This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
File:                     aZHFbxGnFxxhUyOXafVXvroQGC0.cer (raw, json)
Hash identifier:          MOtUFA1o34mSnsj6gO8XUVpc+GgaWe+bu9OtfPiDyeQ=
Subject key identifier:   69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C6ED056C9753E58CFFBBC9EFEA5258
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:04 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 12792
                          AS: 29390
                          AS: 29632
                          AS: 39249
                          AS: 42372
                          AS: 43426
                          AS: 211288
                          IP: 91.198.133.0/24
                          IP: 95.164.0.0/16
                          IP: 185.234.254.0/24
                          IP: 195.149.96.0/24
                          IP: 2a10:eb80::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:ed:05:6c:97:53:e5:8c:ff:bb:c9:ef:ea:52:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6991c56f11a7171c6153239769f557beba10182d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:26:c1:03:e9:59:21:e1:e9:07:41:e7:60:
                    e4:14:af:7a:e3:6a:09:4f:ca:c4:7e:b1:7a:0a:3e:
                    4e:66:3b:11:23:e9:9e:e2:12:3d:80:f6:4d:89:8b:
                    d8:4d:6f:fd:6b:98:d3:a5:ba:fe:32:8e:d3:85:4b:
                    b9:4d:dc:27:cd:bb:1c:53:04:2a:f6:8a:2e:d1:d4:
                    ad:52:ff:b8:c4:6d:8d:7b:b6:47:50:42:16:b3:1c:
                    c4:7d:50:b9:25:6f:c8:69:bd:bc:08:06:ee:4d:75:
                    64:c4:bd:0c:c7:9b:c9:ae:e8:4c:b8:4f:77:c8:a2:
                    49:7d:74:8b:59:6d:65:11:91:06:6b:32:87:f8:06:
                    bf:e4:5d:d1:4f:36:28:d9:67:5d:95:0d:a0:e1:e8:
                    25:06:c0:55:74:92:42:e3:b0:36:93:38:00:fa:25:
                    62:eb:0e:80:de:83:35:7a:c0:24:46:0f:56:75:f8:
                    67:50:a1:c1:c2:93:e0:5a:79:8c:f8:1b:40:b9:e7:
                    b6:46:f3:80:83:55:20:7b:0d:46:80:5a:3c:2d:59:
                    9b:c4:c6:07:07:3d:7a:1a:9a:dd:00:87:19:10:8b:
                    22:c4:f9:a6:54:fb:0c:75:f7:9e:b8:6e:51:c3:43:
                    97:64:23:28:05:74:8f:56:b4:12:8b:f2:9d:39:03:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.133.0/24
                  95.164.0.0/16
                  185.234.254.0/24
                  195.149.96.0/24
                IPv6:
                  2a10:eb80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12792
                  29390
                  29632
                  39249
                  42372
                  43426
                  211288

    Signature Algorithm: sha256WithRSAEncryption
         66:03:00:81:97:d2:5b:16:90:0d:fd:16:92:26:a0:1c:74:db:
         8c:be:c5:2a:f5:2c:eb:51:98:80:0b:5e:42:a2:ea:9a:ef:7a:
         57:70:24:b7:c1:91:b2:c2:07:c2:e6:06:53:0f:9e:90:b3:c3:
         11:7a:44:81:ea:c9:18:d4:8b:c7:1a:ed:1c:c5:de:ae:49:84:
         00:8a:63:17:67:9b:7a:30:c6:1a:ac:7f:8f:35:32:40:4b:ec:
         02:0a:ef:c8:88:a3:45:85:55:7b:98:b9:aa:5b:20:a8:5e:73:
         f1:fd:02:25:f1:2c:15:4d:90:f9:ca:42:90:00:9d:3c:97:f1:
         e6:55:67:a0:eb:7f:ae:13:23:68:7e:fa:a7:c7:55:e5:28:a9:
         d6:7d:e2:08:ed:c2:ed:ec:27:42:b6:0b:b6:dc:70:e7:54:f8:
         c5:84:fb:55:0d:a4:12:61:77:76:9b:38:e1:c0:4e:95:f4:83:
         87:dd:ee:8e:cc:23:c8:f7:cb:be:ec:25:be:ac:1f:ae:17:24:
         60:7e:e7:24:67:37:38:b4:57:2c:3f:22:dc:8f:e5:07:ee:70:
         95:12:64:9a:28:36:46:2f:d0:52:a8:bb:e4:47:44:b8:52:99:
         92:db:59:f1:42:cb:b7:46:87:8d:89:4a:30:43:94:e4:62:f3:
         38:12:fd:fb
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgISAZt3xu0FbJdT5Yz/u8nv6lJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTkxYzU2ZjExYTcxNzFjNjE1MzIzOTc2OWY1NTdiZWJhMTAxODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLMmwQPpWSHh6QdB52DkFK9642oJ
T8rEfrF6Cj5OZjsRI+me4hI9gPZNiYvYTW/9a5jTpbr+Mo7ThUu5TdwnzbscUwQq
9oou0dStUv+4xG2Ne7ZHUEIWsxzEfVC5JW/Iab28CAbuTXVkxL0Mx5vJruhMuE93
yKJJfXSLWW1lEZEGazKH+Aa/5F3RTzYo2WddlQ2g4eglBsBVdJJC47A2kzgA+iVi
6w6A3oM1esAkRg9WdfhnUKHBwpPgWnmM+BtAuee2RvOAg1Ugew1GgFo8LVmbxMYH
Bz16GprdAIcZEIsixPmmVPsMdfeeuG5Rw0OXZCMoBXSPVrQSi/KdOQMagQIDAQAB
o4IC2zCCAtcwHQYDVR0OBBYEFGmRxW8RpxccYVMjl2n1V766EBgtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzQyODgx
NS0wMmI5LTQ2MDYtYjA2Ni02NWQxNTY3MzQwZmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNDI4ODE1
LTAyYjktNDYwNi1iMDY2LTY1ZDE1NjczNDBmZC8xL2FaSEZieEduRnh4aFV5T1hh
ZlZYdnJvUUdDMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUF
BwEHAQH/BDAwLjAdBAIAATAXAwQAW8aFAwMAX6QDBAC56v4DBADDlWAwDQQCAAIw
BwMFAyoQ64AwNQYIKwYBBQUHAQgBAf8EJjAkoCIwIAICMfgCAnLOAgJzwAIDAJlR
AgMApYQCAwCpogIDAzlYMA0GCSqGSIb3DQEBCwUAA4IBAQBmAwCBl9JbFpAN/RaS
JqAcdNuMvsUq9SzrUZiAC15Couqa73pXcCS3wZGywgfC5gZTD56Qs8MRekSB6skY
1IvHGu0cxd6uSYQAimMXZ5t6MMYarH+PNTJAS+wCCu/IiKNFhVV7mLmqWyCoXnPx
/QIl8SwVTZD5ykKQAJ08l/HmVWeg63+uEyNofvqnx1XlKKnWfeII7cLt7CdCtgu2
3HDnVPjFhPtVDaQSYXd2mzjhwE6V9IOH3e6OzCPI98u+7CW+rB+uFyRgfuckZzc4
tFcsPyLcj+UH7nCVEmSaKDZGL9BSqLvkR0S4UpmS21nxQsu3RoeNiUowQ5TkYvM4
Ev37
-----END CERTIFICATE-----