This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
File:                     clOCbDGl92CXvNwqL2UZiKE2flM.cer (raw, json)
Hash identifier:          NNjE+yGUe6OSBwwNduCVN18sekwpRW6cl+ieZctdIp8=
Subject key identifier:   72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7910380675AA53D8469F444B8CC1799F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 10:17:44 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.17.200.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:38:06:75:aa:53:d8:46:9f:44:4b:8c:c1:79:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7253826c31a5f76097bcdc2a2f651988a1367e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:91:1a:34:83:f0:c0:ea:e5:41:3a:e0:cd:
                    94:a9:4e:28:69:49:09:7f:b7:98:9c:21:a5:f6:b2:
                    8a:56:c3:62:10:57:fa:cb:96:79:b4:85:34:da:fc:
                    e7:21:eb:64:75:5b:3c:24:78:31:d0:e2:85:fa:e0:
                    58:74:78:2c:50:ad:e7:c8:16:2c:49:0a:45:0f:20:
                    ea:ba:13:4f:98:2b:fa:16:21:9b:6c:db:41:19:a9:
                    e2:20:40:72:3d:2c:4c:12:de:e1:cf:15:76:ed:0b:
                    4a:15:7a:41:3f:0e:6b:ad:c6:07:95:1b:8e:96:c0:
                    26:7b:db:e5:28:c4:27:04:e8:4c:92:16:58:66:be:
                    46:a1:3c:cd:2f:6f:d3:b3:a9:54:3c:99:90:bf:b8:
                    a2:21:53:07:f0:57:ba:77:43:57:53:71:ec:d4:fc:
                    05:88:fd:28:b5:c7:73:a1:d4:96:44:8e:c7:e7:6e:
                    ab:75:80:dd:57:c6:02:3a:22:f8:58:b3:75:a6:1c:
                    a2:5a:bd:e9:5d:01:54:f6:cd:10:93:49:7b:e3:72:
                    07:e3:84:fc:3e:47:a5:2e:3f:a3:07:a3:fb:8a:64:
                    e3:c2:f5:96:42:46:3f:ef:14:cc:f9:d6:a1:e1:ec:
                    0c:6e:e3:38:58:0d:d4:94:66:a2:27:cf:84:74:98:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2e:09:4a:ae:e3:df:6d:c3:15:4b:e9:0a:01:b9:74:37:57:
         25:a2:1f:2c:ef:de:0c:bb:8d:d8:b3:15:cc:ee:d5:1e:a7:4b:
         a6:ce:a8:38:6f:1d:f5:f8:e2:e2:49:c8:40:b8:7e:f6:d9:4c:
         b7:b4:54:cb:0a:b7:76:70:65:23:47:b7:9f:fa:e8:1e:aa:03:
         02:06:81:e9:7e:c6:45:b1:39:1a:d2:b5:66:00:82:02:ea:bc:
         eb:ea:37:ae:de:25:b3:fa:7a:6d:ea:a3:a6:91:27:f8:8b:05:
         f0:27:4c:b0:e9:25:bd:e6:17:22:a5:db:eb:2e:98:68:11:ff:
         5a:63:89:4d:10:0c:0c:d7:4b:da:b7:a9:0f:1a:a5:c6:13:49:
         52:36:86:8f:4e:05:ee:4e:bc:9a:f6:e8:75:75:d6:a7:c0:f4:
         d7:43:98:69:77:53:e9:98:7c:5b:4d:f2:11:9b:dd:e9:85:e4:
         1a:3e:b1:ad:65:aa:5c:40:8b:01:46:65:1e:1e:09:c0:6e:65:
         94:7d:f7:37:7e:f4:0e:9c:b7:3c:5f:56:9f:96:57:a2:74:11:
         78:7d:2b:6e:26:45:bb:23:de:99:7d:c0:ea:72:23:36:09:4c:
         99:16:3d:7f:d4:7a:58:ce:12:af:1f:43:95:dc:dc:df:27:71:
         b2:a8:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----