This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
File:                     VtTyDkiCB7AltwAA0I5lOmQ895A.cer (raw, json)
Hash identifier:          svWbFe9v/fvTbN0mXYA6Ap5eTxkGd/BU0RoNIBigHZA=
Subject key identifier:   56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019C0410E6B857D50F1601C90A7DF9F37E18
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 28 Jan 2026 10:05:42 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214171
                          IP: 78.41.137.0/24
                          IP: 2001:39c0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:04:10:e6:b8:57:d5:0f:16:01:c9:0a:7d:f9:f3:7e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 28 10:05:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56d4f20e488207b025b70000d08e653a643cf790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:c3:10:97:00:f7:6d:6d:7c:72:5b:5d:38:
                    85:9f:8c:5a:c7:9e:55:c2:93:4f:49:25:ba:9d:66:
                    06:25:76:e8:ac:c5:74:8d:19:2c:78:ca:bf:25:14:
                    ee:dc:a0:ff:57:52:f0:ef:76:8b:cd:78:eb:80:12:
                    a5:2a:23:4e:0e:84:95:cf:19:71:2b:38:54:e1:07:
                    09:86:25:45:45:fd:4e:98:c3:18:e3:3c:79:b8:46:
                    64:b0:e3:44:cb:62:d4:af:f5:26:a7:9f:ab:02:c2:
                    26:59:c9:cb:3d:62:6b:50:7a:20:67:30:17:40:82:
                    e2:76:30:04:40:d2:48:19:08:e3:b7:8d:a1:79:b5:
                    ec:d5:74:7a:3d:87:13:80:f4:d1:82:a1:59:72:1d:
                    06:ee:26:8f:66:45:37:3e:80:93:8e:8d:a8:30:c7:
                    d2:f1:9a:7a:da:3c:88:99:61:d4:bd:00:15:8b:8e:
                    7c:cd:3e:d7:32:94:a5:be:46:6f:50:7e:56:c8:d7:
                    9c:a8:4b:59:b5:68:62:34:a7:52:38:a2:ff:98:b6:
                    04:c4:95:b5:40:35:ed:84:f7:17:5f:b5:05:59:84:
                    38:ba:6a:0b:9e:12:dc:02:55:52:a2:6e:f4:9e:fd:
                    e0:32:59:68:9d:c9:99:6f:36:b2:a7:83:9d:a2:9f:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.41.137.0/24
                IPv6:
                  2001:39c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214171

    Signature Algorithm: sha256WithRSAEncryption
         98:a8:44:12:1e:b9:49:bb:29:d9:f4:37:8b:58:62:2c:17:4e:
         ab:25:a8:d0:fa:dd:e6:e9:a2:0f:0e:f3:75:d9:41:96:5e:1f:
         d9:79:9f:81:3d:62:16:0a:9a:16:88:e4:fc:b4:34:2e:84:6d:
         ee:ac:bf:d4:28:59:60:54:70:b5:e0:20:30:cf:9e:8e:cf:a3:
         ab:30:67:e4:de:5a:9f:90:ce:ab:cc:36:1e:80:fa:28:bb:f7:
         98:6f:53:59:52:c2:84:55:52:28:4e:81:fd:00:3a:d1:9a:81:
         b2:62:40:10:d9:03:0e:e2:27:fd:06:0b:48:93:60:37:ac:a0:
         cd:c7:f0:6f:fb:2f:d7:b6:1f:97:e1:f2:bf:a4:30:b1:82:2a:
         3f:48:97:2d:56:f0:9a:c4:d5:33:7d:45:5b:7b:f2:93:3b:40:
         07:6d:dc:ab:b1:29:3b:60:40:73:cb:73:82:ee:55:af:29:cb:
         f6:3b:d8:5c:4a:d2:cc:7c:97:40:8d:9f:ad:52:8e:b8:8c:f0:
         3a:07:ff:3f:a5:2a:6d:bd:ec:22:c7:2e:c5:93:f2:ad:37:ac:
         2c:8b:7b:69:d9:50:f4:91:6a:2c:a7:82:26:f0:bc:af:d0:9b:
         18:7a:1e:44:a5:6b:d8:ba:63:03:7b:db:de:75:c1:76:9f:09:
         63:c7:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----