This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
File:                     TF_Sw94QWTTPD_SdJtnciFjOXdE.cer (raw, json)
Hash identifier:          7tZEZRAtpXJRRvWw3DrvpdJC1N+p4s1L/dw6QDpe+0g=
Subject key identifier:   4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F1537045142042A2C6AC7E21A8839FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:20:55 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 199876
                          IP: 185.32.244.0/22
                          IP: 2a00:c8e0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:37:04:51:42:04:2a:2c:6a:c7:e2:1a:88:39:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:20:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:f9:f7:e5:86:e1:ae:18:51:e3:33:e8:99:
                    ca:be:cc:f3:57:61:03:73:a9:6c:44:68:57:2d:95:
                    28:6f:d8:ff:f0:8d:72:c6:2c:9e:e7:e9:ba:76:f9:
                    23:2f:64:83:d7:09:33:ce:6b:bf:d4:15:b2:d4:e2:
                    c1:c4:f2:bd:51:c8:e4:f4:5d:60:cd:11:88:af:b0:
                    08:14:a8:e4:19:32:eb:ad:40:1a:ea:7e:26:f7:fb:
                    ae:5d:17:ee:5d:cd:45:16:7e:bc:6f:05:4b:5a:3d:
                    b5:1d:07:58:d0:08:66:20:0e:56:39:cd:47:71:c8:
                    bc:27:89:95:0a:3b:49:77:40:8f:aa:3b:25:f2:6c:
                    cb:4d:88:0f:ca:72:9d:43:54:20:97:d8:e8:c0:09:
                    5d:4b:4a:ef:87:1c:53:9d:ff:29:c4:6d:12:af:73:
                    fc:f5:1c:38:2c:a3:6b:b4:5a:ca:ef:21:9f:63:f8:
                    ca:e1:da:33:0c:ff:31:1d:ae:1e:60:ee:01:c2:1b:
                    b4:73:52:ad:66:7f:2c:6c:48:f1:bb:e5:e5:34:b4:
                    a1:52:7e:a3:90:d3:5d:88:c0:0e:4b:62:e7:64:fb:
                    6c:6b:3e:fb:b1:c2:5d:93:01:96:0f:0b:35:7e:63:
                    52:fc:15:6b:5c:07:50:47:ae:78:5a:3a:03:0a:1f:
                    19:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.244.0/22
                IPv6:
                  2a00:c8e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199876

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:f8:17:3d:aa:24:92:bc:b7:f6:3c:37:e2:a5:e9:6d:09:
         58:ca:30:b2:69:98:96:2c:af:ff:0c:72:9a:6f:1d:84:3b:b4:
         bc:4f:68:d2:e0:30:cd:a5:f7:f1:86:7c:65:1a:56:af:b8:2e:
         af:5c:51:d9:e1:7b:35:d2:5e:2f:f5:76:86:96:23:b9:b3:84:
         73:49:22:ad:15:71:c8:79:fe:d5:33:ae:f8:05:56:0a:3e:f7:
         00:55:20:a8:0f:a8:7c:cb:d2:61:2f:7d:8a:d5:fc:cd:53:50:
         03:5d:b5:62:44:39:4b:eb:18:a6:50:32:d5:f3:a8:77:b7:0c:
         71:11:ed:25:d2:91:db:c1:98:9d:56:5a:44:ac:9e:49:10:c6:
         29:7d:04:8e:df:cc:2a:b2:8b:9b:c3:ca:50:e5:f2:67:0d:33:
         1a:71:96:07:2a:87:35:9f:a9:85:2e:63:68:1c:1a:7a:a5:03:
         19:51:4f:1d:10:19:f7:e3:24:3f:ca:c8:dc:c2:8c:4d:b6:17:
         eb:51:8f:6e:0d:71:51:22:8a:2c:1b:de:08:fb:1b:59:f2:65:
         3b:96:88:36:76:d3:b6:47:28:cf:32:61:07:1d:84:06:20:18:
         84:7e:f4:02:9d:9d:aa:df:bc:ec:65:f8:3c:ae:82:4b:14:55:
         5d:13:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----