This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
File:                     aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer (raw, json)
Hash identifier:          /VEZtjp+APhyFlNpUz3KRvQJ+Z4oaDNlBj/sQk6XiGU=
Subject key identifier:   69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7EA43C158CCA7978009D4BADD878C920
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 12:17:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 203104
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:3c:15:8c:ca:79:78:00:9d:4b:ad:d8:78:c9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:97:6b:11:7d:43:8e:a2:7f:5a:93:66:ac:
                    fc:10:43:3f:da:98:19:03:41:84:e1:72:fd:80:36:
                    2a:9a:74:a6:24:b6:19:f4:1b:37:2d:65:0a:54:55:
                    ec:44:ef:20:09:b4:80:98:17:63:c0:99:8b:83:87:
                    9d:e8:2f:91:0a:ff:d1:31:1d:b4:b7:4e:65:5c:cd:
                    e9:ca:c4:6b:6f:0f:0d:58:d3:95:3a:28:75:ff:88:
                    c7:b8:d8:bc:88:c8:d0:61:e4:3f:3c:ab:4e:7c:66:
                    cb:04:84:a0:be:ee:14:fa:ea:c0:d7:a0:49:80:ff:
                    c6:98:20:1d:f8:3b:cb:fe:ea:3e:50:52:85:b9:e4:
                    70:19:24:1a:1c:fe:6b:31:5f:1b:a1:b4:af:a8:ef:
                    79:7b:0a:8f:14:27:3b:41:39:7d:34:77:57:76:c4:
                    62:e5:1e:a7:18:7b:20:bd:ed:d8:c2:ff:fb:22:5a:
                    2f:0a:d6:b3:b6:7f:71:9f:95:9a:38:2c:00:dc:df:
                    2a:2c:53:b6:3b:94:1b:18:df:a7:64:b9:e2:a3:eb:
                    51:50:6d:08:c3:d1:0e:2d:ec:c9:ac:4e:24:fb:b3:
                    f2:b0:43:3b:49:d4:25:ba:20:d5:5f:7c:75:9a:23:
                    5f:d3:44:e1:aa:50:84:54:8c:4a:ca:af:5e:1e:05:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203104

    Signature Algorithm: sha256WithRSAEncryption
         44:cc:68:ff:fa:16:91:63:b6:69:a9:88:07:8a:71:00:c4:56:
         12:b5:20:eb:03:ba:03:9d:5b:87:78:21:9f:cc:3a:3e:d7:56:
         05:f4:08:34:bd:44:ba:f6:09:b4:51:78:e9:7a:e3:05:cc:3f:
         3d:9f:d0:7d:96:31:ba:a2:22:fd:22:cb:75:0a:f0:ef:1a:35:
         bf:d1:2d:93:c6:e1:62:e3:ae:ae:74:8b:3e:c7:36:42:b9:9d:
         0d:40:f6:d5:8d:a5:ac:51:c8:f8:37:7c:89:56:d1:43:03:3f:
         87:d1:dc:cb:63:df:72:6c:a7:4c:d2:84:a4:b3:0b:22:7a:15:
         8f:b7:1d:68:94:f2:44:fd:78:e3:06:28:d2:f3:38:83:97:e3:
         ab:b1:e2:75:00:9a:ac:6c:43:42:3e:8c:51:a4:66:69:27:32:
         69:23:f4:95:8f:ff:4d:6f:12:76:99:b7:25:ae:c9:ff:2f:49:
         45:21:1f:e7:a8:49:c6:f7:89:6f:f7:b3:7a:95:0a:4a:65:ad:
         11:2e:4a:3a:cf:b1:a2:d0:25:d7:af:0e:5f:62:a0:f1:4b:74:
         25:6c:c9:75:e6:18:4c:ad:9e:14:43:b6:96:99:11:ec:a9:29:
         4b:35:82:47:ef:f4:5d:d3:43:5b:cf:45:e1:15:77:36:89:1a:
         83:5a:30:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----