This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
File:                     P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer (raw, json)
Hash identifier:          X1qvZwrpN+kP1BRfP1wMPoUFrhL6sIKJebL48cqpxgk=
Subject key identifier:   3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B76EAF2060616CC5ADA7C14E53DD9F041
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:17:47 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.102.100.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:f2:06:06:16:cc:5a:da:7c:14:e5:3d:d9:f0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:ce:ec:54:da:59:c3:84:da:5e:70:7a:a5:
                    f8:13:4e:49:4c:f7:c0:d3:44:5a:6a:91:2c:7a:b3:
                    8d:4b:05:62:45:75:92:6b:4f:97:24:70:f4:47:74:
                    cc:6d:15:b0:ec:df:32:f6:16:55:b3:db:e4:0b:fa:
                    d5:64:b2:74:ad:68:dd:62:4d:38:0f:a8:43:fb:46:
                    ed:ab:7d:27:65:74:f1:be:ff:70:ec:f1:52:98:cd:
                    cb:6a:bf:4e:bc:4e:d9:04:be:17:06:24:a8:24:81:
                    5b:42:5f:3d:8e:d0:00:47:03:3c:de:41:fb:f7:0a:
                    88:c5:c2:61:89:71:20:ae:8a:cd:e8:28:f5:50:d5:
                    d7:91:99:a6:e9:25:3d:49:3d:81:b2:a4:e0:18:78:
                    24:44:76:dd:01:c8:67:c3:62:64:e8:3c:58:dc:79:
                    71:f3:05:2a:32:ae:fb:3c:41:27:3e:1d:ed:aa:87:
                    82:2e:64:b9:e5:9a:ef:13:f6:a8:d1:c4:86:4a:fc:
                    68:94:aa:7c:a3:c6:f8:d7:bc:8d:c3:8e:7b:93:61:
                    c3:71:63:7b:3c:26:7c:0f:1b:05:60:f9:30:a2:c4:
                    70:30:a0:df:30:f7:3b:5b:10:12:90:1e:ff:4a:e1:
                    76:07:63:b5:ac:96:fb:0f:86:37:00:85:fc:e5:e5:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.102.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:06:9c:f6:f0:a9:1c:81:16:0b:7f:f7:bf:00:55:c3:a6:24:
         72:4d:b9:ec:61:ed:2e:f1:ea:27:b8:37:e9:42:3b:6b:eb:87:
         da:b1:ec:88:62:cf:45:e2:17:d0:c5:cb:5e:84:3d:19:12:14:
         b2:46:0f:28:ff:2e:79:9c:54:a3:ff:98:36:79:3e:4f:84:07:
         ff:55:6c:b9:37:f6:13:f6:8f:89:8e:90:37:27:01:18:db:86:
         e7:17:a4:45:dc:be:df:6d:f5:d0:8c:36:56:8d:53:1d:ed:22:
         e2:bf:23:74:13:34:7c:a1:2a:a2:89:ff:2c:e0:63:32:1d:d4:
         c3:e0:14:f4:ca:05:4b:96:95:55:f5:87:29:49:ac:64:42:cc:
         47:d3:7b:95:cf:d5:a5:01:3c:b9:93:a2:c0:46:4b:8d:9c:70:
         e4:8c:22:a7:e2:2b:c4:1c:a8:4d:b1:a0:c0:56:8b:61:ee:62:
         e3:6b:cc:06:20:08:98:91:80:53:c4:cb:fc:ae:f7:e6:47:26:
         f8:7d:ea:66:57:9c:73:13:b7:42:f4:53:df:62:f4:05:e7:49:
         9c:ce:16:ba:1f:fb:0a:2f:11:ef:b7:0c:56:58:37:42:ba:51:
         a9:8b:47:6b:25:10:ba:18:04:c9:95:f2:2e:06:b2:d6:35:70:
         01:e8:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----