This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
File:                     _a9B0EvGh9D_mK19QHaEdRxGyj4.cer (raw, json)
Hash identifier:          H0OgPmmAf9uLY7Hw9NnmT2SbcWj2fgbyxRKYP2dquZs=
Subject key identifier:   FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79ECE11FCA936ADDC231A88E3314EC70
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:18:45 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 206268
                          IP: 185.190.176.0/22
                          IP: 2a0c:3fc0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:e1:1f:ca:93:6a:dd:c2:31:a8:8e:33:14:ec:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:13:2c:66:30:e6:5d:55:28:f6:a9:e4:bd:
                    20:00:e9:7f:16:cd:5d:5c:07:6f:14:e9:d6:e3:94:
                    be:d9:30:e8:66:23:de:2a:c2:c2:4e:31:72:ca:1d:
                    de:5b:68:fc:9a:0d:eb:db:0f:70:b2:8e:a7:ec:af:
                    09:bd:0b:99:1c:37:fe:64:aa:f0:c4:be:1d:ce:c8:
                    f8:b4:03:46:22:8d:29:2e:c3:45:bf:1a:44:77:9f:
                    ea:da:4f:0f:72:9b:f5:bf:8b:ec:03:27:8d:b3:bf:
                    f4:79:4c:0a:83:30:27:7a:11:62:8c:b7:9b:34:02:
                    18:9a:5d:1e:4b:f8:40:80:88:5c:42:21:d4:ad:76:
                    92:6e:06:95:65:36:94:eb:e4:4b:bf:a7:64:e4:c7:
                    ed:27:e9:f1:a6:dd:94:0c:24:87:01:56:39:5c:e1:
                    66:3f:cc:4e:01:51:37:ce:30:46:fd:4b:c0:57:b7:
                    cb:ec:46:7a:06:b3:99:78:72:e6:b5:6f:7a:06:05:
                    e4:5d:b8:c2:8c:d7:ab:ec:13:8c:98:54:ee:55:f2:
                    db:35:76:91:b5:dd:58:a1:9f:72:73:cb:1f:23:a4:
                    36:ef:4f:c1:a6:12:35:2b:11:dc:7a:f5:b0:1d:d0:
                    c5:62:fe:d1:64:10:c9:27:1a:4f:3b:71:03:34:4b:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.176.0/22
                IPv6:
                  2a0c:3fc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206268

    Signature Algorithm: sha256WithRSAEncryption
         98:ec:98:bc:36:15:47:76:01:7e:a2:a3:61:2d:fb:af:51:53:
         06:29:06:a6:00:72:0e:68:e6:f5:b4:3d:2a:97:99:1a:b0:7e:
         e2:b2:26:da:c2:ff:3e:23:ed:64:a5:a1:c7:6b:d1:f6:4f:0f:
         39:63:04:8d:ed:c0:81:e0:9a:4e:76:49:1e:50:b1:10:31:5b:
         b6:38:08:e8:c5:3b:8a:55:e3:32:82:bf:36:70:9b:9b:59:26:
         57:29:f1:eb:f4:1b:87:70:2a:cb:1a:fa:3e:17:da:49:4a:a0:
         b7:46:95:63:06:e5:1c:04:39:dd:ab:54:f3:ee:19:04:91:6c:
         75:35:1e:81:c5:88:91:17:3a:46:d3:1e:67:8e:69:59:9a:f2:
         d7:27:05:af:8c:94:21:f1:79:fe:25:5c:7f:a8:79:51:ae:f5:
         12:53:16:dc:9c:ca:71:f7:63:1d:80:f5:ae:d8:25:50:17:ed:
         eb:64:09:3b:19:36:6c:10:b8:e9:96:a1:b5:47:2b:94:e5:de:
         9a:d1:1f:f7:79:ed:12:33:fe:92:b1:27:69:00:b1:3e:06:f7:
         6d:9c:d7:d4:0c:d2:92:10:c9:74:0b:61:1f:fd:bb:67:8b:74:
         e7:1f:1f:0b:57:7b:66:24:12:a4:8b:56:77:be:e5:ba:cc:c7:
         3b:8b:64:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:50 2026 by rpki-client