This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
File:                     W1mW18RE1mpSvKEBsGynOKf8qps.cer (raw, json)
Hash identifier:          KnAOFKMmzMd7iX775DuUsDwDPKWJTXS9hNxVUSy32F0=
Subject key identifier:   5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F82DA60A4EF2DCAE7458EEF9F33A58F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:20:40 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 47759
                          IP: 178.173.0.0 -- 178.173.123.255
                          IP: 2a07:3480::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:da:60:a4:ef:2d:ca:e7:45:8e:ef:9f:33:a5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:20:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:a8:2b:f7:6a:fa:06:9c:1e:b4:1c:ce:b3:
                    85:7f:bd:42:61:bf:c9:46:3e:26:0c:cf:fc:7e:b3:
                    26:2d:de:88:ab:e1:f7:7a:c4:ce:a3:f2:56:6e:5c:
                    12:00:bb:6f:78:ee:c1:2c:bf:e6:80:20:19:20:b4:
                    86:28:33:41:65:2c:c9:04:29:7f:eb:1d:d8:a2:e6:
                    af:e1:d2:fc:12:1e:4f:dd:13:e2:fa:4f:d4:09:58:
                    c3:02:ff:55:26:b9:3c:39:2c:bc:d3:50:50:f8:8e:
                    ae:50:87:ce:e9:33:f4:7d:11:b1:14:01:cf:a6:7e:
                    ad:84:6e:4c:e1:55:f3:7b:56:18:38:f3:21:38:2c:
                    9a:e7:aa:8e:5c:98:56:f4:ab:a5:02:95:63:6c:8c:
                    e0:90:17:df:f8:21:db:35:73:22:84:81:5c:1d:de:
                    90:51:8f:d3:f4:08:ee:19:78:3d:27:b8:3c:4e:fc:
                    ed:f7:3b:87:37:81:35:f4:eb:16:5c:72:b3:35:d3:
                    3b:64:59:33:b4:cb:a6:34:6b:14:72:b1:d8:9b:2b:
                    07:2d:7c:e2:15:50:c9:6a:76:04:e7:86:22:e3:bb:
                    17:ab:aa:5e:39:19:9a:ab:5c:09:73:5b:db:9b:6b:
                    f8:5b:0d:f9:25:a4:a3:9b:bc:c3:c6:61:cf:cb:6b:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.173.0.0-178.173.123.255
                IPv6:
                  2a07:3480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47759

    Signature Algorithm: sha256WithRSAEncryption
         49:2a:f4:95:f8:4b:95:2d:82:c2:29:f2:f9:ea:ab:3e:5c:0c:
         23:7f:9e:de:f7:21:8a:0b:f9:ca:fd:33:19:03:48:1e:67:92:
         86:47:7f:d0:be:8f:9a:d8:db:84:80:c4:fb:4e:29:75:0f:1a:
         78:c8:ab:ce:01:63:f7:9d:c9:71:0f:4c:6f:3a:21:42:bd:0b:
         db:20:cf:45:b7:94:c3:d1:f1:68:f2:d1:b3:04:e2:a0:3d:27:
         57:b0:de:2b:21:b0:43:3d:1c:29:00:36:46:b0:ef:82:fa:da:
         eb:98:76:68:c4:6c:ff:17:51:e1:9b:7a:fa:85:8c:38:de:1f:
         a8:c7:cf:bf:32:fb:d4:68:b7:22:0e:b3:12:89:9f:d7:dc:18:
         f5:83:06:19:c0:65:b4:42:5a:af:64:1e:e4:85:8a:3d:9a:bb:
         3a:5f:d6:26:3b:42:bf:14:6e:48:92:0e:b0:6e:84:9b:89:72:
         18:90:e0:b2:24:0c:ff:11:30:79:28:e0:07:70:1b:cd:70:55:
         4a:e3:cd:cd:01:4b:6e:ab:ce:74:a5:be:c2:00:de:eb:14:a0:
         8e:b2:f1:56:66:94:b0:b6:13:ed:11:f7:05:76:cf:42:6d:01:
         7f:fc:8a:4e:53:01:aa:4e:4f:7c:cd:d5:ce:b6:19:d3:14:79:
         03:61:2e:8a
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZt/gtpgpO8tyudFju+fM6WPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjU5OTZkN2M0NDRkNjZhNTJiY2ExMDFiMDZjYTczOGE3ZmNhYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1SoK/dq+gacHrQczrOFf71CYb/J
Rj4mDM/8frMmLd6Iq+H3esTOo/JWblwSALtveO7BLL/mgCAZILSGKDNBZSzJBCl/
6x3Youav4dL8Eh5P3RPi+k/UCVjDAv9VJrk8OSy801BQ+I6uUIfO6TP0fRGxFAHP
pn6thG5M4VXze1YYOPMhOCya56qOXJhW9KulApVjbIzgkBff+CHbNXMihIFcHd6Q
UY/T9AjuGXg9J7g8Tvzt9zuHN4E19OsWXHKzNdM7ZFkztMumNGsUcrHYmysHLXzi
FVDJanYE54Yi47sXq6peORmaq1wJc1vbm2v4Ww35JaSjm7zDxmHPy2vJ5QIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFFtZltfERNZqUryhAbBspzin/KqbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2L2IyZTRi
Zi0xN2FjLTQ2OTAtODZjNy1hNDBlYTQ3YjY5Y2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvYjJlNGJm
LTE3YWMtNDY5MC04NmM3LWE0MGVhNDdiNjljYy8xL1cxbVcxOFJFMW1wU3ZLRUJz
R3luT0tmOHFwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF
BwEHAQH/BCYwJDATBAIAATANMAsDAwCyrQMEArKteDANBAIAAjAHAwUDKgc0gDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAuo8wDQYJKoZIhvcNAQELBQADggEBAEkq
9JX4S5UtgsIp8vnqqz5cDCN/nt73IYoL+cr9MxkDSB5nkoZHf9C+j5rY24SAxPtO
KXUPGnjIq84BY/edyXEPTG86IUK9C9sgz0W3lMPR8Wjy0bME4qA9J1ew3ishsEM9
HCkANkaw74L62uuYdmjEbP8XUeGbevqFjDjeH6jHz78y+9RotyIOsxKJn9fcGPWD
BhnAZbRCWq9kHuSFij2auzpf1iY7Qr8UbkiSDrBuhJuJchiQ4LIkDP8RMHko4Adw
G81wVUrjzc0BS26rznSlvsIA3usUoI6y8VZmlLC2E+0R9wV2z0JtAX/8ik5TAapO
T3zN1c62GdMUeQNhLoo=
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:52:34 2026 by rpki-client