This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
File:                     adEXVt0Db1nuEef4Gkh6b90jE20.cer (raw, json)
Hash identifier:          XOOWZa/DYDtrp6odREfePPeHGq1W2M0qTACzdHprtG4=
Subject key identifier:   69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5B9C7DB84AA3D74E963070E1E2C7FF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:19:42 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 198562
                          IP: 46.229.252.0/24
                          IP: 193.16.157.0/24
                          IP: 2a0e:6580::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:9c:7d:b8:4a:a3:d7:4e:96:30:70:e1:e2:c7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:19:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:3f:7d:9d:8b:4b:ab:d2:dc:2d:b0:10:66:
                    66:62:8e:64:90:21:94:9e:43:4c:db:ac:81:d8:bd:
                    51:69:c2:86:3e:f3:4a:9f:49:11:a1:78:6e:c2:77:
                    2d:d8:e4:9e:00:a5:28:35:32:38:f3:ed:d2:3d:0e:
                    c9:3e:f7:97:3d:0a:89:26:eb:1e:33:21:89:e4:ed:
                    23:ea:b1:20:b1:61:d9:0b:63:8f:25:84:6c:73:bc:
                    58:f2:34:90:2c:ea:4b:09:d9:77:64:26:88:57:43:
                    57:26:d4:ac:e0:ac:88:b0:65:f5:de:71:9b:06:bf:
                    b0:9b:61:46:6c:26:01:c5:69:90:7b:6d:3e:2c:fa:
                    35:f0:6d:95:d6:cc:19:44:9a:ac:37:ef:f8:f9:94:
                    0e:66:7c:8d:4c:b4:9a:1a:57:e4:f7:ce:40:d6:28:
                    b7:59:af:b4:10:05:0b:47:31:5e:8a:9e:97:82:3b:
                    ea:a7:23:20:23:35:16:f2:87:e7:6f:f8:3e:a2:19:
                    79:e1:4a:d1:9c:e0:9c:63:39:25:41:e9:a2:cb:06:
                    9a:6a:b0:a0:e1:2e:c9:5e:d6:66:4f:0c:15:3e:53:
                    65:76:ce:a7:bb:41:c1:36:02:ae:e8:f2:b5:d4:03:
                    57:00:ba:fc:92:df:d6:11:9a:2e:85:15:ec:c0:1d:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.252.0/24
                  193.16.157.0/24
                IPv6:
                  2a0e:6580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198562

    Signature Algorithm: sha256WithRSAEncryption
         ab:db:1d:ea:c3:8c:bd:c5:84:ae:35:21:8e:67:ba:65:5a:53:
         bb:e0:74:7f:55:75:77:bc:77:50:4a:76:2f:1e:ef:a6:04:2a:
         2d:f9:c1:08:27:c8:23:66:70:6d:89:12:4e:5c:f2:c2:46:d8:
         dc:a1:6f:24:0c:c7:e0:7f:51:3f:0f:32:a7:04:43:38:f4:19:
         9f:3e:84:35:71:17:2e:3c:cb:66:a7:5e:63:7b:6d:51:96:ea:
         77:ab:cd:07:2f:7a:ff:61:03:bb:b7:ec:41:32:16:ba:ec:7d:
         f3:a9:13:12:2b:ca:40:37:9d:1c:a2:ba:85:bf:5f:85:fe:68:
         63:0d:b4:79:5a:e3:b6:46:7a:8c:76:17:76:7c:a6:53:d9:f2:
         46:96:d2:24:91:18:b9:88:cd:de:cb:6b:d5:ed:ef:8c:cb:f3:
         1a:ca:d0:9c:0f:90:20:db:ab:56:84:b3:d0:94:e8:76:fe:19:
         83:04:d5:c3:de:f4:21:b0:30:87:70:bc:96:08:e9:03:43:df:
         a5:a2:fe:18:be:e4:c2:11:c9:e3:51:5d:55:25:d0:82:c6:02:
         9c:3c:37:ca:c6:fe:0c:5d:3b:35:48:b2:b0:5e:ac:6c:93:88:
         75:e0:87:de:6d:58:c7:b3:50:66:7e:e9:00:c0:76:f1:18:b9:
         67:3b:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:24:51 2026 by rpki-client