This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
File:                     YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer (raw, json)
Hash identifier:          bg2GdMhy93uuPJP+VCsotcg9TYOfNupzMF91df337CM=
Subject key identifier:   60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B797EA114D3BA2EEA9D747D1006922530
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 12:18:20 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214077
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:a1:14:d3:ba:2e:ea:9d:74:7d:10:06:92:25:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=605abb253b766dcd7f16d9f01bc119691848eb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:b6:ad:a0:61:a1:07:ce:4e:f7:5b:97:6e:
                    3f:af:57:6c:04:ca:ec:5d:32:47:83:85:aa:57:36:
                    54:f2:1d:68:f7:17:60:72:b5:15:fe:bb:7b:ea:c0:
                    d6:02:59:ff:d3:48:83:f9:ea:ba:85:dd:e6:dd:4a:
                    b0:69:60:93:e7:07:ab:6f:52:1b:46:24:af:54:be:
                    01:84:bd:05:f0:ae:fe:6c:89:e2:9d:88:51:40:a6:
                    b7:b1:68:92:62:34:91:1b:9a:d7:b0:59:c6:e1:7f:
                    bc:e4:93:dc:8d:94:c8:62:24:35:e8:a5:ec:54:5a:
                    b7:85:2c:2e:da:75:4c:44:2a:53:66:7c:55:ae:68:
                    c0:0a:9e:a7:23:ea:1f:ab:fc:71:fb:e2:2e:22:78:
                    f2:6d:ab:31:81:ac:97:35:c5:f1:0c:f1:47:e1:24:
                    14:68:83:c6:c2:32:03:05:bc:0c:e4:d7:37:68:f0:
                    8d:26:35:b5:3f:93:ff:09:84:a5:7c:82:2e:84:e6:
                    f0:64:20:9c:8b:c8:f5:8d:bf:5d:c4:d2:24:04:99:
                    f7:79:52:d4:fd:59:97:bb:88:c8:30:1d:90:5f:66:
                    90:6e:c7:33:d8:09:cd:cf:d5:59:2c:ce:99:c6:0d:
                    61:30:b9:70:89:db:4c:3e:ee:f0:2e:eb:11:d3:b3:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214077

    Signature Algorithm: sha256WithRSAEncryption
         0f:44:ee:3a:da:68:0a:3a:32:39:21:8f:9b:cf:21:ad:de:46:
         cf:b6:f6:53:83:20:e3:13:06:da:10:96:aa:7e:8a:27:ad:6e:
         7a:ec:cf:a0:8e:85:90:ed:5e:54:80:1e:06:77:5b:63:90:2e:
         81:41:c7:a1:2c:ca:aa:cd:65:d3:7a:4a:d2:46:73:a7:64:cd:
         c3:e0:7c:da:9b:42:55:25:15:cd:85:c5:23:6f:0d:95:1e:d5:
         84:b9:21:60:82:40:7d:7d:6f:b0:46:bb:de:60:23:cb:f2:77:
         ba:e3:f2:e3:09:c8:d4:23:85:2e:1d:4b:16:a6:3e:9f:a3:4f:
         c9:e3:c7:27:7f:86:da:e1:bd:76:ff:2d:86:57:df:66:e6:4e:
         db:34:df:2f:82:1f:3d:8a:53:01:ba:cd:95:6a:fa:d5:a2:63:
         4a:e9:cb:78:36:92:ec:be:68:56:ba:9c:92:0d:7e:f3:e7:b2:
         07:94:36:a1:d7:29:e1:6a:84:0f:5c:b7:d3:45:3e:65:b2:87:
         f0:dd:4d:fe:3f:80:bd:43:6a:f3:75:40:39:3d:8a:0b:74:e9:
         ac:60:e9:c9:da:a3:14:18:a7:61:25:e4:59:a2:5c:30:da:02:
         7b:62:6a:45:97:35:6b:ce:02:ae:cd:39:f4:44:5d:a9:c6:06:
         17:11:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----