This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
File:                     N6MHIGgl2WIY507NCN0t2d3A-dc.cer (raw, json)
Hash identifier:          kM956PVh5IDZHMJEXnWzM9pgtmN3wiV6AVnMm1+541Q=
Subject key identifier:   37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BCC0F59910057627DB4BE7C8565105378
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 17 Jan 2026 13:05:16 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 202322
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cc:0f:59:91:00:57:62:7d:b4:be:7c:85:65:10:53:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 17 13:05:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:6c:34:8e:b3:09:16:a3:e4:e5:3e:90:73:
                    f4:65:8e:87:68:a5:fa:7a:e4:e6:d8:90:f1:cc:87:
                    14:2f:05:0b:bb:68:69:0b:b7:cc:90:91:00:5d:5e:
                    07:6d:62:e7:8e:6b:b9:72:ea:a1:44:a2:87:53:0a:
                    8e:4d:dc:27:df:d1:7e:40:f1:2f:c4:54:61:83:48:
                    af:6b:00:3f:02:4a:e7:48:f4:b5:17:69:da:54:8a:
                    ec:40:46:6d:6b:09:c5:66:86:ba:45:3d:87:b8:15:
                    58:5c:ef:48:93:b6:71:c3:bf:2d:92:09:ad:2c:e1:
                    4e:72:58:de:71:b1:f1:d0:ab:fa:90:94:13:32:16:
                    73:52:fd:f7:bb:ac:27:db:43:a3:dd:ae:c3:1f:2e:
                    a2:5d:87:91:05:e2:63:4c:2d:f4:18:d4:bc:07:ca:
                    33:e8:13:72:1c:64:a1:2f:ad:80:5c:43:2e:26:0b:
                    18:dc:ab:df:c8:fd:98:85:06:3a:b5:1b:4e:16:f8:
                    ee:14:a0:97:7f:37:9e:b7:b5:21:5b:5c:76:b3:c1:
                    0d:94:46:57:48:9b:84:7f:45:f6:93:fd:08:9c:22:
                    60:c0:1f:7d:c9:07:ff:f3:c6:02:2b:19:9a:24:90:
                    6c:10:d6:28:e9:09:64:f8:ef:84:fb:03:63:c5:6f:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202322

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:5c:07:82:d8:0c:34:fe:f5:b0:0f:f1:b1:cb:01:e4:21:
         55:8e:e8:f1:1a:3c:cf:f6:cb:41:45:76:20:d5:30:6f:89:d7:
         9e:9e:77:df:5d:45:91:e1:96:d0:bf:65:89:0b:c7:11:c8:01:
         2b:d5:71:72:ce:67:c8:92:cb:99:94:2d:c7:d7:27:46:b4:3e:
         0a:bc:22:fe:4c:a5:83:c3:b3:a6:77:fd:5d:c6:e9:c8:31:5b:
         68:fa:52:fd:b3:14:87:3f:7d:c8:2e:35:04:fd:2e:b3:c3:b3:
         6d:da:0e:d1:0d:99:7e:d5:66:df:f8:1d:28:15:07:9b:97:fb:
         1b:19:50:61:28:97:69:f1:90:5a:2b:0f:e2:b9:c2:b2:90:16:
         21:b4:01:fc:2c:e1:85:ee:9d:eb:4d:c1:85:f6:b2:06:f0:4f:
         c1:92:0f:f4:1a:64:98:43:a5:e2:b5:89:c4:c7:ce:e0:b1:14:
         61:47:7a:c3:1c:95:0f:14:73:db:b1:fa:3a:c6:3d:9d:df:f5:
         63:ff:d8:2a:f8:37:e4:b4:38:3a:ce:a7:34:d0:5d:76:ee:1a:
         0d:63:72:f4:5e:cb:c7:23:3e:01:6b:51:4c:0c:c7:15:63:96:
         ae:85:9b:ec:5b:96:b7:73:f7:56:3c:ae:b3:ce:52:cd:f9:36:
         23:e1:72:6c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZvMD1mRAFdifbS+fIVlEFN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTE3MTMwNTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2EzMDcyMDY4MjVkOTYyMThlNzRlY2QwOGRkMmRkOWRkYzBmOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG1sNI6zCRaj5OU+kHP0ZY6HaKX6
euTm2JDxzIcULwULu2hpC7fMkJEAXV4HbWLnjmu5cuqhRKKHUwqOTdwn39F+QPEv
xFRhg0ivawA/AkrnSPS1F2naVIrsQEZtawnFZoa6RT2HuBVYXO9Ik7Zxw78tkgmt
LOFOcljecbHx0Kv6kJQTMhZzUv33u6wn20Oj3a7DHy6iXYeRBeJjTC30GNS8B8oz
6BNyHGShL62AXEMuJgsY3KvfyP2YhQY6tRtOFvjuFKCXfzeet7UhW1x2s8ENlEZX
SJuEf0X2k/0InCJgwB99yQf/88YCKxmaJJBsENYo6Qlk+O+E+wNjxW+BQQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDejByBoJdliGOdOzQjdLdndwPnXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2EyNWQ0
OS01M2E1LTRkYTUtOGEzNC00MjhhNTMyYWNlZjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYTI1ZDQ5
LTUzYTUtNGRhNS04YTM0LTQyOGE1MzJhY2VmMC8xL042TUhJR2dsMldJWTUwN05D
TjB0MmQzQS1kYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMWUjANBgkqhkiG9w0BAQsFAAOCAQEAWOZcB4LYDDT+
9bAP8bHLAeQhVY7o8Ro8z/bLQUV2INUwb4nXnp53311FkeGW0L9liQvHEcgBK9Vx
cs5nyJLLmZQtx9cnRrQ+Crwi/kylg8Ozpnf9XcbpyDFbaPpS/bMUhz99yC41BP0u
s8OzbdoO0Q2ZftVm3/gdKBUHm5f7GxlQYSiXafGQWisP4rnCspAWIbQB/Czhhe6d
603BhfayBvBPwZIP9BpkmEOl4rWJxMfO4LEUYUd6wxyVDxRz27H6OsY9nd/1Y//Y
Kvg35LQ4Os6nNNBddu4aDWNy9F7LxyM+AWtRTAzHFWOWroWb7FuWt3P3Vjyus85S
zfk2I+FybA==
-----END CERTIFICATE-----