This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
File:                     Y4zEB87_V7E7SUVfMMILdhx5ErU.cer (raw, json)
Hash identifier:          w9JhqwqKpLSvTocwwfyBAyAv572uRkhtt193oQXIk1E=
Subject key identifier:   63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5D2AA7A4637C016B3DA7C830B4BFD0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:20:16 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 44841
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:2a:a7:a4:63:7c:01:6b:3d:a7:c8:30:b4:bf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:20:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=638cc407ceff57b13b49455f30c20b761c7912b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:95:ce:54:9a:ee:9e:cc:e0:06:b3:0d:7c:
                    05:9c:ba:f5:26:eb:90:42:01:45:9f:b6:75:47:3a:
                    a2:8f:32:45:38:7e:d4:8d:5e:c5:33:ea:88:ec:81:
                    cc:ea:37:a3:da:f0:52:2e:e0:0b:f4:31:8e:89:5f:
                    53:bb:4e:0d:d7:64:b1:9e:a6:ba:a5:17:23:44:69:
                    ca:2e:1e:5d:09:b4:17:55:50:20:83:66:4c:d7:53:
                    bf:34:b2:5e:d3:07:8f:48:c9:32:26:3c:ae:e7:17:
                    dc:15:44:dc:65:4b:bc:1c:ae:00:85:21:ca:cf:82:
                    13:4e:17:db:08:ec:aa:2b:77:14:a3:4b:00:43:f9:
                    ea:b5:a9:87:44:66:9c:f2:81:cf:00:7d:13:d6:8e:
                    a8:e7:00:da:f3:d7:1b:fb:c6:8b:a7:66:83:2a:81:
                    67:7e:0c:5f:91:bf:92:54:07:66:4d:2b:05:54:78:
                    37:58:d3:9e:5c:76:eb:64:74:c2:19:20:76:29:c5:
                    17:d6:77:dd:93:88:cf:e2:70:35:4f:2e:87:e9:b4:
                    a6:ec:8a:3a:e7:2e:46:f6:fc:4c:a5:fd:6b:78:3f:
                    39:5c:01:9f:ae:27:6a:8f:d5:8e:57:f0:40:5b:1f:
                    6c:8a:c1:a1:ca:d5:2f:b0:3e:5e:69:3a:57:46:d7:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44841

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:ab:7c:1d:f3:aa:84:fa:e6:df:72:3e:a1:b8:05:44:87:
         20:c5:28:ea:d0:f6:46:bc:79:d6:c6:a8:1d:a1:5f:c6:40:0c:
         ea:62:16:de:7d:03:67:9e:f2:97:21:65:e1:8c:38:69:1b:9e:
         f6:33:6c:35:ee:55:7c:d9:13:5e:35:6b:8a:8a:ba:48:8b:3f:
         27:38:be:34:93:60:43:a2:75:fb:67:f9:f9:8c:bd:d9:76:24:
         9a:87:33:4e:81:ea:66:68:c1:2f:7f:83:18:51:94:b1:51:11:
         9f:bb:d1:54:0c:ea:ea:fd:88:95:23:23:ab:bf:e7:4f:73:7e:
         3e:3b:d1:a0:7c:ad:a6:d0:c1:7f:ed:05:d0:c6:00:94:97:21:
         08:87:79:f3:f1:d7:ff:0f:1c:40:2e:27:5a:df:3d:f4:bc:52:
         df:b2:5a:4d:60:5b:46:5a:8f:a4:6c:15:55:a0:59:94:c9:55:
         21:bd:b1:ee:0d:26:d8:49:da:3b:62:19:d4:da:4d:fc:a8:1b:
         a0:1c:1c:ef:66:c9:ee:c2:51:54:9f:0c:dd:83:23:f1:89:ec:
         ec:57:fc:2a:60:68:e7:b6:e1:b9:7a:02:9b:59:13:37:99:0b:
         e2:56:6f:0a:9c:63:54:28:b4:7f:23:e6:7d:00:c8:ce:6a:2e:
         a3:37:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----