0b:c7:
         ce:5b:9b:17:0e:58:0d:25:78:80:b8:be:e6:ff:a6:42:43:14:
         7c:04:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----