This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
File:                     Ywmu_236ieZ1g35FRSEjXJmxvi8.cer (raw, json)
Hash identifier:          qsTIqIeR2Uj18Emu9Ru5PD5hMvoQQI9fAgeocIMVBmw=
Subject key identifier:   63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A2FDC99B9A74B26F7072F016AE662C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:18:26 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213696
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:fd:c9:9b:9a:74:b2:6f:70:72:f0:16:ae:66:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6309aeff6dfa89e675837e454521235c99b1be2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:9f:a0:b4:29:5f:8f:17:cf:b9:f0:85:45:
                    8c:c3:0a:af:52:82:db:c6:1d:c4:d0:c0:31:8c:28:
                    9f:8a:79:ed:86:68:ff:34:ef:f8:86:df:f0:2a:ee:
                    1e:a7:88:08:33:f9:fb:ea:02:8b:b8:09:d1:0b:cb:
                    5d:84:0d:3f:c0:d0:fd:28:22:bd:4a:07:f4:aa:6e:
                    88:d8:08:c0:22:d6:7e:84:44:d0:e4:50:32:e3:f4:
                    40:48:ac:bc:a8:2d:78:88:97:66:ba:06:2d:56:ba:
                    43:d9:15:93:d3:1e:08:3f:8f:81:68:c3:ef:04:37:
                    35:3b:43:00:df:51:5a:18:ec:de:58:c3:97:91:76:
                    06:16:4f:6e:7e:fb:b7:0d:13:6e:8a:95:82:56:96:
                    f3:72:cb:65:63:b9:8e:19:b2:47:af:d6:6f:87:43:
                    a8:92:6d:92:88:f3:41:ff:67:55:cc:2f:77:5e:27:
                    fe:12:db:a4:a2:1a:5e:86:2c:c0:a3:41:74:bd:d9:
                    80:ac:93:8b:63:99:d4:d1:d5:4a:a6:b5:84:b8:1d:
                    85:c3:6d:dd:e9:89:17:23:ed:23:89:8a:42:6b:d5:
                    77:8c:1b:55:fe:5c:ff:fc:c6:17:9a:44:57:1a:10:
                    ef:af:db:66:12:87:8b:c6:b9:66:d9:6d:19:4e:4e:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213696

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:9c:88:58:ac:a6:19:01:42:2b:91:e8:1f:74:6e:ac:2d:
         79:bd:65:b3:1d:9a:a2:b4:2b:af:56:a3:22:91:9e:77:42:98:
         0a:5d:93:98:d3:36:9d:fe:34:91:f6:22:d6:b6:1e:e3:f4:04:
         7d:f1:6a:4f:db:76:6f:a4:b1:88:bb:c4:1b:c1:d8:d1:11:4c:
         0b:96:6e:4b:df:27:5a:4c:8b:91:78:81:36:d3:37:90:1f:e4:
         95:c0:5c:c2:59:53:01:dc:d6:a1:d0:64:2d:ac:5f:e4:71:bb:
         34:65:fe:ab:6b:fe:8b:f8:d1:dc:5f:fe:4b:41:15:81:1a:6d:
         89:87:e9:f5:e4:af:84:f2:6d:24:06:0c:67:52:e3:3e:ae:d0:
         cf:a9:00:fb:83:1d:f2:c9:91:3c:1e:6f:7c:42:18:5b:c4:37:
         15:ee:43:37:d2:37:db:b6:0d:32:50:89:42:27:1f:6b:f5:78:
         fe:01:26:f7:0b:62:5a:77:78:cd:3d:14:93:75:a4:a1:8f:ba:
         e6:fb:ea:64:04:51:f7:ea:f2:1a:7a:6d:28:a5:b3:0c:c4:15:
         20:2c:4b:77:20:77:4a:95:fe:a0:08:0c:f9:e1:72:fa:cb:33:
         da:f4:ad:83:e0:36:4f:0c:67:0a:f1:82:65:7c:d0:42:9d:2f:
         14:3c:3b:42
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt4ov3Jm5p0sm9wcvAWrmYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzA5YWVmZjZkZmE4OWU2NzU4MzdlNDU0NTIxMjM1Yzk5YjFiZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzqfoLQpX48Xz7nwhUWMwwqvUoLb
xh3E0MAxjCifinnthmj/NO/4ht/wKu4ep4gIM/n76gKLuAnRC8tdhA0/wND9KCK9
Sgf0qm6I2AjAItZ+hETQ5FAy4/RASKy8qC14iJdmugYtVrpD2RWT0x4IP4+BaMPv
BDc1O0MA31FaGOzeWMOXkXYGFk9ufvu3DRNuipWCVpbzcstlY7mOGbJHr9Zvh0Oo
km2SiPNB/2dVzC93Xif+EtukohpehizAo0F0vdmArJOLY5nU0dVKprWEuB2Fw23d
6YkXI+0jiYpCa9V3jBtV/lz//MYXmkRXGhDvr9tmEoeLxrlm2W0ZTk5N1wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFGMJrv9t+onmdYN+RUUhI1yZsb4vMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzc5YzU5
ZC1mZGIwLTRiNzctOWE1MS1iOGRhYjI5MDhmZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvNzljNTlk
LWZkYjAtNGI3Ny05YTUxLWI4ZGFiMjkwOGZmMS8xL1l3bXVfMjM2aWVaMWczNUZS
U0VqWEpteHZpOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNCwDANBgkqhkiG9w0BAQsFAAOCAQEAF7iciFisphkB
QiuR6B90bqwteb1lsx2aorQrr1ajIpGed0KYCl2TmNM2nf40kfYi1rYe4/QEffFq
T9t2b6SxiLvEG8HY0RFMC5ZuS98nWkyLkXiBNtM3kB/klcBcwllTAdzWodBkLaxf
5HG7NGX+q2v+i/jR3F/+S0EVgRptiYfp9eSvhPJtJAYMZ1LjPq7Qz6kA+4Md8smR
PB5vfEIYW8Q3Fe5DN9I327YNMlCJQicfa/V4/gEm9wtiWnd4zT0Uk3WkoY+65vvq
ZARR9+ryGnptKKWzDMQVICxLdyB3SpX+oAgM+eFy+ssz2vStg+A2TwxnCvGCZXzQ
Qp0vFDw7Qg==
-----END CERTIFICATE-----