This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer
File:                     WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer (raw, json)
Hash identifier:          GbM2p6OelM3z4WocVUnyWPmhxoJc4pKTUDkxqGHGCb0=
Subject key identifier:   58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7AC84ADABCB0B882B51C4461F85FE6E5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 18:18:25 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 3278
                          IP: 194.180.0.0 -- 194.180.5.255
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:4a:da:bc:b0:b8:82:b5:1c:44:61:f8:5f:e6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58ec149761a5d84b8c49e2c9936bbb748033fe66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:32:4c:fc:dc:30:62:7f:79:86:93:ba:8e:de:
                    bf:92:45:72:90:25:a4:4f:70:61:79:10:f3:36:d8:
                    c4:87:40:fe:d9:5e:a6:ab:df:c4:7b:eb:6a:95:d9:
                    74:ea:2a:36:94:4f:bd:38:8d:3e:86:2b:6c:0c:5c:
                    4c:35:0a:3d:78:95:02:f6:64:2c:36:85:5d:56:f9:
                    a9:1e:ab:b6:b0:5c:ad:b8:d9:57:2b:04:75:b8:e0:
                    a5:ef:b6:fc:f1:a6:31:e1:a9:4e:a4:8d:57:e7:b9:
                    c6:b4:1c:84:d4:7d:83:78:6b:75:27:76:ee:a8:94:
                    60:bf:d4:68:fc:3e:ee:f1:9e:09:e0:97:55:a5:ec:
                    6a:f2:f9:ad:1a:22:37:dd:01:0a:b1:f7:3f:d9:32:
                    b6:7e:6b:24:6d:86:10:11:ff:d0:48:19:de:11:6e:
                    80:30:d8:bb:cc:00:bb:4e:a3:22:75:86:ac:0d:e4:
                    ec:25:3e:4e:c6:22:b3:4f:55:2b:3a:96:7c:b0:b3:
                    9f:50:c0:27:d0:c3:8d:55:fe:b2:70:c9:be:a9:37:
                    99:37:fd:28:c1:1c:62:f3:51:2e:d2:cc:48:5c:eb:
                    6e:15:90:19:9d:45:57:7b:11:ba:2c:dd:12:85:1f:
                    b8:30:9a:99:d0:86:a3:91:ea:64:98:27:21:d8:19:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.0.0-194.180.5.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3278

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:1a:11:65:b1:da:35:03:5e:88:d3:2e:98:c6:d2:56:83:
         5a:cd:fd:2a:85:b7:34:f6:4d:5c:b3:68:a4:d8:95:c5:bc:95:
         a8:96:e5:20:a8:83:b3:d4:f0:7f:17:a3:68:00:1f:8c:e7:76:
         6a:f5:6b:6f:3d:e4:45:0e:1b:11:11:9f:13:58:9c:22:be:d1:
         b8:30:68:59:9b:25:05:8e:46:f4:ff:7e:c6:29:c3:0b:82:8a:
         ec:98:91:f1:0d:b4:b7:7a:70:6e:23:f4:79:56:0e:e0:e6:f2:
         22:c1:5b:3a:88:31:4e:cb:55:91:40:9c:c9:3b:fa:cc:84:12:
         84:b3:93:86:96:db:8e:a9:c1:c3:8d:06:2c:02:01:3f:e0:47:
         fe:e2:3c:46:7d:f6:c5:48:6f:d2:53:5f:3a:30:27:b1:58:25:
         14:3d:5f:24:38:c3:54:62:9e:22:3a:e8:f5:83:d0:59:f3:f9:
         a8:5b:0f:9d:a9:f5:a9:63:9f:e6:21:2f:53:27:f5:a1:9c:29:
         89:cd:a9:81:ac:91:49:31:56:34:14:5b:29:b0:c9:92:8a:3c:
         73:8e:6b:09:95:b1:0a:4f:1d:94:62:78:d9:14:ab:f5:e7:50:
         67:38:7e:51:07:54:c5:e2:da:09:36:7d:a1:23:d5:98:41:be:
         25:2e:c2:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:07 2026 by rpki-client