This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer
File:                     Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer (raw, json)
Hash identifier:          BMmtrZZXELUDvh/MctJ9MINOMHsOX4RtwvTXmMLZ+9w=
Subject key identifier:   56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79ECE9DB0FC2260971794A543929D06B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:18:48 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 211210
                          IP: 37.252.221.0/24
                          IP: 2a0b:96c0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:e9:db:0f:c2:26:09:71:79:4a:54:39:29:d0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:a6:27:b8:17:d1:ce:52:45:be:11:e5:78:
                    4a:8b:39:ce:f5:16:8e:f6:e9:a4:be:86:99:a6:f3:
                    fe:47:a5:0a:01:1c:6e:fb:97:c7:eb:4d:d6:c7:c5:
                    d4:bc:8e:0f:f4:3e:ac:ba:b7:5d:d1:bc:8a:75:01:
                    4a:64:53:4e:3e:df:bc:82:96:3d:64:4f:f8:6d:d6:
                    60:1c:ab:c5:de:b2:7c:d7:f2:32:37:34:fc:f6:67:
                    0c:80:08:6f:82:e2:da:4c:83:ff:c5:19:f7:2e:fa:
                    1f:2f:13:90:28:bd:e1:0e:54:b0:68:83:a2:2a:99:
                    b0:79:c0:a0:c2:89:3e:d9:ea:8a:d2:ab:63:51:74:
                    82:0a:9c:53:1b:47:b7:14:cb:22:51:73:d0:8d:65:
                    b3:2a:90:b9:6a:a6:a7:f2:b5:32:be:f5:e5:2a:85:
                    82:2b:2b:21:87:3c:82:16:9a:fa:7d:b5:0e:2d:42:
                    d8:06:6b:61:40:8d:6e:72:53:57:89:88:8d:36:84:
                    78:84:cb:9c:de:9d:52:9f:ce:3b:35:c4:e0:80:6f:
                    22:8b:48:d3:1a:d0:f0:92:0b:fc:ac:44:b2:b5:a2:
                    e0:a6:74:a7:0d:69:dd:3a:f8:55:2f:40:15:d5:b5:
                    3d:30:21:37:10:70:ea:c4:11:b5:8f:c2:83:e7:62:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.252.221.0/24
                IPv6:
                  2a0b:96c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211210

    Signature Algorithm: sha256WithRSAEncryption
         7e:ed:b1:31:15:e6:88:50:3f:ab:2e:a0:60:7a:d3:03:8f:cb:
         a5:c0:3b:64:53:a2:16:38:29:15:a9:3a:e6:84:05:28:00:68:
         0b:7e:dd:40:fc:eb:d0:47:c5:ad:fb:3c:19:86:7f:78:5a:78:
         02:05:f8:99:60:3e:ac:ce:47:b9:da:d2:1d:0a:9e:2d:9b:e5:
         6d:02:6b:94:89:0e:bd:ca:c5:33:c9:3c:47:8d:2b:18:61:fe:
         8c:25:dc:38:50:0d:28:42:ac:bb:e8:90:36:0a:86:98:10:54:
         a3:67:8c:d9:56:2b:85:40:e4:42:db:47:c4:b5:0e:e8:27:3c:
         d7:77:da:b2:b2:46:02:9e:48:6e:b1:06:08:bc:e0:ea:5a:19:
         f8:77:2b:48:b6:f1:9c:15:7b:cf:cf:74:bd:29:4c:2f:1d:4e:
         41:8c:2f:45:1a:67:88:a9:aa:14:f4:a3:6f:43:c0:02:50:86:
         a9:94:5f:3d:93:4b:a3:f5:e3:11:a0:c5:c0:2d:1d:3e:51:5a:
         23:68:13:69:e7:17:8b:94:4b:eb:31:94:56:bb:1f:58:7d:b7:
         b2:9c:54:c5:37:d2:06:54:b5:ac:cd:8a:73:7a:f7:56:7f:a5:
         85:84:ae:d2:83:d7:51:94:23:31:f7:28:e1:3a:36:db:6b:05:
         f2:be:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----