This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
File:                     d44TTk_7X7E6woT-lIgnaCYVZjI.cer (raw, json)
Hash identifier:          PntuvCUOA1JTU/IcJ1AuZCtw2CLWtEnTqdhDznjJKEo=
Subject key identifier:   77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F15ECD4FEBAE02BC1FDEA92DB11464B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:21:41 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 80.75.218.0/24
                          IP: 2a13:7e80::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:ec:d4:fe:ba:e0:2b:c1:fd:ea:92:db:11:46:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:21:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=778e134e4ffb5fb13ac284fe9488276826156632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:f2:46:72:69:d4:cb:6b:2e:54:c5:cd:9d:
                    c1:02:4b:c4:ca:78:c4:4a:30:34:be:aa:d6:d6:b6:
                    95:5b:88:49:96:f5:df:eb:95:35:a7:67:c0:ca:cc:
                    a7:fb:e1:44:f1:fd:bc:b9:37:24:fc:0d:5d:1f:a6:
                    ec:bc:30:1e:02:ce:be:e0:a7:eb:c4:e2:c1:93:63:
                    c5:22:a9:81:ae:f6:3b:e9:c4:7a:38:06:fc:e5:2f:
                    c4:50:4f:f7:0f:13:3b:83:12:71:02:95:08:41:ae:
                    60:1b:bd:11:28:a2:ed:67:25:05:ff:35:9e:0c:bd:
                    5c:9f:fe:fa:00:33:c5:65:77:0f:44:38:95:38:5b:
                    ad:a4:41:be:b6:7d:4c:5d:67:29:6c:f1:7c:7b:dd:
                    07:9e:5d:01:73:cc:d5:24:64:90:8a:83:2d:ce:d1:
                    73:87:41:fd:e8:e8:88:67:84:18:f8:74:05:00:e0:
                    c3:88:89:72:bf:1d:77:5c:3a:4b:23:df:f2:66:ee:
                    c2:2d:43:b4:07:90:59:f9:a8:1f:d3:c9:69:ec:94:
                    ca:9a:d8:c3:96:f7:66:a8:89:75:99:27:b1:13:da:
                    14:64:12:af:20:e0:e9:48:11:f6:87:d9:18:f1:2a:
                    29:d3:a3:f7:d3:5a:43:9f:04:b3:3e:6b:c4:da:38:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.218.0/24
                IPv6:
                  2a13:7e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         16:12:9c:5b:98:01:82:07:66:40:82:cb:78:cb:9a:bb:48:b6:
         aa:a7:57:1b:fb:0b:9d:87:e0:cf:be:d7:76:74:95:ef:b1:eb:
         00:bc:47:2a:4a:9f:b5:e0:09:95:44:d0:9c:f8:2f:3f:c2:ef:
         0d:47:bb:3d:c7:88:be:3f:23:e4:23:33:bc:40:9d:2c:eb:65:
         44:4c:41:b1:43:9f:db:4b:ec:5c:72:47:04:1f:0d:1f:f7:9e:
         f1:8c:ec:68:af:b9:01:9a:07:e5:ce:f5:25:ed:dd:f3:a1:d2:
         1d:ca:e0:7e:e5:d5:30:79:fa:76:3c:5c:22:35:1e:f6:75:5e:
         f6:87:55:79:00:d0:8a:86:76:a0:54:2e:cf:11:c0:ff:fb:88:
         9f:49:c6:57:c0:37:fc:1d:0c:e3:8d:b8:eb:d6:b7:3f:96:16:
         b5:5f:2e:11:89:42:01:e3:2f:70:5e:50:e0:7f:25:70:c3:a8:
         47:21:ae:00:4a:e7:ab:83:df:41:cc:8f:bf:ce:e0:83:7a:be:
         c9:f7:d7:dd:6b:88:20:e9:3b:53:41:d5:4a:26:33:89:20:14:
         7a:d7:ac:93:a9:53:1d:91:d9:8c:0b:a1:85:7f:34:fa:e8:7c:
         e1:c2:f0:c4:ce:24:1e:90:fd:e9:55:3c:55:76:94:e1:c5:9d:
         dd:81:06:bc
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZt/FezU/rrgK8H96pLbEUZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzhlMTM0ZTRmZmI1ZmIxM2FjMjg0ZmU5NDg4Mjc2ODI2MTU2NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMLyRnJp1MtrLlTFzZ3BAkvEynjE
SjA0vqrW1raVW4hJlvXf65U1p2fAysyn++FE8f28uTck/A1dH6bsvDAeAs6+4Kfr
xOLBk2PFIqmBrvY76cR6OAb85S/EUE/3DxM7gxJxApUIQa5gG70RKKLtZyUF/zWe
DL1cn/76ADPFZXcPRDiVOFutpEG+tn1MXWcpbPF8e90Hnl0Bc8zVJGSQioMtztFz
h0H96OiIZ4QY+HQFAODDiIlyvx13XDpLI9/yZu7CLUO0B5BZ+agf08lp7JTKmtjD
lvdmqIl1mSexE9oUZBKvIODpSBH2h9kY8Sop06P301pDnwSzPmvE2jjSgwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHeOE05P+1+xOsKE/pSIJ2gmFWYyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzU4NDFi
MS0wMTJmLTQwNDYtYjFkNS0wOTliYWQwMzc2OGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNTg0MWIx
LTAxMmYtNDA0Ni1iMWQ1LTA5OWJhZDAzNzY4ZS8xL2Q0NFRUa183WDdFNndvVC1s
SWduYUNZVlpqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAUEvaMA0EAgACMAcDBQMqE36AMA0GCSqGSIb3
DQEBCwUAA4IBAQAWEpxbmAGCB2ZAgst4y5q7SLaqp1cb+wudh+DPvtd2dJXvsesA
vEcqSp+14AmVRNCc+C8/wu8NR7s9x4i+PyPkIzO8QJ0s62VETEGxQ5/bS+xcckcE
Hw0f957xjOxor7kBmgflzvUl7d3zodIdyuB+5dUwefp2PFwiNR72dV72h1V5ANCK
hnagVC7PEcD/+4ifScZXwDf8HQzjjbjr1rc/lha1Xy4RiUIB4y9wXlDgfyVww6hH
Ia4ASuerg99BzI+/zuCDer7J99fda4gg6TtTQdVKJjOJIBR616yTqVMdkdmMC6GF
fzT66HzhwvDEziQekP3pVTxVdpThxZ3dgQa8
-----END CERTIFICATE-----
Generated at Sun Jan 18 09:42:19 2026 by rpki-client