This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
File:                     METmC7lxMuqEmlP8VUu7xjlIsBY.cer (raw, json)
Hash identifier:          9aKqS0MREWrpsbSMLDZyvTBPqYopdeFUPx5FDUK/nCY=
Subject key identifier:   30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F84378F98FD4F34C0551997DB6188DF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:22:10 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 207543
                          IP: 193.227.242.0/23
                          IP: 193.228.10.0/23
                          IP: 2a0a:e940::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:37:8f:98:fd:4f:34:c0:55:19:97:db:61:88:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:22:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3044e60bb97132ea849a53fc554bbbc63948b016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:6f:b4:7f:09:37:fb:20:15:13:0d:7d:96:
                    4a:6a:57:a8:d4:df:c2:bb:8b:6c:41:b4:f7:29:54:
                    c7:2b:e4:5a:6f:32:ea:e2:c3:21:13:98:09:6d:bd:
                    50:a9:fd:2d:c7:73:da:8a:44:de:af:0d:04:53:1a:
                    74:0e:a7:d7:4c:f1:0c:2a:0a:d5:01:2b:2d:24:40:
                    54:2f:d0:e8:ab:3d:fd:79:84:cb:2f:37:b1:c7:43:
                    82:84:75:9b:03:40:e2:22:21:a4:ec:f4:a8:8f:2c:
                    16:08:75:6d:db:75:b3:ee:f4:96:f9:fe:86:71:6c:
                    7b:4c:98:e5:f2:54:ba:72:1d:16:17:20:e2:a0:1b:
                    b4:e5:ec:e9:06:77:ea:10:8d:01:62:94:32:65:45:
                    1b:9f:56:de:6c:c4:fb:41:bc:c6:01:60:f0:3e:65:
                    ad:08:1a:cd:67:cf:ab:07:14:2e:bc:a1:c0:89:50:
                    58:78:d8:14:6d:1b:53:05:a4:a1:5c:83:57:52:7e:
                    9e:4d:d9:92:69:81:4f:43:6b:24:4d:ba:d1:ed:ad:
                    dc:2f:08:44:cf:be:ff:df:4a:bb:3b:2c:1a:3f:44:
                    cc:21:b9:77:84:02:85:35:b8:ed:48:aa:5a:af:97:
                    70:14:5b:af:5a:1a:bb:01:f5:54:e0:26:c9:a3:3f:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.242.0/23
                  193.228.10.0/23
                IPv6:
                  2a0a:e940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207543

    Signature Algorithm: sha256WithRSAEncryption
         18:f7:bc:64:dd:18:84:d6:6c:b1:01:25:62:00:79:ed:f7:ce:
         ef:ab:c5:ef:44:44:bc:4a:b6:04:36:e8:24:60:0f:2d:e4:32:
         01:ed:1b:cd:e0:00:e5:67:a7:eb:d3:df:d9:7b:66:bd:13:4b:
         b1:f8:97:85:47:71:0d:af:45:f5:fa:b5:82:17:df:3a:3b:7d:
         e3:3b:e9:52:83:76:b4:64:00:a3:24:20:86:6c:d6:a1:fa:7c:
         56:03:b5:43:48:bf:b7:cd:2b:fb:d0:cc:10:1a:d8:98:26:67:
         25:33:12:ea:45:0d:f9:1c:b8:aa:a7:5c:20:12:15:3a:79:fa:
         14:8b:10:e0:95:18:3c:db:92:a1:aa:ce:cd:cc:15:ac:f8:64:
         94:5d:9d:b8:5d:19:54:a7:f7:2a:26:22:d0:19:4b:2f:a1:8d:
         11:32:19:1e:12:0a:65:dc:ff:fc:0d:ef:64:39:ee:3e:03:bd:
         a6:2f:8d:a1:b1:45:0f:b3:c3:34:ef:be:cd:2d:57:b0:81:d7:
         29:f5:21:4e:03:8e:dc:76:60:0c:d8:2f:80:fc:3e:1a:87:08:
         f1:a5:fd:3c:e3:f7:a1:64:5b:a0:b9:df:67:e7:7e:fa:d4:df:
         b3:c2:4d:94:0e:33:f7:fd:56:01:21:c8:06:50:d2:65:8f:a9:
         e8:eb:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:50:39 2026 by rpki-client