This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
File:                     b3_OpPf8172B3VmBU91u5bEuR98.cer (raw, json)
Hash identifier:          eVI8pdseSGE9CQ/Bj2sbS/N1/FbgIBAw7amncV1roLE=
Subject key identifier:   6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7910E68EE46B3D621A630FE6BEBC1DC5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 10:18:29 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:1928::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:e6:8e:e4:6b:3d:62:1a:63:0f:e6:be:bc:1d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:05:4d:e1:9c:a6:2f:25:67:a3:b2:6e:64:2b:
                    51:62:06:de:62:8c:c6:06:06:33:e4:61:14:09:16:
                    79:89:1b:c7:e8:c9:b4:94:95:b7:cc:df:45:ec:29:
                    10:f5:f6:d6:31:0a:ae:e8:cb:bc:96:24:0b:23:21:
                    3d:8e:1c:d7:60:56:95:c4:16:22:d1:7c:a5:6c:22:
                    a0:c0:43:fd:1f:5c:6f:f1:6d:bf:7c:9c:f8:94:06:
                    48:b4:b9:44:fd:a9:32:9d:00:b7:2d:85:4d:10:47:
                    ce:73:6c:ff:8f:b4:2c:92:a4:c9:71:03:06:5d:ca:
                    d0:cc:11:cc:79:1a:d2:00:a9:19:cd:8a:ad:c4:34:
                    2f:a4:9c:c7:55:f7:13:43:5c:ba:e8:28:b6:77:35:
                    5e:d6:03:6b:7c:91:9d:d9:cb:fd:4d:1a:4b:1b:55:
                    3f:92:cd:80:9d:73:bc:d1:18:fd:42:8c:3b:0c:38:
                    7b:68:8f:da:c5:df:c0:46:fd:d5:43:f0:89:b9:c6:
                    96:ec:d2:f1:4e:8b:f9:1a:42:fe:26:d3:14:19:a4:
                    3e:b2:6f:4b:aa:79:84:4c:ba:3b:d6:8d:cf:49:d8:
                    a3:49:04:bc:9f:d6:0d:a8:72:1e:4a:b8:f2:f4:8a:
                    95:62:78:23:f6:ed:ba:78:28:96:99:ec:4f:46:f0:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1928::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:e2:d4:92:39:6d:70:34:64:a4:32:a5:c3:61:0b:3f:7c:
         24:14:88:b4:83:e3:34:b0:4d:02:8e:f6:b3:10:07:53:9d:49:
         55:2b:49:90:a1:92:80:ca:5e:cf:4f:be:e0:47:67:38:43:88:
         79:fb:db:b4:76:d9:78:08:59:96:97:ba:93:66:c3:13:df:6a:
         81:74:14:b1:fc:cd:47:9f:9e:38:0f:c1:cc:d6:52:a5:f6:7f:
         c3:f8:ff:9d:a5:0c:de:78:40:df:10:55:d2:0b:23:72:a0:39:
         02:de:52:b4:5e:2b:1e:86:ba:12:f0:aa:77:b6:e0:48:31:a7:
         ba:bb:a6:9d:8d:ae:aa:f8:a1:b7:5c:05:0c:e7:81:b1:c5:f4:
         f5:e5:1d:96:67:15:71:8a:f7:78:bc:a6:6a:3b:15:10:37:7c:
         1f:d2:c0:4e:b1:f2:bd:1f:38:d7:b6:e9:df:2f:de:d2:f8:af:
         a9:c5:82:2e:0c:e2:55:a7:dc:31:97:e3:0a:74:69:d8:1b:de:
         db:95:2a:2e:39:db:ce:46:f9:1f:1b:f3:77:0f:21:5b:ce:fa:
         9a:79:9e:ef:3a:b1:1e:25:8a:1f:5f:73:2d:29:1f:ba:d8:6b:
         52:68:2b:22:e4:98:54:1f:27:26:bc:ca:90:ef:0f:e3:ce:4f:
         24:79:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----