This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
File:                     Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer (raw, json)
Hash identifier:          cNKKwPiMBrHSEZ7qV14NyMsQexDwXiQqDk9Ulc+JW7E=
Subject key identifier:   62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B783460B497A0F3731B8C08E8377C715E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:17:37 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 39128
                          IP: 195.114.96.0/23
                          IP: 2001:67c:2974::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:60:b4:97:a0:f3:73:1b:8c:08:e8:37:7c:71:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:4d:5b:16:83:79:41:03:10:63:c3:fd:f3:
                    ba:6a:98:dc:0b:b7:d7:7a:ef:6b:7c:d2:ad:a5:d5:
                    54:dc:82:52:50:2a:f4:cc:28:c7:ca:d1:6b:c5:7d:
                    76:1e:74:a9:94:35:58:55:10:3a:aa:93:5a:f1:b3:
                    6c:cf:b6:3b:bc:b1:54:f7:54:dd:7b:0d:d5:9c:94:
                    1d:88:90:0f:52:f1:8c:10:59:09:a0:0e:8f:ef:63:
                    33:70:15:8a:07:43:55:30:a7:ca:95:89:56:5c:2f:
                    0c:43:dd:04:4c:21:86:25:7c:51:5b:3d:1b:92:fd:
                    2a:33:8a:3e:3d:3e:84:67:c7:1a:dd:6e:be:71:8d:
                    12:b5:2c:93:10:50:4d:fc:20:b3:0b:6b:f8:7e:9e:
                    c7:87:6d:95:d2:7b:e6:33:f4:42:38:25:25:f0:4e:
                    f1:49:73:fc:8b:cb:c9:66:3d:53:cc:ae:5c:ad:e2:
                    39:d3:b5:42:fe:8c:1b:39:d6:2e:0f:53:a8:4b:e9:
                    e2:e1:50:99:99:19:06:53:10:dd:9e:04:8d:c6:9e:
                    49:d7:c2:ce:12:2e:83:ae:76:6c:18:7d:57:ec:06:
                    c6:d7:3c:e2:8e:0b:15:e8:88:83:19:87:68:b4:1f:
                    20:e7:6b:e0:91:e3:80:3f:6f:db:55:f7:9f:e7:19:
                    5d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.96.0/23
                IPv6:
                  2001:67c:2974::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39128

    Signature Algorithm: sha256WithRSAEncryption
         77:a8:bd:22:09:fd:40:1b:5a:a6:fb:77:e0:bf:8d:4e:26:58:
         23:7c:a2:58:bc:d8:45:89:ed:94:25:08:3e:85:d4:e7:b3:57:
         fc:86:36:00:9f:dc:d8:ea:62:80:88:c7:68:6f:2c:04:5e:e7:
         84:f8:20:6f:5f:0b:b5:f1:8e:05:26:91:1d:8b:cf:5a:95:90:
         1f:03:67:d0:b2:67:00:15:72:84:73:e0:01:3e:35:71:43:3e:
         62:cc:63:c5:49:74:fa:5d:38:32:ba:ed:e7:71:cf:df:ea:b1:
         4d:49:db:4b:a3:40:ae:35:bc:7f:69:ce:6b:2b:c8:3b:51:09:
         92:a5:0a:78:31:49:d3:b7:9c:09:f0:99:27:b7:75:f0:65:58:
         cf:dc:9f:d0:c7:54:b7:e7:bb:22:e8:0b:6f:0c:28:48:ad:be:
         9b:f2:c5:43:12:b2:f2:59:99:6d:16:61:b8:74:06:15:76:78:
         37:a4:0f:ae:ee:68:ee:58:0b:6d:18:f9:59:36:06:9a:cd:46:
         03:de:94:02:63:05:42:bc:e6:72:59:58:3c:c8:d1:4f:4f:23:
         e6:2d:fb:11:52:4a:ee:8b:87:02:ea:b3:4c:1f:4b:af:6d:45:
         96:2b:dc:24:63:98:fc:b2:b2:f9:14:7e:80:d0:c3:8c:85:44:
         ce:52:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----