This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
File:                     YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer (raw, json)
Hash identifier:          zx091TRpBEXielmGTEuhxESF/loyuQdX1rkJtVcQ7eE=
Subject key identifier:   60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79ED5AD19B381594C2609F77E4B881D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:19:17 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 211991
                          IP: 185.233.65.0/24
                          IP: 2a05:dd40::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:5a:d1:9b:38:15:94:c2:60:9f:77:e4:b8:81:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:19:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6034561c039ac6450bec8fd595c148cc770aa036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:ce:0d:0c:79:be:ba:8b:e8:d9:f5:7a:5b:
                    45:45:5b:db:82:e8:54:ee:0f:7c:85:c2:7e:26:f8:
                    8a:9d:6c:65:e5:6e:75:be:c5:35:f1:79:87:24:fe:
                    bb:1f:60:a3:fc:cb:c8:6b:5c:78:50:42:d8:bd:aa:
                    c1:42:6f:26:7c:c1:59:06:da:18:39:9f:f6:d4:ec:
                    01:14:be:f3:cf:7f:97:97:92:66:f0:59:69:69:c9:
                    d6:16:20:ee:63:18:e1:5c:ba:c0:c3:70:c4:07:9b:
                    c6:f9:04:1c:7e:fb:ce:76:2a:7d:6b:9e:ab:89:82:
                    ce:7b:83:00:db:94:85:44:7e:d4:82:3d:29:d5:da:
                    d4:7b:fc:b4:03:e2:cd:ae:6f:8b:f0:dc:18:7d:de:
                    64:ad:dd:07:cf:91:24:2d:10:10:dd:0e:78:49:fd:
                    95:49:47:36:1f:a9:07:37:70:49:7a:9c:57:59:66:
                    19:14:a3:b9:97:d6:40:90:24:a8:21:cf:34:6c:0e:
                    82:b7:7d:60:62:43:ee:68:14:f4:ef:be:b8:92:bf:
                    f2:59:26:74:43:2d:1c:26:de:54:9e:19:68:3c:96:
                    4b:47:fa:35:d6:d6:f0:36:e3:df:67:8e:35:c9:58:
                    94:d4:a3:b3:49:0d:2d:c0:31:d1:f2:18:5a:b4:58:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.65.0/24
                IPv6:
                  2a05:dd40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211991

    Signature Algorithm: sha256WithRSAEncryption
         7a:20:6a:ff:a3:b7:e7:89:a9:55:1b:7c:ae:75:03:83:ab:df:
         b9:84:ed:99:71:61:aa:4b:b4:f4:b8:18:6d:c9:b7:97:f7:ec:
         0c:3c:dc:b7:cf:cd:5a:e0:e3:ea:a2:97:53:b1:64:b2:e0:5f:
         9a:70:e8:99:5d:a8:15:b3:95:3c:ad:cc:57:42:26:97:12:a0:
         74:31:97:25:61:96:f3:c8:a0:aa:43:2f:11:40:df:39:83:ea:
         eb:52:b5:24:31:46:b2:22:88:be:ac:5a:d8:29:fd:ba:4c:3b:
         b6:0c:61:86:2e:f3:00:fe:0b:48:6c:41:56:9d:42:8b:75:55:
         d1:48:d9:24:7f:6e:ac:04:0b:97:72:7f:c0:e1:da:a3:4c:42:
         2b:a0:24:92:77:16:a7:f8:d0:02:15:3c:97:37:56:d3:5b:16:
         7b:be:68:f0:a3:47:7d:5b:57:04:80:7d:47:3e:99:5c:28:b1:
         7b:c4:15:b8:ad:c8:d5:57:fc:2c:d1:ed:e9:39:dc:cb:d7:00:
         06:3d:e3:0b:8e:19:97:b2:e1:59:38:fb:e2:8b:9f:61:9f:70:
         72:16:42:c0:50:66:1e:48:14:97:fc:c2:ee:0d:58:ca:71:2e:
         5d:cc:d8:f2:25:d2:88:bc:64:8c:67:68:78:42:07:85:f7:e6:
         40:01:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----