This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
File:                     aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer (raw, json)
Hash identifier:          Sk8omLYdWZUFq2alc/KYXrwEIxrsohHCFGLX2mVdZto=
Subject key identifier:   69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F82CE6B0CA5B957E375A0A536F8C409
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:20:37 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 34283
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:ce:6b:0c:a5:b9:57:e3:75:a0:a5:36:f8:c4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:20:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:80:90:ba:b8:b7:92:d1:0e:48:a7:96:a0:0b:
                    11:7f:d6:ab:34:ea:16:e6:bc:da:eb:fa:fb:cb:f5:
                    b4:e0:94:ce:7e:a1:1a:e7:00:c3:7d:d3:76:9e:6e:
                    3e:02:b5:32:6e:9f:50:36:32:3f:1d:fa:5a:aa:a6:
                    ae:ef:cd:cb:6c:ca:59:df:8c:f6:d4:33:ce:16:f9:
                    86:ec:23:49:d1:42:42:62:d3:45:de:3a:22:d5:2b:
                    5c:93:96:f2:aa:4d:1a:43:1f:f1:42:73:96:66:5a:
                    60:0d:a0:57:a3:e6:d7:20:6e:f1:91:8a:e9:7a:dc:
                    8c:05:cc:75:f4:07:8e:03:d6:a4:a6:8a:12:87:be:
                    a2:dd:bb:51:3f:34:1b:36:4c:5c:d2:10:1a:1c:88:
                    4e:b5:fa:52:36:0a:d9:80:02:0c:af:4a:10:a8:76:
                    8e:3b:f3:4e:42:e3:4e:e7:b1:da:0a:80:a1:ac:2e:
                    72:4f:13:c6:31:4c:9d:24:61:3f:fa:4c:0e:74:e9:
                    65:95:b5:c1:04:6f:14:65:1d:04:0a:2c:40:27:ee:
                    e0:f5:69:fa:3d:5a:a1:38:58:93:ca:97:15:22:51:
                    22:5f:93:2c:3a:c1:78:90:54:07:80:5f:0e:9f:2e:
                    c6:1d:66:3f:93:0f:ca:fe:50:4b:e8:94:07:5e:52:
                    c6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34283

    Signature Algorithm: sha256WithRSAEncryption
         58:f0:e2:db:50:43:ef:fe:8d:14:99:d2:d4:68:12:c0:93:21:
         5a:de:58:28:ae:0e:7c:b8:c0:37:ec:90:ea:c6:d5:bf:51:6c:
         5f:45:d9:d6:00:6e:da:e7:46:3e:22:e7:4e:58:5e:07:08:ed:
         4a:a4:6d:e7:23:18:6d:7f:2d:63:4b:8a:a2:17:b6:af:69:c5:
         2a:8e:fc:12:08:f9:d4:b1:f2:49:94:ea:22:22:a4:d4:7b:47:
         92:78:79:48:28:b2:63:7e:ea:ec:ab:6e:15:73:44:2c:35:df:
         79:c0:e4:67:20:a0:4c:1a:8d:bf:44:72:ca:5c:8b:5b:6b:1b:
         78:e4:ff:d0:1a:37:46:dd:7c:fb:25:0b:e0:9c:0f:3d:b3:ef:
         2f:af:d5:82:59:ae:d7:13:21:bd:6f:5b:af:2f:bc:fd:89:17:
         12:86:b3:b5:dc:3c:59:8f:8c:ea:69:87:5f:7a:4a:07:9e:23:
         a4:9d:f9:74:c3:d4:16:fe:01:7b:83:63:cd:a9:e3:93:1e:63:
         d5:c9:72:03:53:98:29:65:dc:d4:02:0f:dd:d7:39:47:d5:13:
         9b:1c:ea:71:a5:11:5e:75:76:e4:0a:57:f6:88:45:ae:b5:95:
         57:78:e5:3f:24:86:b2:4d:af:04:ed:1e:fb:9f:22:a0:14:a4:
         05:64:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----