This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
File:                     _C71HmsUo-6_tImOD6gTq2eIUTY.cer (raw, json)
Hash identifier:          ukL7UQAO4jiUUXNKiFlphICL7DezgB0LAoQvXuhnP8c=
Subject key identifier:   FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7FF2A5FD9A073198E9DEC719233E357B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 18:22:47 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 44441
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:a5:fd:9a:07:31:98:e9:de:c7:19:23:3e:35:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 18:22:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:2a:f4:f7:8f:a7:fe:d8:cc:7b:e6:9a:ee:
                    19:bf:e5:7e:ec:90:df:38:61:6b:f5:69:99:7c:fa:
                    80:cd:13:78:6f:84:88:c2:e5:ba:f1:c5:fb:4c:26:
                    c3:88:d7:75:dc:fe:58:74:2a:64:e0:0a:9f:dd:15:
                    7c:f2:97:d9:d7:8c:f1:e2:bf:bb:03:90:b3:e8:10:
                    67:b9:5a:83:20:c2:01:af:c5:99:2f:ba:51:46:80:
                    f9:b5:8d:a5:9f:f4:4c:1d:a6:1d:57:e5:fb:eb:a4:
                    63:d0:6a:ec:2a:47:cf:85:1f:ae:9e:51:ca:68:06:
                    2a:94:6f:a2:fa:2b:3f:84:64:b3:f7:45:98:ea:df:
                    3c:d9:86:36:76:b8:35:9e:66:ef:08:a0:5f:72:42:
                    5e:73:6f:c4:77:70:cc:fe:5b:48:28:42:a5:2e:57:
                    95:8a:34:e3:5d:cc:4d:80:90:0a:63:e6:40:76:c5:
                    48:f9:df:37:d7:8c:93:05:92:be:1f:57:0a:f9:9b:
                    6b:1d:a6:8d:69:79:8e:1e:64:78:a0:40:0b:b5:f6:
                    7e:a1:60:cc:ff:52:7d:09:e1:4f:52:da:0d:f5:9a:
                    ea:25:96:ae:b1:e2:cb:ab:ee:63:e3:b7:0a:bb:3e:
                    6e:30:16:e3:d0:3d:45:d3:c4:40:16:b6:17:29:fa:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44441

    Signature Algorithm: sha256WithRSAEncryption
         34:7a:85:00:15:b3:58:5f:2e:05:95:23:8e:ee:67:3a:d5:be:
         d4:5f:58:20:a2:6c:d5:1d:80:60:36:fd:bb:ab:8b:40:4a:a0:
         ae:84:aa:78:79:65:70:05:e3:42:b4:16:a6:31:00:ff:e7:60:
         f8:23:ec:e3:cd:c7:bd:b2:8d:9e:18:06:23:4c:6d:11:b7:c9:
         4f:00:b6:53:61:6d:0d:8c:ca:13:1b:55:9f:2e:db:bd:83:fd:
         47:c7:66:8e:a7:a3:5c:ee:a3:b0:ee:53:9c:e5:f8:dd:0f:f8:
         fc:63:34:49:0a:86:86:06:77:66:a2:19:d2:8b:91:eb:8a:16:
         87:71:96:70:e3:8e:60:54:90:04:88:9e:39:94:80:f3:b7:71:
         f4:ff:6b:b5:f9:c9:8f:45:cd:69:90:f8:d0:99:e1:ad:62:85:
         87:0b:c7:79:73:bc:d5:3e:9c:c0:19:33:6b:88:8c:db:44:8a:
         24:49:f6:96:03:9d:26:8a:51:dc:30:3e:ab:0f:ee:60:3d:28:
         da:6f:a2:c9:db:df:5c:bd:dd:99:cc:d6:8c:48:8e:f1:bc:6f:
         57:7b:c5:7f:9e:f3:d6:01:fe:19:39:e9:0c:0e:c3:a0:95:20:
         19:c7:35:a3:cc:1e:1e:70:fd:a7:c9:68:c5:3c:6d:d2:91:c9:
         f4:06:ec:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----