This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NDLzVG3kPONceHHFVLizDvY1wlE.cer
File:                     NDLzVG3kPONceHHFVLizDvY1wlE.cer (raw, json)
Hash identifier:          8Cx4nRu8aijHg++WezI/zgLsHl6olLxEylZ/jHbBTNQ=
Subject key identifier:   34:32:F3:54:6D:E4:3C:E3:5C:78:71:C5:54:B8:B3:0E:F6:35:C2:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA368E39545E149DED2635F852E8886
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/18/de77ae-29e3-4a04-a027-6638c3eb4027/1/NDLzVG3kPONceHHFVLizDvY1wlE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/18/de77ae-29e3-4a04-a027-6638c3eb4027/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:17:45 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 212505
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:68:e3:95:45:e1:49:de:d2:63:5f:85:2e:88:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3432f3546de43ce35c7871c554b8b30ef635c251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:f6:f0:21:2b:fa:a0:1e:f5:1a:76:bd:3a:
                    23:34:78:c9:57:72:db:2f:b2:9a:4e:87:ad:0b:50:
                    63:80:f2:65:eb:95:1b:88:0c:95:f4:2f:12:9d:6c:
                    6b:2a:88:54:fc:16:54:d5:6e:79:c2:ff:9b:3c:6e:
                    dd:12:d0:a5:ef:47:4a:51:b5:4d:76:4d:ad:5e:88:
                    54:01:7b:d6:21:83:22:75:b4:3b:81:d5:1a:de:53:
                    df:df:dc:10:24:69:24:7b:40:55:7e:57:b5:8a:46:
                    d6:09:cd:9d:2d:3f:29:cc:41:55:e8:3f:5b:65:cc:
                    8d:ef:c9:45:cc:dc:fd:29:9d:c2:d1:41:79:b9:27:
                    43:ef:92:7b:67:e8:a9:de:1d:d8:87:6b:ca:65:7d:
                    cc:da:db:f6:f1:a2:65:65:57:1a:22:e0:1f:ec:26:
                    89:b5:20:87:c1:36:a0:a5:5d:2e:dc:ab:a7:d7:b6:
                    93:d6:33:a7:e5:23:06:b3:b4:26:12:fa:d5:12:34:
                    f5:27:a6:29:6b:52:b1:ba:50:96:8e:37:6c:49:50:
                    02:f2:f8:56:0c:aa:4a:76:a6:33:af:fa:5a:cb:ff:
                    6a:82:48:c4:f6:27:e5:8c:3e:0e:b3:c4:cf:c8:33:
                    85:67:1a:e1:22:28:82:68:81:f6:08:fc:e3:47:de:
                    ac:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:32:F3:54:6D:E4:3C:E3:5C:78:71:C5:54:B8:B3:0E:F6:35:C2:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/de77ae-29e3-4a04-a027-6638c3eb4027/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/de77ae-29e3-4a04-a027-6638c3eb4027/1/NDLzVG3kPONceHHFVLizDvY1wlE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212505

    Signature Algorithm: sha256WithRSAEncryption
         83:20:50:e4:b6:4d:a7:0c:b8:66:6a:13:a0:c4:da:2f:3b:89:
         ed:9a:4d:d5:9e:3e:fe:47:f5:13:8e:f8:58:9a:4a:41:6a:13:
         95:41:0a:2a:13:4a:c0:d2:f4:2e:b5:43:c4:41:88:6a:0a:c2:
         85:3c:31:f7:b7:9c:b7:23:33:ee:6e:1b:3f:62:27:33:92:f2:
         27:09:92:8f:3a:5c:6b:36:b3:ff:49:12:7d:25:cd:57:f7:2b:
         dd:52:c7:4b:c6:d2:fe:74:c9:a4:5c:96:5e:58:d3:02:1f:c6:
         e9:b1:d3:05:c8:3d:62:44:2b:f5:0b:10:fd:df:2d:dc:fe:03:
         f9:1f:e8:97:7d:a1:99:5c:22:f0:29:73:28:6a:a5:60:30:d0:
         3e:b4:05:ea:f0:3e:94:6d:ad:ea:e4:10:3e:ea:8c:f2:48:65:
         69:e7:cf:7f:24:10:a5:be:15:ef:09:80:50:17:80:4f:2d:de:
         b7:fc:53:fe:16:24:4f:06:5d:99:2d:e1:b7:9e:dd:a0:49:c2:
         0b:10:99:d9:88:e9:31:69:ec:13:ba:0a:11:78:73:1e:b6:43:
         9f:5c:44:85:e7:3d:29:59:c7:45:34:57:4a:15:8b:60:87:ec:
         15:ea:91:13:a4:40:41:25:9c:d9:ce:b3:85:68:c2:89:eb:60:
         28:5b:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----