This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
File:                     R_hjAUxgM_HYkkKz5elWFIn5wmo.cer (raw, json)
Hash identifier:          MjcukRcdKSDRqOEMFlpvk/VQHJuIqXKV6pqNun87ffI=
Subject key identifier:   47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5AA1AF1429068E0760F1F6F7B4EF86
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:18:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 205965
                          IP: 92.42.205.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:a1:af:14:29:06:8e:07:60:f1:f6:f7:b4:ef:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:e7:53:6c:e9:38:d9:70:83:07:79:f3:9b:
                    19:fa:48:5e:56:d3:db:a2:e4:a7:50:7f:a0:22:ee:
                    f4:b0:d3:35:0a:b9:3c:00:b0:3e:17:30:11:f0:12:
                    8e:58:9b:bf:9c:16:d7:c8:cd:e9:3b:6b:ff:e5:0e:
                    7a:2d:c3:77:07:f4:e7:8c:4d:50:ea:21:9e:00:8e:
                    f4:ed:ea:f3:b4:41:13:aa:fb:62:20:a2:3f:6d:d6:
                    4e:88:80:57:cf:6e:0d:9f:98:20:fc:be:a2:1e:ae:
                    a2:6c:51:25:8b:0b:6f:c4:9d:f4:a2:4e:8f:d6:df:
                    81:d1:47:38:5c:28:00:7c:93:29:0b:2c:67:f9:10:
                    2f:05:63:a9:87:7a:92:2b:27:f0:f0:60:48:b0:f5:
                    e8:3f:1e:ba:c0:16:45:ef:58:25:a7:2a:ad:58:c7:
                    30:8f:12:b0:a6:8e:c7:32:44:58:68:15:15:d8:26:
                    10:57:5a:9b:38:6e:bb:92:96:8c:e9:86:ca:55:a2:
                    52:89:36:32:95:f4:71:9b:b5:81:68:36:88:34:6e:
                    9c:be:44:73:95:ba:1b:a7:b7:82:6c:c7:c2:f6:8c:
                    07:75:f6:70:1c:45:eb:b8:d2:13:66:11:df:69:60:
                    01:af:fc:ec:36:8e:f3:dd:c5:85:c9:d2:0c:be:07:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.205.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205965

    Signature Algorithm: sha256WithRSAEncryption
         27:af:a7:23:c1:ab:d9:33:35:a3:18:89:1c:75:7a:94:26:07:
         4f:0e:86:98:8c:4f:2f:48:9e:c1:6c:03:33:5d:6c:83:cd:8e:
         99:0d:a6:78:ce:4c:2f:60:9a:cc:ec:96:64:62:48:6b:69:3c:
         02:39:fa:50:76:25:82:fa:e9:1c:34:bb:6e:8d:e9:53:76:86:
         a3:06:79:d0:4f:68:c2:39:d9:08:b6:a9:ff:76:7a:f9:43:01:
         f0:68:6a:75:61:4b:f4:95:fb:f5:1e:77:86:75:29:07:4d:d3:
         20:c4:ae:79:23:96:4b:34:27:d8:64:40:a5:3c:74:93:39:6c:
         19:c5:db:98:90:47:45:fb:8d:34:2a:42:e2:34:69:78:de:04:
         36:5b:ad:bc:4c:0f:28:b0:7d:d3:f2:84:d6:e6:60:33:97:e1:
         1f:3e:ac:6b:03:68:0e:ab:ea:8b:99:66:09:0a:6c:98:48:09:
         3e:9f:e1:32:53:3e:1e:3c:4b:11:86:3c:64:77:86:2b:6e:99:
         62:f1:b0:25:b6:01:3a:c1:ec:43:34:dc:71:5c:79:43:1c:76:
         3e:e0:b4:79:38:82:7a:c7:11:a7:a3:35:8f:9c:31:d9:7b:56:
         11:67:22:0e:47:50:25:48:9f:9b:9d:66:e0:63:21:39:8a:0c:
         30:e5:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:55 2026 by rpki-client