This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
File:                     XgJGv_4E4tbx4ZOf5jhqJN_N964.cer (raw, json)
Hash identifier:          sMQJspjwtuMr6cLrLf0YWcyJ/HxoGny8foCHD5XzRnQ=
Subject key identifier:   5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A35927B094F03BE4B4C8410587B290
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:18:49 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.69.205.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:59:27:b0:94:f0:3b:e4:b4:c8:41:05:87:b2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:82:22:39:ed:91:b9:1a:88:4d:a6:95:2b:
                    18:12:d6:4c:45:dc:ed:7b:68:ef:4e:0f:90:8e:ce:
                    2c:44:12:31:91:d0:84:18:f5:9b:59:81:12:6c:ae:
                    81:6c:50:61:bf:73:1c:59:66:9b:3f:02:af:50:71:
                    f3:c4:f2:b6:34:44:9d:1a:e1:e1:c8:88:88:17:fd:
                    60:f2:c4:3c:86:96:38:29:08:56:d7:12:4e:f3:a9:
                    a4:75:2e:76:f4:be:12:e3:7e:7a:5c:96:0f:4d:48:
                    3b:0e:23:54:ec:6c:fd:71:73:0c:e4:1f:09:b3:64:
                    09:70:41:33:e0:1e:af:a1:f3:0e:fa:ef:a8:12:e7:
                    48:50:38:dc:c8:4e:8a:3e:4b:84:6f:0b:5d:48:b1:
                    3a:73:5d:3d:47:38:1b:a8:6e:bc:b6:6a:40:d0:99:
                    40:fe:b4:7c:59:6c:47:7f:9c:f1:1b:54:c0:f0:6c:
                    9c:92:2b:0c:f5:15:37:ec:47:26:bd:d8:04:0e:fb:
                    51:9b:60:b8:03:d1:db:4b:07:09:99:a1:74:08:2f:
                    46:ad:09:08:99:3a:cb:76:3b:e9:df:28:b1:52:04:
                    af:4f:17:0e:07:92:de:8c:07:46:ac:04:73:f4:95:
                    3a:80:e0:99:29:d4:04:dd:1c:ef:5e:0f:66:c5:c2:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.69.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:eb:38:3a:3b:29:0e:14:5d:57:7c:72:aa:d3:e0:e8:f5:
         d5:c3:9f:1f:16:99:d8:48:3c:d4:1d:cd:71:96:75:d1:b2:a9:
         47:76:ca:78:57:48:56:eb:7d:b0:3d:43:0b:b0:7a:96:9c:48:
         ff:a5:a4:c4:d6:81:84:e1:6b:0e:60:0f:3a:58:92:49:8e:5d:
         5e:96:ac:cc:76:01:66:d0:a9:d0:a3:55:84:e8:74:6c:88:a2:
         02:77:29:56:81:b7:b7:1e:64:ac:29:7e:2e:42:8f:a6:a2:15:
         8d:9b:6f:f3:64:46:05:02:38:45:be:03:1e:6f:78:8a:65:21:
         02:d9:b1:cd:57:48:9d:8c:3a:3a:1d:70:42:a0:b0:ab:ae:a5:
         f5:f5:83:9a:73:11:52:2d:fc:47:e0:f1:ac:8b:a4:ab:fe:1e:
         7c:7c:fc:7a:b9:8d:f8:31:93:e1:33:51:66:f3:cb:10:f6:f1:
         ae:b0:12:41:3b:b2:53:3b:4f:18:a9:21:bb:c7:27:49:cd:aa:
         a8:d2:48:74:dd:57:90:63:cc:3a:e7:05:c6:76:b0:81:b9:1f:
         3c:be:01:4b:34:1a:69:9c:26:d1:90:f3:4c:23:a7:1a:0a:d9:
         25:05:10:6c:7b:26:ab:fb:1c:d0:12:48:90:ee:b1:30:dc:ca:
         04:d1:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----