This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
File:                     _Nbe4Pi6PCIpPWLscB7yULzI0uc.cer (raw, json)
Hash identifier:          7y7s4sYOTGlYkm1FywsvkCoDOZ95DjcVAfjBc0cFCEk=
Subject key identifier:   FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C67DFFE54DD78AB009ECED0A1AE846
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:17:35 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 52003
                          IP: 91.221.178.0/23
                          IP: 2001:678:374::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:7d:ff:e5:4d:d7:8a:b0:09:ec:ed:0a:1a:e8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c8:66:63:eb:ca:a7:cd:55:20:dc:65:1c:0d:
                    e0:f0:39:d9:6b:11:cb:36:ee:bb:e5:68:d6:b3:c1:
                    48:64:95:4d:71:fc:a5:c6:2c:10:ba:43:18:b4:13:
                    a6:60:70:93:73:ed:4f:0c:99:dc:a9:5c:f3:37:cc:
                    29:8a:6a:0c:d4:26:b1:2b:76:39:0c:a7:1c:fa:ec:
                    2a:81:ef:10:05:b4:c4:0f:1c:96:45:26:5e:f1:bc:
                    19:0b:f5:5f:4a:26:f8:d6:3d:cc:ba:a1:85:77:4d:
                    90:c7:00:05:c8:f7:3a:f5:6b:33:8b:a9:1a:77:1c:
                    0f:35:b2:b1:7c:29:97:5a:8b:85:e3:c7:cf:15:f5:
                    7a:73:f1:94:f2:97:84:e8:c2:7a:1b:c9:f7:77:af:
                    bb:9d:e2:3c:ef:e4:77:be:21:35:e9:48:b0:57:cb:
                    d6:d3:51:fe:97:24:5e:b4:ef:1a:14:c2:11:d4:9b:
                    c1:eb:37:d9:2d:3d:7a:de:14:f7:a5:8d:ee:e8:c3:
                    91:a9:4a:f0:26:a9:3b:eb:d7:a8:10:67:b2:80:14:
                    d7:66:1b:d0:b5:4f:a6:d2:40:17:d1:95:e2:c7:39:
                    6f:0c:db:87:b7:85:a5:a7:f7:38:dc:2a:43:33:ee:
                    3c:b3:96:09:3c:d9:04:75:f9:02:ce:8d:f9:75:20:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.221.178.0/23
                IPv6:
                  2001:678:374::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52003

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:85:19:b5:ca:53:c0:b6:a5:2d:fc:4b:81:21:8d:ee:2d:
         fc:ff:85:7c:1f:b7:44:0d:42:a7:a5:d6:6a:e4:b7:20:ab:cf:
         3e:eb:75:a3:2c:24:33:b1:5b:5e:bd:a5:56:8d:bb:9d:75:17:
         c8:8c:65:0e:67:13:71:ea:a6:c2:19:1c:a4:6d:aa:10:87:dc:
         35:05:86:a3:eb:55:8c:95:de:3f:42:d2:08:f8:da:59:52:db:
         fd:fe:6b:3d:0b:87:a9:2c:e4:11:e2:10:6d:2c:ab:ee:53:2a:
         04:d5:45:33:13:1a:3f:b3:17:4f:66:9a:4e:94:9e:f2:08:21:
         6e:e4:ca:e9:21:2a:4c:12:9c:1e:2c:fb:6d:b7:89:f9:38:4a:
         6a:be:e7:d9:90:ff:57:1b:89:f4:00:3b:50:52:3f:98:e2:34:
         73:b4:3b:d7:fc:67:53:e4:04:85:a0:14:96:09:35:79:52:1f:
         b9:a5:a3:50:f0:0a:29:e5:30:12:a2:af:17:69:9b:16:f0:7a:
         df:55:53:92:78:b4:aa:b3:af:5d:d0:9a:e9:d6:90:14:bf:8b:
         35:71:ef:78:1b:01:4f:c3:c5:cf:c3:75:3e:72:6f:ba:cf:09:
         e4:ce:f7:44:b6:11:58:ae:b5:7a:e3:df:96:12:33:04:33:11:
         83:40:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----