This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
File:                     V0zsR2DtovCf62939yFCvmmbuMM.cer (raw, json)
Hash identifier:          8Kg7JLHdEAF9bOj0Tg5wQ8PshNiSpxJiNrJPONb/l80=
Subject key identifier:   57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C76608AEDC6A26338F2CD84D3F5BDF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:35 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 81.90.180.0/22
                          IP: 194.76.36.0/23
                          IP: 194.76.46.0/23
                          IP: 2a0f:2440::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:66:08:ae:dc:6a:26:33:8f:2c:d8:4d:3f:5b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:72:92:14:52:75:e1:0a:e2:bd:11:ff:7a:ca:
                    8e:42:1f:52:41:3a:04:f6:34:71:b1:6e:8c:0a:3c:
                    42:a6:4a:d3:df:14:14:d2:df:39:3d:c8:b9:0c:95:
                    bf:82:57:9a:ce:b8:2a:7e:97:1d:06:ad:b9:1a:33:
                    2a:68:6c:e0:df:3a:5a:91:e3:d0:33:fe:f6:21:b6:
                    a3:b5:b5:58:ac:f7:a7:d1:f1:e7:39:d8:81:1f:e5:
                    1c:2c:fc:31:d9:d9:7e:d0:8b:9c:bf:26:88:00:1b:
                    44:74:c2:4e:0c:22:e3:fb:1a:43:8b:3a:27:c2:2c:
                    98:b4:87:c4:e3:11:3d:20:4f:1c:16:57:f3:57:95:
                    cf:cd:00:88:4e:68:4b:89:0e:0a:2f:24:c8:e2:36:
                    e4:22:f6:36:3e:58:d8:84:76:bc:b4:3f:c4:f9:8d:
                    74:8b:0d:20:ad:70:9d:9b:94:44:43:75:f5:08:e9:
                    29:ed:d1:e7:46:ff:94:60:e6:97:97:12:60:14:23:
                    0c:e9:bb:de:9d:d5:b8:c0:09:a6:0f:b3:b2:ee:4a:
                    d5:9f:cc:6a:ac:03:2e:98:e3:32:2c:12:16:c7:09:
                    41:15:54:0b:a0:95:42:d3:c8:22:72:21:97:89:90:
                    ed:62:ec:05:02:54:51:f3:55:1f:72:ac:1b:d1:cf:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.90.180.0/22
                  194.76.36.0/23
                  194.76.46.0/23
                IPv6:
                  2a0f:2440::/29

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:24:b3:66:9b:6d:a1:a4:5d:3c:27:50:7c:7a:87:d4:e9:
         31:33:6a:89:b1:55:b0:84:36:37:12:13:d6:06:5f:f2:5a:36:
         f6:26:d3:a1:de:3d:12:46:ef:38:34:40:31:9f:5f:dc:e8:a2:
         b0:5b:c6:e8:2e:06:42:2a:44:0e:32:90:ca:66:e6:9e:c6:61:
         5c:19:4c:45:9e:a4:d1:b2:56:39:00:84:92:81:b7:34:3b:1b:
         5a:03:2e:8b:12:48:74:14:32:1b:ae:e6:f1:62:95:d4:4c:80:
         e5:c8:2a:17:fa:f3:85:c4:a5:16:12:c2:4b:09:8a:74:ed:31:
         5d:94:3d:40:a5:b2:aa:64:35:74:0d:47:50:32:a8:92:12:6c:
         bc:d2:54:dd:2e:e5:2f:e6:d7:ed:b0:1a:b2:b7:3f:2e:d0:c6:
         70:7e:b5:0d:43:ab:df:a7:5c:73:cd:4f:ec:32:77:94:a2:8e:
         a6:ee:ec:44:47:e5:df:93:f8:b4:c9:d2:bb:d4:0a:90:22:4d:
         18:8c:0e:14:f5:29:d2:cc:1b:af:9b:ea:cf:a0:6d:b9:b1:43:
         5d:5d:bf:51:04:a3:e9:87:cb:ea:ea:0e:85:fb:15:9d:1b:49:
         c3:69:97:6d:c5:50:3e:84:94:ef:fc:55:67:24:82:d5:7e:42:
         6a:70:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:06:16 2026 by rpki-client