This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
File:                     QdD5FclU2DtKG_GEz7wTjEftpR4.cer (raw, json)
Hash identifier:          JQptabsdBaPBfi09KInsBR+RHQ0+Cm/iWjI0CRlLejs=
Subject key identifier:   41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A37AD2DF9BB9C89CC78883EDC8BD9B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:18:58 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.242.55.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:7a:d2:df:9b:b9:c8:9c:c7:88:83:ed:c8:bd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:49:3e:f5:38:44:a8:fe:f8:aa:3d:a5:21:
                    42:5a:6d:0f:8a:6c:84:fd:d9:6a:b7:ac:67:2f:35:
                    aa:88:b3:53:56:da:4f:74:3c:59:49:09:82:de:56:
                    02:4b:89:24:f5:07:f6:8a:f4:6b:7b:26:b7:50:75:
                    40:a9:57:91:d3:89:66:25:8e:ce:93:04:b0:ad:6d:
                    36:1f:59:fe:63:71:97:a3:cd:c7:48:e5:34:39:a3:
                    0c:4a:6e:61:9c:c6:0f:ac:04:df:7b:c1:50:e0:82:
                    c4:94:2c:22:1f:03:f5:52:51:9b:e6:ff:a8:53:c7:
                    27:d8:f3:85:df:37:2b:b9:76:d9:06:fb:6d:b1:85:
                    2f:dd:0d:0a:ab:68:33:61:ed:ec:a4:76:51:0e:14:
                    24:6a:4a:40:73:b7:2a:ee:e2:92:02:4e:85:13:89:
                    d7:45:ee:80:d6:d3:e8:ab:92:62:3f:25:43:30:20:
                    5e:6e:bc:34:f2:69:d6:db:ef:57:92:94:da:da:78:
                    45:43:58:0e:ba:f4:a7:b0:b5:fc:7f:ec:ed:2d:21:
                    8d:93:b6:c3:45:af:25:37:1e:b3:90:20:9d:56:85:
                    b9:a3:87:e9:96:30:e1:e1:94:c8:2d:ee:41:ef:50:
                    ae:98:2e:db:65:c6:c2:0f:2e:37:6d:6b:ce:6b:b5:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.242.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:63:8a:e7:1c:6b:be:f8:cf:7c:f8:02:1d:8f:16:84:f3:
         85:78:08:0a:42:6d:81:75:8c:03:0f:bc:8c:d0:9a:65:d9:58:
         ac:fa:68:49:f8:5b:c1:e4:5b:f1:b6:d7:93:d7:79:64:1a:04:
         b4:fc:fe:b1:73:9e:cd:12:92:1f:22:30:44:5a:44:66:f7:32:
         a0:7f:33:5c:69:20:1f:6a:48:b9:f6:ce:61:a5:40:b7:ad:59:
         56:15:19:95:ea:11:94:72:8a:2e:41:2c:3f:62:08:96:f4:40:
         67:fb:e4:d0:d5:6b:b1:9b:61:7f:33:90:73:11:97:e1:a6:67:
         d4:cb:58:0a:fe:c2:24:31:4b:a8:8f:71:c6:c8:53:2e:49:eb:
         ff:6f:05:bc:c5:47:92:6b:fa:e3:7d:6d:69:e8:26:9e:bc:ff:
         a8:b4:de:06:52:28:44:a5:d5:f8:e8:f9:e1:a9:1f:62:34:58:
         ed:f9:da:fe:91:02:96:42:30:3e:d0:47:4c:7d:dd:3a:17:73:
         4f:57:83:6b:2a:5a:b9:11:41:a8:98:95:26:9b:5f:c7:33:c5:
         70:19:f1:a3:9a:1c:fc:d1:e2:c8:68:89:1c:62:e5:94:de:b5:
         70:84:a3:6e:69:00:15:9b:b0:d3:42:fc:2f:bb:44:c3:dc:db:
         93:89:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----