This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
File:                     O9_XYE36DriuIOkPzxMDk7ioVko.cer (raw, json)
Hash identifier:          yWOGABOiErI0vhdrSbTN/ew2JM8/AHcopaQmVPr9M/Q=
Subject key identifier:   3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B790FFCEC6B51C6DABE0793BFD1DD2BF8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 10:17:29 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 34987
                          IP: 185.90.4.0/22
                          IP: 2a05:dd00::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:0f:fc:ec:6b:51:c6:da:be:07:93:bf:d1:dd:2b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:68:99:73:52:24:41:24:9d:22:ed:3f:21:
                    40:42:89:b8:e0:78:1f:1a:58:92:a9:1b:ed:16:eb:
                    ae:54:9a:2e:7e:61:e4:0c:79:ad:f2:3a:99:4e:10:
                    b4:dd:84:8e:25:41:51:22:3d:a1:a3:28:ed:54:02:
                    07:5b:d8:81:b5:73:03:43:19:ff:48:3e:49:5a:91:
                    5d:ac:29:e0:11:b6:c5:5e:ad:bf:c7:37:3a:0f:b4:
                    ad:43:d4:1e:19:bb:98:da:b3:38:6c:bb:fa:2c:85:
                    12:52:39:e7:db:a1:0a:ec:82:6e:51:3d:6c:71:25:
                    fe:10:83:90:63:c9:a8:4f:ca:5c:82:0e:cd:f7:e7:
                    73:40:05:98:2c:22:ac:6f:ac:11:81:2f:39:df:79:
                    a4:59:75:ca:34:8f:40:7d:b8:72:6e:32:15:a4:cc:
                    70:33:bb:c9:fe:2f:05:d1:69:ad:fc:31:87:f8:7a:
                    8c:c4:13:82:b1:02:49:8f:c3:47:12:6b:95:af:01:
                    05:f2:20:29:24:c2:34:33:55:08:ff:e9:a3:ab:e0:
                    8c:ac:01:ce:c1:c6:5d:0a:da:d0:3c:9a:bf:52:ec:
                    77:8f:85:f1:b1:fe:15:5d:b2:43:a4:5f:bf:15:e4:
                    22:41:e7:3e:9f:be:64:dd:4d:9b:87:d2:f3:68:22:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.4.0/22
                IPv6:
                  2a05:dd00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34987

    Signature Algorithm: sha256WithRSAEncryption
         48:ca:fc:4a:b2:fa:2b:da:31:28:8d:ca:19:a6:8d:f0:2c:88:
         3a:e6:cb:45:b8:9b:31:b3:31:b3:b0:27:42:9a:2e:46:32:59:
         e8:0f:86:6d:11:fb:53:d3:45:37:40:91:71:9b:11:9a:21:6f:
         5e:40:40:44:1c:46:98:e5:32:72:b5:7a:3c:63:6c:30:f5:a7:
         b1:42:be:da:97:ba:b1:ef:8d:27:31:fb:b7:0f:d8:80:6e:4a:
         fc:a9:99:e3:dc:dd:56:80:c6:66:3c:06:3b:d2:1b:ea:d4:69:
         6f:76:07:ce:e3:a4:ad:04:1b:ef:2b:dd:c0:eb:cf:72:b3:55:
         be:f2:ad:84:79:22:5b:fc:45:4a:4f:7f:c3:55:9a:b6:00:b5:
         fb:ac:e6:c5:14:55:8d:16:e7:66:2f:9e:13:58:f6:fe:96:80:
         8e:8d:a2:34:57:5a:14:9f:e1:d3:31:cb:84:a9:8e:1a:39:15:
         71:e5:7b:1e:12:a8:e7:82:05:c8:72:d3:58:c4:29:db:e1:c6:
         6a:87:f2:a6:2c:21:d1:a4:fc:54:7a:93:ca:66:a8:54:67:df:
         7e:35:e3:a5:f9:6c:06:50:10:1e:40:b2:be:e5:ff:37:36:ea:
         63:1c:0a:a6:37:dc:5d:0b:ca:18:85:61:d6:00:67:b5:dd:c0:
         25:5b:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----