This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
File:                     LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer (raw, json)
Hash identifier:          h7MtvS8aKBAlDr/YgwQE5VKF22fKNKa/IHrG0GOCt0k=
Subject key identifier:   2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CED6FB70E001B2013254179A6F25BBE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:18:14 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 51107
                          IP: 193.46.84.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:6f:b7:0e:00:1b:20:13:25:41:79:a6:f2:5b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:5b:c7:d6:44:37:1f:9b:af:0a:0e:fd:3a:
                    fa:83:e2:a3:f9:96:b6:0d:c5:3a:c0:5c:d9:c0:f5:
                    ac:fa:64:eb:c7:39:8e:2c:93:5b:c6:a7:81:93:37:
                    49:88:6f:f6:b4:a9:2f:ba:5e:80:ad:36:f7:76:7b:
                    6b:de:9c:3e:49:b6:66:55:64:f0:a9:74:fd:67:03:
                    13:0b:8e:88:ad:02:25:00:7d:61:95:4e:2e:72:d2:
                    72:19:51:c0:1c:30:49:3a:85:25:97:16:ed:c4:aa:
                    9d:2f:84:36:7c:6d:9f:f1:91:92:b6:55:bd:ac:74:
                    df:17:fb:c3:5a:86:48:3d:d5:ba:76:90:85:e2:aa:
                    52:8f:5a:e5:91:31:1c:0b:82:28:32:33:b7:58:3b:
                    35:62:9d:8b:5d:98:3c:55:6e:f4:49:bd:ed:2f:d2:
                    eb:9c:33:14:91:3f:57:56:0f:14:ac:02:d8:d9:12:
                    3a:2a:f7:34:10:cc:e2:f3:44:9e:29:ed:96:da:4e:
                    ff:e6:4f:b0:83:74:c5:3f:98:b3:03:eb:5e:f5:18:
                    3e:19:81:fd:da:6b:80:e4:6b:e4:83:85:6d:41:d7:
                    6b:0e:aa:34:3d:cb:7a:e8:d2:09:57:21:21:ba:b7:
                    32:c5:10:96:62:95:26:2b:cc:3a:41:c1:9a:0e:99:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.84.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51107

    Signature Algorithm: sha256WithRSAEncryption
         81:6f:da:28:6b:72:95:df:de:69:27:12:0f:76:2c:7b:4b:f4:
         43:84:47:54:64:92:96:cb:ef:e4:b9:9c:9e:42:81:d6:e2:18:
         95:12:56:f8:68:26:00:fc:1c:b7:36:e8:37:e6:88:4b:a0:ec:
         1d:4f:5e:fc:2a:20:0b:fc:39:4a:50:25:1e:be:d6:5a:64:d7:
         c5:ed:61:2b:3b:93:8a:20:1a:27:95:f4:d2:08:cd:13:2b:9d:
         5d:e5:bf:0f:f7:a7:f0:c5:57:ea:09:18:db:50:20:39:06:2d:
         d4:21:26:22:8c:b0:d8:29:b1:9a:4e:79:b4:ef:2b:69:70:98:
         92:ef:dd:c8:07:b3:a7:00:3f:2f:73:f6:14:db:e6:5d:00:62:
         a1:5d:8a:b6:a4:8e:53:93:9e:a4:f2:2e:fa:3b:3c:96:f5:81:
         a7:fc:d7:08:19:ed:85:90:07:07:ef:26:be:87:95:9f:82:09:
         1b:cb:49:c2:fd:42:75:f5:88:6d:3f:72:34:2a:ff:92:5e:82:
         83:73:8d:c8:26:1b:61:43:a1:b6:58:3e:a1:7b:ac:6c:ee:2a:
         57:fd:df:41:3b:f0:b4:b0:10:0a:a1:e3:59:b5:25:5e:17:31:
         90:fc:e6:86:9b:7c:e7:fc:f3:70:f7:26:f1:22:90:22:02:81:
         e1:85:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:37 2026 by rpki-client