This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
File:                     JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer (raw, json)
Hash identifier:          OmuVK0OQKpjGXLozKtrlyXx5CraUzFODJ8nxKWej2Pk=
Subject key identifier:   26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019C1F372B7E840F7661A4C5D5D7EBBC8DB3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Feb 2026 16:37:15 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 5.182.61.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:37:2b:7e:84:0f:76:61:a4:c5:d5:d7:eb:bc:8d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  2 16:37:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2601bb6918bdcc91a41428901eb98ced970f3eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:2d:1e:6f:c7:56:d6:c9:65:64:3f:50:cb:
                    56:72:c4:52:ca:6f:50:7e:39:cb:cd:0c:68:18:40:
                    8e:57:6d:38:1d:2a:a6:56:c4:7b:5d:98:b3:aa:80:
                    f2:47:1e:6c:30:5f:e2:e3:64:fd:34:1c:cb:7d:36:
                    a9:96:83:6f:52:38:ca:6c:bb:d2:18:9b:8e:f6:3b:
                    51:57:c9:cf:f0:fd:c7:60:be:e8:a1:57:bb:b1:f0:
                    75:ea:68:ba:0e:32:6b:b4:f8:64:b6:68:72:49:e2:
                    5e:20:6a:d6:46:bf:00:e1:37:02:14:69:41:5c:1f:
                    43:f9:51:b3:b7:0d:05:5e:40:2b:c4:cc:26:e1:08:
                    94:58:78:67:e0:8c:42:30:99:0e:90:4f:bf:1c:1b:
                    20:33:43:2d:01:2c:f5:22:9e:33:ea:4f:c0:9b:b8:
                    0c:e3:a7:d2:d1:0d:23:57:15:bc:37:a7:5c:ea:70:
                    a0:d4:94:2e:7e:f4:2f:c3:53:79:3a:19:65:41:12:
                    d5:53:84:f8:42:34:3c:4c:f2:ba:c7:94:d4:c1:51:
                    c2:9c:3f:2a:91:72:c6:e1:a2:72:49:e9:45:9b:cc:
                    ab:f5:37:a8:fe:33:8b:eb:9d:25:19:1e:d6:b2:1f:
                    03:2c:90:82:44:6a:66:79:85:20:32:12:f8:04:1f:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:e1:22:18:0f:6a:32:b2:64:80:64:83:c9:39:d7:3b:d3:
         a4:ae:d4:1c:9e:d9:d4:03:f9:63:55:cc:7b:fa:79:e0:d5:34:
         87:2b:2d:f2:a9:5e:b8:dc:ad:15:45:37:0c:63:67:d0:ff:9b:
         19:68:3b:ef:e7:e3:cc:63:44:55:b6:a1:23:11:c0:d7:c1:fb:
         2c:10:f3:b8:4f:fb:2e:0b:4f:5c:ee:4d:df:49:64:59:ee:10:
         22:cf:1d:7f:a6:81:df:53:58:15:c3:49:62:02:01:3f:00:f2:
         e5:9e:5e:f3:ec:3a:ed:6b:81:b9:e8:a3:d6:55:15:39:9d:ad:
         4c:48:4c:cd:af:14:6a:15:e6:16:fc:21:50:9a:24:10:74:3a:
         1f:81:5a:24:51:82:7f:2c:a1:20:85:ce:2c:3c:02:10:c1:a8:
         17:ad:07:32:98:22:80:8d:a0:e7:66:ba:56:6f:96:03:ca:78:
         cb:44:60:48:b5:43:e0:47:79:ae:cf:5f:8c:3c:66:77:f0:dd:
         3c:20:3b:5f:86:33:b3:f0:96:fa:44:c5:38:2b:b1:e6:1e:a8:
         3f:39:24:6f:17:d1:77:25:38:19:49:d8:20:9b:11:b7:45:83:
         61:3a:42:2d:6a:8a:86:32:c9:27:3a:de:e3:04:58:db:1d:fc:
         bc:28:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:29 2026 by rpki-client