This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
File:                     RyjroAE1nN1Bg0b2UcChh8ifur8.cer (raw, json)
Hash identifier:          AbzuES3DMDv6uTSI2V9wQfzNxGO+0q5+0D01smEsD+o=
Subject key identifier:   47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7758C5C9E3BE9821539FAE7BD87DE12B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:17:45 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 198286
                          IP: 91.233.51.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:c5:c9:e3:be:98:21:53:9f:ae:7b:d8:7d:e1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4728eba001359cdd418346f651c0a187c89fbabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:4a:fd:30:e0:8a:ba:96:e9:ac:3d:78:99:
                    a5:42:7e:3a:54:07:13:53:07:f4:78:61:07:87:01:
                    d0:9f:29:54:24:b6:e9:89:8a:bb:1f:dd:91:86:e4:
                    be:59:ec:34:a9:4b:cf:d4:2f:74:21:31:d1:18:d6:
                    18:43:c3:fb:8f:10:c2:85:dc:04:0c:6a:cd:55:4f:
                    7e:c4:82:3d:32:0f:61:d7:1e:9e:48:6a:31:8b:e6:
                    f4:6f:b5:4c:2b:e8:d6:da:e7:c9:3d:3c:fd:9e:7c:
                    90:46:3f:94:f6:d4:5e:ed:bc:7b:6b:67:db:da:36:
                    ff:82:78:78:4d:fb:2c:4f:a1:a1:3c:61:57:56:5c:
                    88:17:a0:07:b9:28:8f:40:a4:9a:5a:f4:79:9b:d7:
                    d6:27:a0:7f:b2:b3:d8:7b:5d:46:b7:ce:f0:db:a7:
                    65:66:d4:e0:22:f2:ce:4c:eb:98:53:3f:60:b3:44:
                    3e:b8:dc:90:63:5c:74:88:c4:9e:99:9f:87:9b:f5:
                    d0:29:62:a4:ae:c3:06:d0:e0:20:38:e5:81:85:52:
                    b7:9b:aa:86:51:bb:8f:25:7f:02:2e:68:f7:e8:56:
                    0d:a8:06:4c:fb:64:52:6a:49:6d:2c:cb:97:44:e2:
                    eb:cd:10:b7:7d:6f:1b:67:79:bd:2c:09:d6:de:e4:
                    8d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.51.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198286

    Signature Algorithm: sha256WithRSAEncryption
         0b:10:10:96:4a:14:1a:1e:92:4f:d5:ad:13:36:e8:e7:c2:4b:
         75:9b:1c:b1:99:c7:fe:5a:4e:c9:4a:4c:e6:4f:4a:18:a3:33:
         d2:20:c9:0f:d2:23:0e:5c:45:d0:76:67:39:c9:f4:6e:99:85:
         cb:bf:5d:31:a5:64:7c:04:c4:2e:a5:69:93:02:e9:4c:d9:8f:
         aa:a4:79:42:9d:ee:86:5e:9a:bb:e9:23:fe:71:ef:11:cb:fe:
         e2:f2:1e:00:cd:d4:7c:e7:5a:a1:21:97:cb:1c:66:39:66:97:
         a7:77:2c:9e:84:d3:ef:5a:6f:8a:16:42:91:d1:c7:c1:b0:dc:
         39:fd:af:fd:10:b6:b9:f5:b8:2a:c2:dc:27:14:24:20:48:b6:
         ec:d5:1c:4e:89:a1:30:59:20:50:34:40:93:60:68:31:0c:14:
         b7:8e:9a:42:f5:db:07:c6:8e:d0:bd:1d:98:e1:e0:f5:b0:45:
         f2:4c:77:95:99:af:14:a7:ba:05:93:ab:48:89:4e:cf:5f:98:
         05:92:20:5e:3a:50:6d:0a:06:86:70:73:d1:ec:bd:d9:14:6c:
         dc:ce:c5:60:70:3c:ee:8f:00:99:23:d6:4c:bc:ff:56:d5:c5:
         8e:13:26:47:0d:56:33:bb:d8:cb:d5:26:b9:48:d0:f4:e9:d5:
         2f:90:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:13:23 2026 by rpki-client