This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
File:                     XNTi_CtB6FbbpbpiI1umQaDYG0g.cer (raw, json)
Hash identifier:          33JICTYkf0TQzV7aTzUZJEXzSD4o2UuCf+A2lKgsav0=
Subject key identifier:   5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77592AF761466376466B1ABABA5C08B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:18:11 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 195.42.106.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:2a:f7:61:46:63:76:46:6b:1a:ba:ba:5c:08:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:aa:b5:d4:4f:8b:33:5f:fb:a6:7f:12:ba:9d:
                    62:0b:f1:00:26:3e:91:66:01:d0:05:20:0b:0c:70:
                    b2:61:f2:cf:ca:b8:59:d4:69:1a:a3:c0:3c:9a:40:
                    74:ba:32:d5:18:1d:ec:b8:95:17:c0:ed:12:d6:fd:
                    b2:e0:31:c4:ae:94:85:2c:63:9b:32:05:f9:93:92:
                    04:57:d5:63:6f:1c:b8:66:88:d6:c7:d7:22:6c:d7:
                    85:cf:6e:55:34:01:e6:9b:75:5f:4e:9b:ee:4f:8a:
                    28:00:31:49:d7:b8:47:45:39:13:11:c9:1d:71:5d:
                    bc:73:3f:4b:41:dc:62:73:86:fe:64:92:e1:c9:e9:
                    e4:86:89:74:5a:52:73:8b:21:f1:97:02:63:e6:02:
                    24:40:13:42:1f:8a:10:7e:22:f4:44:f5:ec:10:5d:
                    07:d4:1a:dc:1a:67:8d:ed:14:95:0c:f7:d8:44:ef:
                    f8:d4:48:c0:08:67:ef:58:3f:50:bb:9b:14:40:f9:
                    d8:03:7a:69:2b:09:f8:a7:3a:ab:eb:d1:47:73:a0:
                    bd:47:0b:8d:41:8e:9d:c2:84:5d:ce:74:64:44:85:
                    bd:e2:b8:29:dd:b3:45:0d:fb:ec:3d:3b:e4:fb:37:
                    7a:ac:9e:0e:5d:7f:23:fc:79:06:a1:4a:82:ea:55:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.42.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:fb:35:95:8a:84:6d:79:83:2d:31:c7:82:1f:1a:b0:69:81:
         40:ff:72:88:6f:f4:6f:fc:47:0e:5b:2f:20:4b:f6:59:6f:5e:
         39:58:b8:97:a2:c8:7b:7d:d3:ee:76:25:40:fc:d9:7c:b3:61:
         f2:f1:19:e3:ad:6c:ba:da:eb:66:5e:02:b7:71:04:58:62:18:
         fd:5e:12:4a:2c:de:5b:11:b4:c8:41:21:9d:31:bd:e4:02:8a:
         ec:0b:eb:d6:b3:9a:c5:25:36:4d:c7:44:73:53:9d:24:1f:da:
         52:09:b5:88:c4:18:99:7b:26:7c:ca:fa:d1:11:03:87:f6:f5:
         9e:dd:d3:d2:9d:c5:43:fe:95:60:5c:2e:f0:96:9e:81:2a:b9:
         ca:06:bb:86:52:b3:b3:3c:08:5e:c6:56:3e:d9:46:f1:96:9f:
         07:76:7d:a2:d2:00:90:8d:e4:9b:4a:c8:50:43:61:bb:5d:ef:
         20:36:94:ce:d8:7e:ac:5d:08:54:5c:68:af:46:ca:dd:86:b0:
         db:38:66:bb:93:0d:ba:3a:c3:65:ce:1b:db:3f:1f:7c:2f:48:
         10:d6:d7:3b:ab:17:15:4a:12:0a:8b:8e:eb:25:47:7c:46:49:
         bb:6a:d2:a0:4b:3d:fb:89:ac:3e:65:f3:29:c0:c7:68:58:fa:
         47:f5:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----