This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
File:                     Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer (raw, json)
Hash identifier:          EiObn4z5M/mXuxwSDBbS847mA2YJDAJHSn9PA8sYyJo=
Subject key identifier:   36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C12B3CB22A2A11D4FFD0D271080B7E9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 00:19:19 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 198706
                          IP: 91.213.229.0/24
                          IP: 185.56.240.0/22
                          IP: 185.167.248.0/22
                          IP: 2a02:56a0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:b3:cb:22:a2:a1:1d:4f:fd:0d:27:10:80:b7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:19:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:56:32:22:b5:11:2c:88:fc:65:07:c9:47:
                    08:be:93:22:8a:32:b0:0b:7e:62:e2:1e:54:f7:c5:
                    b5:0b:ee:1e:0b:f2:e0:83:12:2e:b4:1b:4d:74:3b:
                    37:85:8b:04:f7:9c:11:f8:1f:4e:03:93:4d:d2:1e:
                    81:91:66:92:2e:49:25:62:04:f2:fc:83:e2:8f:e3:
                    36:54:ae:a6:53:28:09:0f:f4:d4:67:6d:5a:66:45:
                    71:0b:d9:a4:3e:ad:cf:d1:73:2d:64:72:f5:ed:67:
                    17:6c:f0:29:2b:f4:19:dc:66:5a:23:f6:9a:22:ae:
                    1d:9a:95:7b:e3:e1:42:3f:43:3f:ae:b5:fc:1d:64:
                    87:b3:12:a5:48:9d:95:b4:fb:b5:c3:7f:46:81:8b:
                    3c:8f:f0:4f:5e:a1:d5:d2:66:68:94:32:1e:76:60:
                    46:a7:cc:5d:33:aa:b6:ba:63:2d:57:fd:2e:f9:35:
                    0d:a0:72:69:ab:37:b4:7b:74:44:86:6d:c2:34:c3:
                    66:6e:3a:ae:b5:9a:2a:6a:e5:76:4b:5a:71:45:91:
                    99:bd:d8:5f:a0:e9:c9:6d:e4:48:32:a3:9f:e0:d3:
                    fa:c6:a3:27:e5:78:c5:8d:6e:69:11:87:59:75:dd:
                    20:c9:56:ee:fc:11:20:f8:15:34:9c:94:aa:bc:da:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.229.0/24
                  185.56.240.0/22
                  185.167.248.0/22
                IPv6:
                  2a02:56a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198706

    Signature Algorithm: sha256WithRSAEncryption
         23:e6:64:fd:36:53:97:66:82:b6:cf:f4:68:bf:43:b8:6a:fd:
         d5:2a:ef:47:9a:da:50:f9:08:69:7b:1e:f4:a8:56:19:98:37:
         9d:5b:33:e8:3c:f9:94:7b:3a:6d:e0:a1:e3:67:d9:17:da:11:
         82:92:cf:f6:c1:5b:96:ac:a1:c6:3f:33:52:7e:d2:0f:46:5b:
         81:e4:dc:67:e0:d2:ac:45:a3:5e:ed:d7:25:23:f4:88:1a:b1:
         09:fc:79:db:f7:d1:f1:45:c6:54:bf:6d:27:3d:70:99:f2:31:
         99:58:96:26:a4:ef:98:4c:aa:0f:99:ca:59:02:8a:3e:25:5e:
         7f:15:09:5a:2c:4c:ce:46:8b:89:ee:12:9c:ec:22:33:14:94:
         1c:e9:b3:80:c0:75:e5:15:2b:44:37:f8:36:34:5b:dd:f8:b1:
         5a:a1:5c:dd:aa:3d:09:24:7f:06:80:fd:33:b8:44:fc:e0:6b:
         ee:9d:de:c5:52:27:ab:ff:72:a4:a9:f0:20:27:01:de:1e:d7:
         71:70:1b:20:3c:9f:14:a6:3a:85:2d:60:34:2a:61:a9:73:3c:
         ad:4d:c8:a1:b7:b2:65:b2:ff:cb:30:63:34:38:54:bf:52:8c:
         da:62:88:41:12:0e:ef:12:b8:b6:18:35:99:f5:40:80:6f:4d:
         f9:24:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----