This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
File:                     UNlf0yarPwj3bczGVrs-Hia03Fc.cer (raw, json)
Hash identifier:          4qVaTO2z6jJSHsKoFMmDHFxqV3+J3HXKFgM+FzTNS3Y=
Subject key identifier:   50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C6F8D06C705FFDBA45CC23028190B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:07 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 204620
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:f8:d0:6c:70:5f:fd:ba:45:cc:23:02:81:90:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:34:81:5f:90:29:c2:a9:c4:98:ba:02:ae:
                    b3:4e:1c:d1:65:10:70:2c:ec:e2:1c:93:28:91:70:
                    ae:cb:58:a8:4f:ff:e9:f6:49:cf:71:75:93:d3:55:
                    82:44:28:8b:38:80:a8:89:99:af:7e:35:1e:92:a0:
                    9a:85:c3:f9:75:57:fa:33:85:d4:0c:d8:55:c3:61:
                    94:d4:4d:93:5f:8e:90:4b:1f:09:f3:18:2d:4f:a1:
                    21:44:f6:1f:64:62:f8:16:e2:f8:61:5f:e0:9c:9b:
                    83:b1:21:a1:19:3d:fd:50:78:8d:25:50:60:44:0a:
                    55:14:12:86:d5:8f:a2:d9:d8:03:d9:71:65:7a:16:
                    f8:8b:79:fd:74:d1:20:c5:99:7b:99:22:ff:d0:10:
                    76:45:a2:0d:01:3d:b7:5a:41:2f:3c:7a:a5:08:05:
                    12:d9:dd:3e:38:4f:02:75:b9:9e:7f:e0:71:83:16:
                    5a:3f:1a:d5:7d:62:a1:04:31:ec:05:7e:e6:3e:c9:
                    1b:c3:65:92:2c:89:a9:f4:44:61:89:8c:f6:7c:b3:
                    5a:2e:47:88:13:0c:e1:8d:c9:b2:14:cf:8b:d1:c1:
                    08:0f:34:21:bf:97:52:88:1d:d0:73:e8:11:1b:fd:
                    d4:e7:24:e8:02:18:f1:41:49:12:e3:6f:75:08:98:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204620

    Signature Algorithm: sha256WithRSAEncryption
         80:84:4b:72:15:63:7b:18:99:64:f5:48:ef:bf:61:41:5d:4c:
         42:1a:68:9e:d7:dd:75:3c:f4:00:09:4a:d2:94:5f:43:3c:2f:
         4a:d5:06:73:09:9c:79:fd:19:05:6b:34:b2:d9:e0:87:9e:06:
         b3:2b:bf:57:83:18:37:bb:fe:48:bf:eb:93:fe:ab:c0:56:ac:
         f8:a7:07:a9:55:f9:82:64:48:ed:bb:d0:e2:68:d4:e1:98:33:
         02:df:a2:d8:53:fa:54:a4:7e:2f:0c:14:ec:5a:83:88:2d:a2:
         f3:67:4e:92:5a:a5:9d:06:9d:e5:86:8e:37:8c:94:40:c0:62:
         59:7b:b1:65:fd:64:34:00:92:f0:d2:5f:1f:da:37:eb:a0:90:
         c5:f9:40:0c:0c:0b:f9:ae:b5:3e:70:0b:47:76:1e:7f:4a:fd:
         f3:55:c3:03:89:b6:0a:3d:02:3f:74:f0:d8:ca:05:50:33:dd:
         ba:a0:5a:b7:47:ff:50:ed:c1:e2:0e:d3:42:1b:b2:34:cc:23:
         93:70:b7:4e:e7:37:fb:d2:17:d6:8e:a7:09:ad:2e:2f:40:3c:
         47:27:da:ae:73:a8:51:36:79:44:18:cf:42:12:f7:64:bb:0f:
         2c:dc:86:a6:87:85:0a:f7:40:6a:63:5f:61:41:f6:3d:69:8a:
         b3:03:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----