This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer
File:                     UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer (raw, json)
Hash identifier:          s1kw37Shijj3R/lWCrbXICR4W06N+DxiotrdQ6e822c=
Subject key identifier:   51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F83300E2D2D2E0BEE542ECAE043676A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:21:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 205336
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:30:0e:2d:2d:2e:0b:ee:54:2e:ca:e0:43:67:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:21:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:91:be:78:4c:22:e4:9b:99:ac:8a:23:ee:
                    61:23:63:ac:ce:92:56:ba:13:77:45:48:32:7b:81:
                    1f:d5:27:a4:25:00:60:72:10:d6:55:a2:b9:fc:20:
                    a0:45:be:c2:dd:23:8f:6b:ab:c6:44:02:49:db:0e:
                    6a:fa:58:a6:f5:3b:3f:08:4a:a3:2b:26:a9:12:c3:
                    74:f2:fa:01:2a:f1:30:ef:9d:b1:32:61:81:d6:58:
                    4a:58:6d:6f:2c:47:32:45:47:9a:2e:06:e8:ff:c6:
                    00:a8:75:fe:36:76:22:9c:d1:91:71:79:29:94:d8:
                    e4:d9:bb:86:d3:ab:52:2d:0a:a7:20:ca:66:cd:43:
                    69:c3:4f:bb:c8:3c:42:4e:77:3e:8f:bd:6a:10:b0:
                    51:73:01:76:2d:f9:be:a9:6b:e0:91:ec:44:f2:8e:
                    74:a7:8f:99:f7:1f:b6:f2:37:66:68:15:9b:a8:f1:
                    5c:f0:d6:d0:4d:65:b1:78:ae:d4:82:42:e6:17:01:
                    1c:22:29:e8:d8:9f:5c:42:18:f4:f4:cf:2b:7b:a1:
                    ac:79:5d:ea:49:59:a9:05:e2:84:43:37:1b:73:72:
                    fe:b2:43:ec:6c:74:61:b8:7f:47:4b:8f:4e:bf:64:
                    e7:2e:04:b7:da:fd:ac:94:65:96:5d:bd:0b:d0:3b:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205336

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:c0:80:d2:c4:66:bc:3c:0b:14:b2:06:2d:c8:de:60:6b:
         37:f9:2b:50:60:4e:39:6b:a8:96:42:8f:af:69:be:93:c1:b8:
         6b:23:92:8a:47:29:97:8e:71:b6:e8:9f:04:eb:03:56:0f:c1:
         30:69:4d:b5:ca:87:8b:5a:94:4f:25:01:f7:7a:76:14:be:92:
         35:af:b3:a0:fe:9a:3a:70:bb:1e:e3:03:bd:e1:be:b7:48:c2:
         a1:3d:97:9a:76:f8:9a:fe:11:be:0b:76:50:6f:0e:ae:25:11:
         b2:ca:23:57:bf:e5:76:a1:5e:cb:01:ac:a8:6f:9e:9d:8e:33:
         76:70:45:d3:7d:94:06:53:8b:8d:e2:7e:f1:8c:15:c5:84:9f:
         b9:bb:a4:c1:8d:57:61:bc:11:5f:64:0c:82:16:a9:c8:f9:90:
         82:2b:6e:57:04:29:f9:a0:da:3f:03:42:49:58:dd:ab:82:27:
         3a:d0:3f:4d:30:49:aa:de:58:ee:23:64:d0:39:79:e4:59:04:
         c6:8f:3d:e0:f3:17:2c:b2:87:16:db:33:10:30:c5:39:91:39:
         45:5e:2a:c0:39:99:2b:65:53:a4:eb:44:f6:9c:d9:7b:c6:b3:
         ea:74:31:c6:a9:eb:ad:15:02:a8:29:fd:cf:37:19:db:da:73:
         64:5f:5c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----