This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer
File:                     aU0ylbrOkvvFQHllxly2WWm60Cg.cer (raw, json)
Hash identifier:          F2mEdLVF2jkjaSxESG447ekEN45DrbzKyGtt9iHg9Y0=
Subject key identifier:   69:4D:32:95:BA:CE:92:FB:C5:40:79:65:C6:5C:B6:59:69:BA:D0:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F136351C57E4134F619729A1014EB67
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:18:55 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 210106
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:63:51:c5:7e:41:34:f6:19:72:9a:10:14:eb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=694d3295bace92fbc5407965c65cb65969bad028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:08:9f:14:54:c6:f7:a0:f2:ce:56:14:0a:
                    3b:52:88:9a:46:af:4b:f1:1c:bf:56:4d:39:52:61:
                    ec:cd:e0:38:77:70:31:ba:bd:70:81:a0:2f:40:5d:
                    5f:c4:4c:e1:20:df:6d:78:ed:69:d8:c9:f6:d4:7a:
                    80:6a:2f:e4:bd:1d:47:a2:dd:83:d0:7b:35:9e:a2:
                    d6:83:13:b9:e6:07:5b:f0:17:5d:86:f2:c9:f6:6f:
                    78:a1:b9:74:60:57:c3:2e:e4:e4:d9:c4:51:b3:71:
                    3e:3f:cd:6b:0f:08:79:ff:2a:b9:bd:38:92:ee:89:
                    f6:19:be:b9:d2:e0:8d:2e:a6:2e:7f:a5:15:94:4d:
                    2f:56:91:7f:3d:53:9d:a7:d4:90:a4:a3:8c:ea:6b:
                    46:bc:b0:5e:22:6a:e1:ed:d1:09:7d:12:3f:bd:8d:
                    69:fb:95:e2:3c:68:28:5d:5e:a1:98:1a:02:9f:42:
                    95:af:a8:52:03:df:7b:6d:c8:2d:7f:d7:c7:ac:cb:
                    e3:c4:f8:17:db:1d:b9:b0:fe:82:08:01:21:73:dc:
                    a6:be:53:d4:e8:ae:cb:ee:63:34:be:9f:35:c2:74:
                    98:d1:7b:c1:f2:84:84:37:1d:eb:c7:92:df:5c:7c:
                    7c:0b:f6:08:4b:ae:1f:43:d3:f8:46:8e:b7:05:19:
                    2b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4D:32:95:BA:CE:92:FB:C5:40:79:65:C6:5C:B6:59:69:BA:D0:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210106

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:c0:26:6b:61:4f:42:a3:b0:e6:83:8b:c4:8b:6b:21:26:
         ae:85:56:23:63:19:5c:be:cb:9a:e3:98:f4:a9:14:99:3c:08:
         41:93:c3:2a:55:3e:5a:65:f0:c6:ba:84:dc:5e:e3:c5:07:fb:
         10:d8:ef:09:84:ae:52:fa:7b:43:22:93:82:ac:90:94:3b:4c:
         0d:6c:52:e3:27:11:1e:8e:18:1a:f4:9a:f0:8d:a5:8b:30:86:
         97:20:c1:98:93:03:f5:f5:29:e2:f9:18:83:96:3b:4c:fe:d5:
         f5:6a:55:e8:ad:bc:b2:87:c1:ad:7c:cc:9a:70:ef:e8:61:ca:
         64:2f:ce:dc:d7:3c:35:37:e5:62:ab:15:ca:30:8a:ac:6d:f6:
         5b:32:74:89:89:22:74:ce:c8:f8:a9:4d:7c:57:2e:63:bb:20:
         c6:e5:c5:8a:a0:e0:90:5f:ad:d4:4c:59:e1:97:9b:f8:89:6a:
         e1:14:85:b7:4d:57:cb:98:61:9d:b4:2c:e6:7f:2e:9b:e9:f2:
         08:61:23:c2:ed:a9:d9:25:c1:e5:7a:cd:30:cf:6f:42:c5:c2:
         60:15:a2:8f:9e:25:19:a3:f6:2e:47:ec:09:fb:63:f4:1c:0e:
         fc:cc:15:31:23:50:9f:bd:21:05:66:e7:6e:b3:9d:3a:e6:64:
         38:86:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----