This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
File:                     NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer (raw, json)
Hash identifier:          MoBN2qWM5+TdYbc5z3RBMvSUFmWeig+xSVTQjEgsy2A=
Subject key identifier:   34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5A17E72B2D4A15FAAD1B21F3981A7B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:18:03 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 57593
                          IP: 91.233.60.0/24
                          IP: 2001:678:a94::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:17:e7:2b:2d:4a:15:fa:ad:1b:21:f3:98:1a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=34012343a62f3f09b55cdbc01e75c38212a235df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:92:ba:ab:40:0b:b7:4d:96:bc:18:13:87:51:
                    cc:98:11:6c:75:3d:e2:63:47:b2:2d:e8:84:e6:9c:
                    a6:cd:0d:8d:be:fb:ed:3d:2f:e7:11:bd:6b:7d:b7:
                    bc:c5:56:11:a5:97:0a:0b:78:dd:44:be:d3:a3:85:
                    04:ca:28:36:c9:2e:c0:09:88:b1:67:bd:a7:b9:ed:
                    37:72:dd:22:63:0a:33:78:3e:a4:4c:12:2e:df:e2:
                    df:92:7b:c2:b0:2f:ab:a6:8a:2b:cb:be:53:c8:47:
                    1e:25:44:d4:e2:dc:fd:1d:a6:c5:6e:1f:3e:bb:5a:
                    93:81:cd:9b:cf:0b:c5:b7:ae:58:84:36:ba:39:2c:
                    fb:f4:87:3f:19:9a:b4:63:0b:f3:99:69:af:db:03:
                    1d:25:56:a9:3f:c1:87:25:8f:c3:bb:66:8a:8d:07:
                    81:7c:da:e9:04:f6:9e:16:bf:63:d6:ef:9d:72:2d:
                    ea:bc:91:2c:b1:1f:4a:32:cd:64:64:05:97:44:90:
                    02:25:5b:45:4f:70:3a:34:54:c8:2d:c7:56:ad:26:
                    8e:7b:ea:14:7f:1e:df:c2:15:ab:aa:0b:6b:65:ef:
                    45:5b:00:c1:b5:e1:79:e7:a0:c1:72:58:5d:26:77:
                    0a:3d:fe:98:f9:20:7b:13:1c:8f:6c:28:19:de:8e:
                    25:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.60.0/24
                IPv6:
                  2001:678:a94::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57593

    Signature Algorithm: sha256WithRSAEncryption
         19:87:0a:3a:24:26:eb:d4:47:e8:3f:66:3b:c5:55:0f:54:0a:
         76:61:4c:87:58:95:c5:04:79:21:b7:66:d2:3a:9e:d5:94:f6:
         4f:fa:95:0b:37:04:a7:c8:0a:f8:1e:27:02:97:24:3a:57:06:
         4a:d7:50:89:a7:a6:11:d2:34:34:75:3f:09:23:c5:1d:60:39:
         8f:d4:fc:b7:8d:72:64:0c:26:c2:37:02:b9:97:7c:af:b2:d7:
         81:92:0e:94:d9:78:38:0c:3e:45:f8:d0:77:24:9c:2e:43:f7:
         3c:df:3b:7a:5c:43:20:c9:c9:dd:ea:9a:19:d1:b5:9e:97:b2:
         07:0e:3b:cd:83:a8:c7:5a:a5:f0:01:62:cb:2a:c3:79:14:74:
         f1:86:30:b8:f5:84:0d:0f:2a:b8:6a:93:a9:40:18:c5:08:a6:
         29:03:21:30:fa:5f:fb:84:f4:38:2a:ee:09:36:c6:a3:d3:b6:
         35:e8:46:d6:79:80:3a:ae:24:d5:0c:d5:3a:1a:b7:9c:56:17:
         cb:9c:52:27:2c:ef:2f:dc:cb:37:2c:04:17:27:3f:5b:99:a5:
         ca:25:60:46:79:19:3d:a2:b6:1f:cf:3a:01:b1:cd:cb:3b:b4:
         1b:c6:f9:28:59:79:70:50:e2:09:fb:8c:10:91:4a:18:58:28:
         0c:15:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----