This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
File:                     Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer (raw, json)
Hash identifier:          Qbp4sPviCyszPKov6oLH+axqGeYfxPUJHDTPQh6vMlY=
Subject key identifier:   35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5C85501CDBBD16B7B8CED88E8AB92F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:19:34 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 59721
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:85:50:1c:db:bd:16:b7:b8:ce:d8:8e:8a:b9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:be:fc:bf:a0:21:7e:0b:49:db:36:61:91:
                    e3:07:2a:15:2d:7f:ff:ff:a8:d3:d1:d4:ea:ba:88:
                    00:46:5c:0c:f9:82:3e:25:0a:d5:96:df:4e:bd:42:
                    ef:4d:2e:9e:79:f1:ac:c4:3a:8e:a3:5b:30:a9:b6:
                    2a:e7:50:2a:a2:0f:fe:49:8c:3e:01:1b:ec:94:0c:
                    49:96:ce:9c:66:b6:39:94:9e:74:7e:6d:7e:3a:3f:
                    bf:f6:7f:9d:e7:67:20:9a:88:28:54:dd:5e:3a:41:
                    4a:d3:e9:44:7f:c7:c7:75:2b:85:ce:0a:d5:35:1a:
                    87:23:c3:dc:d6:40:9a:8e:47:1b:0a:81:98:bb:3b:
                    53:8f:31:46:fc:41:8b:0f:d9:19:40:c4:d5:fb:d3:
                    f6:8b:d6:83:cc:75:68:1f:a7:4c:95:dc:a7:a8:45:
                    61:14:13:9e:4f:33:02:a7:35:d3:39:ec:af:eb:60:
                    36:48:b1:00:b4:90:9d:dd:71:2b:05:5d:6d:5b:bc:
                    13:b3:fc:ef:c6:03:ba:87:b9:dc:27:47:a0:da:6e:
                    9e:fd:1f:5b:eb:eb:bf:12:60:00:a3:17:9b:6b:1b:
                    85:38:51:38:39:d6:e7:76:eb:14:0b:55:98:24:4b:
                    01:ac:13:ce:23:9c:c6:82:ec:dc:69:b7:78:2d:3e:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59721

    Signature Algorithm: sha256WithRSAEncryption
         94:79:72:78:ae:4a:d9:7a:9c:ea:8f:10:f2:38:d9:d8:95:23:
         1d:50:c9:d3:ae:4d:41:91:67:c6:52:3c:3c:8a:37:7c:8c:f7:
         ae:35:97:de:0b:82:bc:36:c8:9c:09:6b:55:b5:43:78:3f:93:
         0c:10:9a:70:9d:18:20:fb:37:c0:fb:60:79:2d:87:a1:16:93:
         10:b7:82:72:76:09:b9:81:a2:be:34:a2:3d:c7:e5:0a:a3:5a:
         30:a4:76:1e:c8:91:48:98:d9:9e:5b:45:52:95:0e:f4:45:4d:
         57:e7:11:13:d6:73:44:90:f3:80:09:60:47:da:59:63:c5:02:
         36:c1:47:32:9f:f3:1d:5e:8d:6b:c1:57:4e:72:80:64:cc:b9:
         47:20:8b:dd:7d:f0:e0:60:e9:39:ac:f8:c8:0e:e9:54:54:68:
         2e:d0:d0:4f:c6:ab:95:a1:58:1a:96:89:6f:fe:7c:a1:ae:92:
         df:f8:0b:a6:a7:7c:e7:33:b9:fa:a4:4f:69:89:90:a1:29:5e:
         91:25:f9:e7:a7:71:80:09:7d:37:45:1a:25:fe:8d:56:c2:d8:
         32:34:bf:d4:be:c1:0b:a9:09:49:9e:52:16:95:21:29:99:d4:
         6f:e6:46:27:7a:c6:c7:f3:c3:09:e4:b7:0e:3d:16:c0:cb:f0:
         fe:bb:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----