This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
File:                     L8plksD-NPq-_MQ3GSh7hE1HygM.cer (raw, json)
Hash identifier:          PupddtwJ5yVF65wC1cpkpKe/59uBdL7UBB5PQW7aG+g=
Subject key identifier:   2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B797F05910F8379459BE4A10A8B3AD267
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 12:18:46 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 60415
                          IP: 185.31.92.0/22
                          IP: 2a00:b9e0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:05:91:0f:83:79:45:9b:e4:a1:0a:8b:3a:d2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:ce:64:17:fd:a6:07:16:6d:73:88:e4:a9:
                    3d:0c:25:1a:6a:1f:29:d0:a5:95:29:f0:13:53:90:
                    09:5a:57:21:df:4e:0b:d5:e2:df:8e:92:9c:31:4b:
                    65:f0:2a:14:e9:df:13:c3:54:71:8c:5d:18:b2:59:
                    8f:04:89:a4:6d:4a:e9:c0:6f:57:70:6d:62:b4:d9:
                    16:f6:75:01:1a:86:a2:1c:29:e6:25:29:0d:4f:92:
                    be:d7:4c:dd:ac:7b:26:8f:ed:32:2a:7d:40:26:a6:
                    d6:b8:11:ec:b8:15:38:73:4e:4f:48:fc:64:6e:81:
                    22:57:b5:c1:87:b8:3c:67:09:7e:50:24:c2:fa:69:
                    4d:0b:3e:39:68:a1:5f:96:32:4d:91:97:e3:09:1a:
                    15:b8:e5:65:89:ff:88:45:c7:11:36:08:1d:89:1a:
                    c3:d7:13:b1:a6:fa:7c:7e:ab:64:d1:be:8a:ac:b7:
                    c2:36:c6:2d:08:41:ca:21:0d:a2:33:e3:62:e7:a1:
                    da:0e:07:6b:1c:09:b0:bc:7f:76:ec:60:76:dd:d4:
                    73:25:98:71:f9:d4:40:b2:d2:f8:17:8a:8c:be:77:
                    89:d2:11:07:c4:04:1c:c1:d8:6d:f4:47:0b:da:e6:
                    00:6b:ff:97:18:ac:c6:6f:b9:ef:22:9a:7c:02:1c:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.92.0/22
                IPv6:
                  2a00:b9e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60415

    Signature Algorithm: sha256WithRSAEncryption
         42:08:73:23:b5:d2:15:c5:a2:42:97:ed:85:da:94:fc:61:fa:
         c0:a5:3b:51:ef:37:45:7d:74:30:93:90:6c:2d:f0:93:46:45:
         e1:3c:c8:2e:23:13:9a:51:af:c6:b6:95:07:7e:b4:a8:f8:73:
         67:d9:11:83:80:32:cd:a7:ed:9f:91:b6:79:79:00:c3:64:96:
         c6:16:d0:81:8a:af:f5:e2:9b:fb:a1:70:7f:a0:7e:b7:f6:17:
         e3:ac:b7:a1:48:83:59:17:3c:82:87:a3:29:06:de:e4:3c:84:
         ab:f9:95:28:7f:88:88:b1:b1:0a:04:ad:46:8a:4b:44:23:46:
         90:77:cc:c3:3b:7b:c9:8b:2a:d5:d4:50:48:42:aa:bd:b8:ba:
         57:93:b1:59:f5:f4:0c:ce:f4:69:83:1e:cd:21:4d:4d:fa:29:
         3a:f2:36:33:2a:8e:80:fa:05:87:d1:32:62:3e:63:69:52:2d:
         e8:cd:c2:b3:d0:20:22:6a:39:c8:f5:3b:ff:11:99:12:c8:c6:
         84:1b:98:be:10:e2:12:03:27:3e:bb:ea:0c:b0:d8:7d:7b:58:
         e5:39:ca:84:d6:99:2c:7e:94:84:65:d6:33:25:7b:63:f9:d7:
         95:80:26:0c:6e:7f:85:d1:13:85:90:17:da:f5:77:20:54:4c:
         96:fd:dd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----