This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.cer (raw, json)
Hash identifier:          fb0MZNch8XjHGwMSYe1lNaQTiweL4qhHYpeCukyIk30=
Subject key identifier:   4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7B36CC641B6BD50D3F862CADD8ED94A0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 20:19:07 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 24995
                          IP: 94.199.160.0/21
                          IP: 185.194.188.0/22
                          IP: 193.201.60.0/22
                          IP: 2a02:680::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:cc:64:1b:6b:d5:0d:3f:86:2c:ad:d8:ed:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:b6:e6:a8:e0:07:91:75:86:be:26:0a:6d:
                    62:1c:8b:12:e3:0d:37:b2:fc:7f:cc:41:5f:3c:b1:
                    33:66:34:68:48:d9:4d:f9:e9:e7:fd:a4:43:d8:d6:
                    6a:d0:ae:ce:e3:f9:8e:1d:bb:a5:29:d5:4f:c4:80:
                    91:5f:c8:51:5b:65:a0:b6:17:10:ef:3a:3f:14:69:
                    15:e4:8d:1c:31:11:41:23:62:58:b9:bb:ae:b4:2e:
                    b0:8e:3a:11:72:c7:78:67:c9:1b:ee:44:a4:df:5b:
                    81:da:42:23:1b:b1:e5:a9:a5:81:ae:ec:9e:2e:63:
                    3d:55:fe:9e:11:58:80:7d:5d:d0:f8:42:6a:8b:4e:
                    17:57:97:44:05:0f:70:a6:dd:a4:38:f6:80:27:70:
                    95:fd:d6:26:87:3b:49:90:e4:a7:9c:43:4c:70:3b:
                    a0:e5:83:3f:30:84:ef:2b:21:8f:3b:19:92:6c:7f:
                    8e:f7:43:a8:2c:d8:87:d9:4c:25:ff:5b:5d:ed:f3:
                    1c:8a:bd:36:8b:d4:09:f7:a5:5b:ae:ef:4e:c6:ce:
                    fc:3b:77:ed:59:7f:22:c0:59:4f:77:8c:5a:1b:69:
                    1a:7f:77:3f:3b:95:94:43:81:b6:df:2d:be:56:93:
                    63:dd:bc:a3:16:7d:26:25:39:e1:75:ee:6d:ed:bc:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.199.160.0/21
                  185.194.188.0/22
                  193.201.60.0/22
                IPv6:
                  2a02:680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24995

    Signature Algorithm: sha256WithRSAEncryption
         ac:03:84:c0:2f:ca:ac:02:21:63:0c:74:31:73:2a:cd:43:df:
         91:49:a1:97:04:47:dc:c0:a2:76:94:07:b3:45:9f:63:c3:f3:
         7a:e6:32:e3:64:b8:a1:e1:2e:a2:dc:53:c1:89:e9:cc:65:3e:
         c6:3f:22:12:6f:5d:c7:47:77:ac:e4:0f:49:d1:72:00:43:38:
         59:b2:54:96:88:63:3a:f9:19:bb:bd:60:a6:04:af:e2:95:b3:
         1c:58:bd:1b:8b:bd:ef:d3:5a:09:77:b5:16:04:05:c4:30:d7:
         1c:31:27:c6:c7:3d:cb:7f:23:99:0c:4d:a1:1d:55:e7:21:7d:
         7d:df:31:a0:74:33:f9:f2:bd:9f:4a:79:d5:79:b2:7d:1c:47:
         a1:8f:44:17:eb:79:d5:4c:8a:b9:8f:21:c6:d9:7d:34:47:c1:
         85:d5:8f:38:94:68:79:b8:f4:58:1f:ca:c4:e4:2e:eb:77:71:
         33:c2:b2:e1:a5:31:d1:06:95:e3:3a:7c:31:7d:15:c4:17:b0:
         0d:27:22:1c:3d:2c:1b:76:02:10:8b:1c:08:f4:fd:2d:74:a7:
         54:bb:2b:aa:85:f3:bc:94:ab:ca:02:31:9a:b1:28:d2:9c:2d:
         04:78:5d:5f:3d:a6:d1:ca:dc:e4:91:be:8f:1c:ed:93:de:9f:
         1d:54:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----