This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
File:                     WZypahnO8ifMM7NFhZaqRV0rePg.cer (raw, json)
Hash identifier:          0bRbaWdfVNl/tvDKzwZPbuFby0oRq52BMpoD0NdH8us=
Subject key identifier:   59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F15FA372C24FA243C3A8976AA89C1D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:21:45 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 44733
                          AS: 50917
                          IP: 2001:678:7ec::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:fa:37:2c:24:fa:24:3c:3a:89:76:aa:89:c1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:21:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=599ca96a19cef227cc33b3458596aa455d2b78f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:af:da:fa:88:f1:bb:23:8f:f6:f7:11:c7:
                    ac:dd:b0:aa:5c:74:04:47:78:48:d7:a7:86:aa:70:
                    51:c1:d0:c3:e4:28:af:77:e0:e6:ca:e4:79:d2:f3:
                    f5:73:44:da:2e:76:b9:d4:3b:29:7d:f7:fc:e1:2f:
                    80:e7:cf:3a:89:3e:35:43:7c:73:aa:ec:1c:52:2f:
                    37:72:b9:7b:67:c5:35:c4:4b:52:aa:4b:73:f0:3d:
                    61:bb:8a:47:c2:ce:ad:53:7b:19:93:f9:88:56:56:
                    65:9d:90:93:0a:a2:b8:03:3d:d1:7a:c4:3b:f4:79:
                    68:de:3f:08:9d:c8:b0:90:bf:cf:a6:ca:35:86:0e:
                    64:29:15:03:7b:35:4c:2c:77:97:2a:a8:1a:59:63:
                    a9:99:f0:56:4e:53:7c:72:48:55:3e:a8:f6:59:4b:
                    a8:4c:0a:e9:95:29:f7:d2:af:0a:3f:c2:ee:db:46:
                    fc:35:db:0c:5f:ca:c9:5f:d8:47:e8:75:e3:01:b5:
                    0f:4b:7d:6c:f4:12:3e:36:eb:a7:58:ec:b5:18:ab:
                    80:be:c3:8f:36:fe:86:10:8e:6e:ca:0c:b2:de:67:
                    51:f5:c8:b2:bb:4a:2a:37:09:c4:c8:33:3b:97:32:
                    13:fd:ff:ea:1c:87:c8:e3:7e:1c:40:4a:5a:a0:26:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:7ec::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44733
                  50917

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:27:86:25:42:7d:ae:e0:48:5e:c4:04:5f:72:1e:0c:e4:
         dd:65:0d:8e:7c:23:05:fc:3d:11:cc:8d:42:78:20:54:d5:e4:
         d8:d7:70:34:ed:4d:bb:9a:aa:4d:fc:59:3e:be:71:05:c6:62:
         0e:04:ee:b9:3d:4e:d0:f1:22:d0:a8:24:c1:aa:28:2b:db:3d:
         6f:2f:0f:8b:42:51:e5:ca:68:46:23:72:40:c6:13:64:9b:0c:
         99:9e:24:58:ab:27:ce:d4:4a:96:c5:43:82:d8:1b:5b:2a:02:
         e4:27:9e:c8:3b:9a:d5:b6:72:ef:11:62:ae:6b:1d:94:9e:91:
         c9:ae:b5:e8:cc:b5:c5:fc:76:e8:7e:71:2d:ab:45:ba:0e:68:
         02:b9:bd:3d:65:f4:fb:a3:94:76:ce:bc:09:2b:e4:72:75:bd:
         aa:91:71:1b:9b:b0:71:35:df:3c:2c:40:9c:e1:a2:f1:0f:43:
         8c:86:3d:cc:5c:dc:88:ae:46:64:8c:22:e8:60:ad:f9:a9:23:
         c9:82:6b:da:43:38:94:da:c7:0e:e5:7f:4a:0f:25:a1:63:b6:
         8f:3a:ba:af:39:1a:95:e8:f0:21:0b:62:17:0a:b1:9e:46:31:
         2e:41:d7:95:a1:64:75:60:98:f3:2c:0d:26:c0:68:d5:21:e4:
         45:d7:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----