This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
File:                     XnzrnJMcsXleInriyGR1UTrkkVw.cer (raw, json)
Hash identifier:          BM+GabjywBu9DiotgvUIN7Oz5EAYecEWFlvRIt1el30=
Subject key identifier:   5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA4FD8C431A92FBCF6EECB18B8113C1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:19:29 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 49597
                          IP: 185.165.56.0/22
                          IP: 2a0b:e400::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:fd:8c:43:1a:92:fb:cf:6e:ec:b1:8b:81:13:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:19:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:a0:db:1d:0f:12:34:03:c3:3a:f4:32:02:
                    fe:0e:12:84:44:f6:89:44:2c:78:52:21:43:ca:25:
                    52:46:6e:8b:ec:b6:fc:e6:c5:50:a5:c0:d0:ae:8b:
                    d6:9f:7d:b7:c7:c5:55:b6:89:29:dc:50:c8:74:b0:
                    4e:fc:67:38:41:49:4d:79:d3:89:28:05:21:23:e3:
                    28:70:92:60:ae:43:49:e1:08:8e:cf:b8:a7:92:d5:
                    24:9d:d6:1b:67:df:64:5d:98:23:ed:3c:93:9a:3d:
                    5b:2b:c2:f7:58:9b:a8:70:04:0c:3a:4a:86:52:f5:
                    4d:cd:ee:db:ac:89:8b:4d:16:1d:e5:c3:01:76:a4:
                    70:74:f2:96:e9:97:0f:aa:3b:12:64:01:0f:89:d8:
                    dc:db:bc:b0:43:ed:9b:01:76:82:f1:04:dd:7b:ed:
                    1f:21:37:72:3b:84:b1:88:24:81:3b:6b:3c:ff:57:
                    d3:fb:0a:97:6c:70:ab:f2:e7:2f:97:15:53:77:21:
                    af:43:54:df:cb:56:01:f8:11:e5:f4:e8:14:3b:09:
                    ff:c3:64:89:5f:51:a1:84:64:40:20:3d:56:c1:fe:
                    6a:17:36:b4:ce:fa:82:73:e9:db:c0:c0:6a:45:3d:
                    58:73:de:b7:0b:a8:9d:72:c1:93:51:8f:5d:ff:49:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.56.0/22
                IPv6:
                  2a0b:e400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49597

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:c8:d4:d4:26:13:84:73:b1:38:aa:7f:67:81:37:75:ed:
         54:95:ea:3c:4f:b3:c5:58:01:61:cc:3a:49:fe:7b:67:05:f9:
         7d:be:0a:ec:90:a4:75:f7:fc:c5:19:36:f9:36:89:42:7d:a8:
         05:37:b1:33:e1:ee:bd:7b:17:9d:ba:b8:e7:02:35:43:38:44:
         75:17:e8:26:90:b1:af:dd:10:fe:cd:bb:dc:0e:06:37:d9:b4:
         65:21:3c:31:4c:21:75:37:e9:e8:15:57:83:20:be:8c:3c:87:
         b9:36:8a:d8:3e:f2:bd:b1:1d:e6:2a:28:ee:c4:d6:cc:59:e3:
         c8:3a:1f:70:32:b9:b5:77:67:65:27:35:e7:f5:c1:1b:c5:c0:
         c5:a6:1e:51:7f:af:46:36:da:13:4a:4d:17:46:1f:41:db:74:
         49:58:7c:f8:56:bf:10:fc:7e:0d:6b:52:9f:07:67:d7:78:ef:
         f8:12:3c:a3:1e:d6:29:28:d5:c9:44:f7:9b:5a:50:98:86:a8:
         1e:f9:03:b0:b2:75:2d:96:cb:af:ce:d0:65:57:20:42:6a:52:
         72:f6:13:61:1b:3d:e6:1d:3c:05:5f:7f:fa:58:86:e9:73:24:
         1f:85:d6:cb:8e:ac:21:a7:96:96:72:4a:db:5a:f9:e1:af:46:
         b6:39:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----