This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
File:                     _N6Mo-LOUrvM5TxKKSbTycQQwEs.cer (raw, json)
Hash identifier:          tum+752i2fHYxiq+rJXzE+Rm4Vzm6qMaLBh6pAf6ss8=
Subject key identifier:   FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7B36A13415B5B8685C2C561F659A23D8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 20:18:56 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 206782
                          IP: 185.176.148.0/22
                          IP: 2a0a:1980::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:a1:34:15:b5:b8:68:5c:2c:56:1f:65:9a:23:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:57:ae:c4:81:c1:45:bd:4a:9e:fd:04:3c:
                    47:e3:f2:c0:4a:e3:33:65:87:e6:cc:27:45:04:c1:
                    35:d4:77:cf:b6:41:97:f0:61:03:47:8c:1e:e2:3a:
                    0f:e1:cb:5f:36:66:a9:1a:19:80:65:49:e8:5a:b0:
                    25:70:a2:06:3f:5c:26:06:2c:05:d6:77:e4:7c:73:
                    62:6a:3c:8c:fc:bf:4c:5c:1a:50:ec:05:6e:6e:d8:
                    2b:01:ee:b8:83:4a:57:dc:53:88:24:20:e5:46:1b:
                    ea:6a:47:08:2f:cf:8e:4e:b7:48:28:d8:12:29:bf:
                    79:84:10:41:84:f0:7a:17:a9:cb:87:c8:84:b8:88:
                    f6:06:f6:5b:2c:d4:55:a7:9e:61:a9:3c:61:7b:47:
                    ff:f7:b5:08:50:39:7b:04:3e:6d:1d:62:a7:4e:12:
                    d4:33:9e:aa:62:8f:de:4d:54:7d:3d:9d:73:a4:58:
                    1b:a8:ad:88:54:f6:57:63:8b:09:f5:4b:db:f1:bc:
                    b0:06:90:0f:bd:1b:97:63:a8:ae:52:53:d8:84:68:
                    95:c0:c7:cf:5b:09:4f:e6:0f:26:53:e6:e8:95:bf:
                    ba:8d:ff:99:03:cd:fd:fb:6a:e5:9d:83:08:a9:8c:
                    3b:85:f7:cf:64:5c:6c:29:3e:0c:67:67:da:5e:37:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.148.0/22
                IPv6:
                  2a0a:1980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206782

    Signature Algorithm: sha256WithRSAEncryption
         34:0c:30:eb:9a:52:ab:75:f6:10:1b:b5:92:c0:f1:4c:70:27:
         39:19:2d:93:71:0a:85:1c:33:ea:bd:a9:27:22:df:f6:f6:52:
         22:ee:16:5d:82:b1:91:15:cc:20:dd:b3:9a:12:d6:07:5e:36:
         a3:d4:b9:d5:bb:5a:ff:3f:ca:98:94:64:3a:4d:fd:e8:ea:41:
         93:2d:b2:fd:ce:fe:7a:4d:da:a5:d5:6c:81:a0:df:32:b4:80:
         06:f6:cc:86:e4:05:c7:48:81:40:db:f3:92:e5:86:c9:9c:8b:
         27:89:92:ef:00:02:c8:3b:b9:73:26:a6:d6:ed:df:c8:52:12:
         01:5e:f0:f4:4b:3d:a0:09:b9:58:ca:99:15:10:0a:50:72:93:
         4f:68:2f:bf:d4:5f:95:db:9b:08:03:e6:d6:57:1a:ed:46:07:
         5b:d1:c1:61:97:3f:f8:d1:66:e7:e7:c1:d7:c9:74:6b:c6:11:
         eb:1c:6e:a5:d2:3d:d3:13:82:29:02:52:18:fa:27:44:e4:17:
         17:44:70:2b:37:b1:b9:62:09:88:7d:52:d0:9e:71:c0:16:5d:
         05:1a:6b:45:db:d1:a9:85:02:27:98:b4:eb:2b:d7:b4:20:a7:
         b2:f9:a1:48:32:de:77:1d:2f:92:6f:67:aa:e8:e6:cc:92:8f:
         b4:32:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:08:17 2026 by rpki-client