This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
File:                     aL8cWiHDgluLhlFqGllxIbVLPMM.cer (raw, json)
Hash identifier:          dUxJAttoYP9boZCqQbjm5tyak+QOP8iFBSF/iJQKsqg=
Subject key identifier:   68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CED2FBA1F9C9FFCEAB79903EF218318
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:17:57 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 57288
                          IP: 176.97.8.0/21
                          IP: 2001:67c:1138::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:2f:ba:1f:9c:9f:fc:ea:b7:99:03:ef:21:83:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:de:ba:be:a7:53:ce:a4:ea:c7:11:4c:f9:54:
                    cd:d4:b9:07:c1:8c:47:3f:58:c3:34:c5:b5:3b:83:
                    1e:5b:f7:66:5b:b2:86:14:24:8d:ca:7a:8a:90:22:
                    be:50:85:5d:15:19:3a:51:85:68:05:0b:b1:3b:03:
                    d3:2b:bc:21:6b:84:c3:09:6c:93:71:be:a2:cf:77:
                    e4:b1:45:a1:18:c3:92:23:30:dd:cc:7b:98:f6:37:
                    17:69:32:da:30:9f:62:ce:ac:bc:8c:21:a3:d1:5e:
                    06:6b:43:15:16:fc:64:30:6c:fe:c6:c4:a4:66:1c:
                    e2:de:84:fa:a0:ed:f8:93:7f:59:07:21:42:25:d0:
                    96:99:d5:67:b7:82:08:12:f1:93:3e:c3:e3:56:2b:
                    68:ad:00:7f:96:c3:31:93:7a:5f:c1:3f:3f:e7:04:
                    ad:f0:65:92:c9:78:e5:c4:04:fb:7a:66:cd:df:e0:
                    20:49:cc:4f:1c:67:d0:ae:40:21:28:24:c4:d3:38:
                    82:af:58:0f:49:96:64:86:8d:55:47:9d:73:e2:dd:
                    7a:8f:24:39:a5:82:de:21:e8:43:32:1c:82:f0:1a:
                    b4:a8:11:85:fd:25:f3:57:db:8a:fd:f8:fe:0d:df:
                    35:c8:83:df:25:50:fd:34:58:72:7a:58:18:e2:72:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.8.0/21
                IPv6:
                  2001:67c:1138::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57288

    Signature Algorithm: sha256WithRSAEncryption
         3f:d6:48:43:fb:d6:59:9d:18:a0:73:21:8c:3c:6b:8c:38:84:
         17:af:7b:ac:5d:0a:eb:02:e6:70:ec:c7:c5:bc:dd:3c:0a:98:
         ca:93:a9:97:2d:e3:a1:49:b7:b0:57:1d:93:50:d7:5f:01:75:
         9d:dc:a0:9e:16:cd:c6:cf:e2:6b:49:08:cf:60:f5:05:85:3e:
         eb:1f:f1:73:f1:03:b2:04:ad:2e:a3:a8:79:5e:85:71:f2:85:
         32:c6:68:0a:4c:60:76:95:9e:3e:c7:49:ab:06:43:15:85:20:
         1e:a0:a0:3a:b2:b1:84:71:24:76:d7:ac:4f:c0:9d:c5:36:0a:
         a2:01:2f:c6:a2:25:54:ee:7c:d7:0b:01:ab:f3:14:c9:f9:81:
         29:c6:d2:26:82:87:6d:8e:74:76:a9:2f:00:1d:be:91:c8:bb:
         20:d9:8c:df:86:fb:f2:43:18:15:43:4c:47:19:51:57:85:a5:
         f2:83:59:dc:db:34:c4:4e:c5:8c:ef:51:b1:e3:3d:35:af:e3:
         01:06:3d:00:11:d3:82:3c:ad:10:42:a2:c4:ba:83:7d:08:e3:
         de:07:88:ca:c7:fd:d2:8a:e7:c8:36:5d:24:af:76:4b:70:51:
         8b:5f:4b:f9:06:b4:68:22:82:96:a2:43:b2:ce:91:a8:e5:4b:
         19:dd:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----