This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
File:                     eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer (raw, json)
Hash identifier:          8uV3ga3YB3lrWq/qc7vPDUTVSjMrKtcgBOYjFEj4t7Y=
Subject key identifier:   79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B2C65D265D53BF5121C12185A191CED01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 17 Dec 2025 13:00:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202765
                          IP: 185.163.164.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:65:d2:65:d5:3b:f5:12:1c:12:18:5a:19:1c:ed:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 17 13:00:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7946647d9d5759a01f8d18668a377c063ff59136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:3b:bc:bd:d7:47:52:3f:49:b0:71:f1:f0:
                    3b:43:37:fb:8c:b8:fe:2b:d2:8d:4e:fa:df:42:f7:
                    8f:fb:df:c2:08:89:eb:23:0e:7b:03:d2:8c:55:72:
                    56:cd:ab:6b:4f:91:78:5e:18:5a:cb:47:81:57:fe:
                    a6:98:0c:e2:0f:8e:46:3b:d3:37:60:33:81:20:c5:
                    30:22:b0:d9:90:24:99:83:d5:f6:24:e6:30:c7:b2:
                    3a:15:78:7f:ae:22:1a:a1:e6:bc:2e:f3:86:9b:a2:
                    0f:ab:b6:29:2f:91:d9:66:45:6e:64:a5:6b:4f:ce:
                    46:25:c5:f5:20:48:b8:52:e9:bc:e1:7a:e8:52:0a:
                    34:c8:36:25:63:4f:cc:9d:1c:c5:3f:f3:be:7f:74:
                    39:3f:34:bd:5d:33:59:bc:83:53:21:09:2b:ae:68:
                    c6:86:bc:ff:54:eb:cd:cd:6c:c9:d9:c2:6c:8f:5b:
                    d4:68:1a:1c:b3:f2:da:3f:8b:b0:14:eb:b3:ff:46:
                    ec:bf:78:be:84:b7:05:5a:65:a6:8c:39:72:5f:72:
                    d8:9a:28:fa:f7:70:f3:25:42:40:f4:fa:2b:6d:b7:
                    d0:a3:96:68:30:4e:94:ec:85:77:3a:80:e7:be:4f:
                    35:31:bf:d4:41:7a:7c:39:bf:e1:92:bb:ee:d7:6f:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.164.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202765

    Signature Algorithm: sha256WithRSAEncryption
         21:44:2e:76:55:fe:39:93:2f:22:00:6f:d1:8b:b3:47:34:d1:
         bc:69:ff:74:ed:7c:4e:79:27:c0:0d:fb:2f:06:a2:da:c9:04:
         a8:30:d1:2b:3a:0f:92:e2:71:73:9b:e2:c8:5e:f8:21:62:f5:
         71:74:49:4f:8a:c4:65:a7:50:da:8e:e1:a4:d4:2e:5a:46:4b:
         67:ba:b0:5f:a4:f1:57:a8:d3:f9:13:78:51:07:bd:5f:fa:dc:
         01:e0:07:07:39:a6:38:5b:3f:bb:a6:be:81:45:d4:dc:d2:22:
         2b:e3:61:b9:88:8e:f0:77:9e:55:e0:08:4c:51:2d:38:5e:67:
         cf:90:89:be:a5:21:86:91:bc:b3:db:65:2b:3e:48:19:2b:f8:
         35:8a:f2:60:8f:d1:a5:b5:6d:a5:85:59:08:3d:bb:45:1f:27:
         18:45:e8:30:ad:44:1e:35:e7:21:22:05:90:d2:c2:43:42:e6:
         b7:9f:75:d1:11:c7:7d:91:4f:4b:9a:6e:2b:ee:8d:b6:17:53:
         8f:9b:fe:14:f5:96:99:b5:07:74:d4:1e:5c:18:72:07:83:47:
         66:6d:5d:cf:ab:66:53:04:d8:4c:1c:1a:22:4d:05:0e:ec:92:
         2d:ab:d4:df:94:08:28:cf:18:e6:70:71:b3:e3:2c:d3:dc:05:
         50:81:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----