This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LaHChooOsX9ndcGKMu_0pgn4g3Q.cer
File:                     LaHChooOsX9ndcGKMu_0pgn4g3Q.cer (raw, json)
Hash identifier:          Avn6GajcwqEv1H5xaN23tVoYd7zMjslxNnA6JBz99TQ=
Subject key identifier:   2D:A1:C2:86:8A:0E:B1:7F:67:75:C1:8A:32:EF:F4:A6:09:F8:83:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78355AB3F743C76208C279A8A690FA5C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/LaHChooOsX9ndcGKMu_0pgn4g3Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:18:41 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 210076
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:5a:b3:f7:43:c7:62:08:c2:79:a8:a6:90:fa:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2da1c2868a0eb17f6775c18a32eff4a609f88374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:57:e1:8b:ee:f2:e4:06:c1:30:ca:39:93:
                    7d:ef:43:98:3c:26:a1:df:77:06:ff:0f:c8:fd:0f:
                    aa:5e:9a:4d:fb:61:0d:7a:d6:b8:fd:6b:f2:6c:0f:
                    cb:ca:82:76:64:cd:46:9f:85:25:ca:ed:9e:12:73:
                    fd:63:54:3a:05:ac:6a:66:a3:66:50:f3:44:a3:91:
                    bf:0e:a2:5b:55:b8:a9:85:06:d2:b5:ae:69:96:8d:
                    46:3e:0f:cf:6e:ba:60:3d:28:81:1a:4d:b6:aa:dc:
                    7e:46:72:0b:94:c0:70:8c:c7:03:cd:6e:db:7b:a6:
                    d8:cc:e1:f4:fe:be:b7:09:5f:55:6f:d3:4c:cc:fa:
                    2e:6d:c7:75:dd:23:a5:76:02:f8:85:58:79:5f:9f:
                    ee:33:d7:64:c5:5e:27:3d:9f:79:85:19:22:b7:98:
                    84:bf:e7:79:71:6b:dc:3a:85:38:0b:9c:94:42:19:
                    db:88:36:c3:7a:b6:4f:ba:b1:fe:d9:dd:2a:90:a4:
                    98:d5:ff:83:95:17:51:05:41:b4:ad:23:c0:97:21:
                    76:87:c5:f7:a8:16:19:29:0c:db:3e:16:0b:d2:a1:
                    4a:bc:7f:52:3a:87:a6:88:1e:43:88:5a:f2:c1:54:
                    9c:9c:4f:04:f0:f9:87:23:e1:68:da:d8:71:75:b0:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A1:C2:86:8A:0E:B1:7F:67:75:C1:8A:32:EF:F4:A6:09:F8:83:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/LaHChooOsX9ndcGKMu_0pgn4g3Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210076

    Signature Algorithm: sha256WithRSAEncryption
         8e:b6:f0:32:7a:aa:d6:bf:4a:20:5f:01:8b:54:7d:3f:d8:2e:
         ea:cd:08:59:b2:4e:19:a5:be:9a:47:51:1c:4a:cb:7e:76:30:
         03:44:c0:91:4c:c6:22:42:59:a0:f5:6b:68:c2:0e:27:6e:fe:
         17:ac:75:5b:01:88:63:85:ee:81:a8:92:c7:ea:2e:aa:be:7b:
         5b:fc:29:9a:31:11:e6:cb:60:96:3a:be:3c:1e:ea:e7:f6:23:
         62:45:d7:5d:fb:a9:ab:e4:6c:f4:c0:43:30:88:30:80:ab:a5:
         e3:b0:66:f1:c4:cf:6d:41:9b:9a:97:3d:64:89:c6:60:7c:a2:
         ef:0d:2c:4f:66:42:3a:d3:63:70:9f:55:13:f5:6b:a4:ee:26:
         64:df:a5:9b:8f:92:8c:59:e8:0b:74:29:fa:ab:f8:d6:c7:02:
         c0:d6:85:f1:4b:ce:c1:64:6d:b0:39:ab:fc:4c:66:b8:44:b3:
         1f:69:c3:2b:5d:99:ca:ec:0d:3a:02:aa:d3:aa:b1:5f:2c:24:
         e8:e0:0a:a4:01:24:c0:79:d9:67:a0:60:91:15:61:e7:eb:57:
         3a:32:cb:73:17:88:19:d9:b7:ab:6e:83:a0:98:85:68:e5:e3:
         5d:f9:55:c2:d5:e1:d8:61:de:ab:d4:29:38:ec:09:7e:01:2d:
         8b:09:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----