This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
File:                     Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer (raw, json)
Hash identifier:          RJsrWe8oAw/QKDhH9sAV7ZWEOckavE/uAGkhJmMDa4U=
Subject key identifier:   3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77587A7AC4372F6945C682D291E9FD7E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:17:25 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 39190
                          IP: 194.147.124.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:7a:7a:c4:37:2f:69:45:c6:82:d2:91:e9:fd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:17:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7c:15:cb:f5:36:4e:87:88:2b:68:7b:fc:02:
                    07:4d:55:ac:19:3b:4a:d3:9e:e3:b3:ff:6d:1e:eb:
                    4f:f6:2e:6d:30:7a:9e:43:eb:63:2a:93:6b:a4:c6:
                    80:e4:fd:4f:17:17:7a:33:06:63:c6:99:bf:6c:cb:
                    2d:2b:1d:3e:eb:93:9d:be:2f:8b:ad:43:fd:fe:1d:
                    34:3b:ff:e2:9e:ba:ae:c4:97:10:fc:91:59:f0:bd:
                    7a:77:06:02:c8:9b:79:ae:ee:a5:8d:22:eb:f6:56:
                    5b:a2:61:31:a2:3b:18:85:37:ae:a7:c5:71:44:05:
                    12:61:35:a9:9f:7b:14:87:38:e1:c4:b0:f8:c9:26:
                    73:a1:10:c6:ba:14:8d:80:2c:93:41:10:49:7a:92:
                    bf:e1:c2:f1:a1:39:6f:d1:6c:be:1c:37:31:46:0d:
                    2b:50:ee:73:6f:bc:bf:b2:d7:1a:f3:ba:c3:6f:9f:
                    49:fb:16:20:34:a8:02:7c:e2:99:0d:dc:38:00:db:
                    da:f4:19:71:fa:19:bd:8a:b8:ce:c6:ec:29:db:e2:
                    de:b4:8b:a4:8b:27:e3:3a:a4:c2:d2:01:c1:9d:8f:
                    e8:6a:4d:8d:3d:2a:c1:72:b7:b8:1a:f2:9e:25:c3:
                    be:13:e2:9d:c7:1b:a4:b1:40:38:be:a1:ff:e5:32:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.124.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39190

    Signature Algorithm: sha256WithRSAEncryption
         3e:11:fe:83:8c:6c:0e:fb:c9:26:ee:3a:e7:cf:72:9e:f7:ff:
         a7:e0:c4:17:0e:99:8b:b6:95:72:f7:ea:59:f9:10:28:97:40:
         c4:50:d9:2a:91:0c:2d:4e:ed:de:7b:02:38:db:2f:28:69:1e:
         b3:e3:99:7a:a7:16:6e:f4:5f:7e:29:eb:e9:3f:05:69:2e:0a:
         43:fc:f2:de:47:6b:0f:ea:22:3c:40:cd:9a:2d:1a:9b:10:3a:
         c0:6f:33:57:e0:49:cf:8d:9d:96:7f:f9:bd:52:b1:e7:d4:55:
         14:81:57:0e:ff:de:9a:73:31:27:69:49:a5:ad:2e:f7:90:d2:
         b1:af:82:5f:df:91:86:68:c4:7e:a0:8c:e3:26:99:45:3e:8a:
         c0:c7:79:5f:af:cc:37:61:43:8a:44:68:d9:30:59:42:9d:90:
         63:63:37:5a:a3:5e:d2:31:94:9f:1d:99:82:b6:d8:01:fe:f9:
         87:76:68:ba:a8:5e:44:4e:59:62:5c:ed:af:63:c4:cc:7f:ba:
         25:e4:c7:41:2d:05:05:8d:2b:34:b7:3c:8e:23:50:33:9e:c4:
         e5:fa:2c:b6:84:43:b3:87:6d:90:55:d1:8a:df:8c:8e:de:d7:
         85:11:f3:5e:13:c9:bb:fc:7d:6c:cd:b4:f4:aa:20:94:a1:8e:
         62:d3:d5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:36 2026 by rpki-client