This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
File:                     ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer (raw, json)
Hash identifier:          OfBlL/U6M0s2NlKp80WS9ujYnnvCTdgWxdl9jzNZFoU=
Subject key identifier:   79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5A029AAE80DEABA438ACF562ED5C05
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:17:57 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 198163
                          IP: 91.206.90.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:02:9a:ae:80:de:ab:a4:38:ac:f5:62:ed:5c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79bc498edc4189584874b7cb45025ef542481b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:57:5c:71:a5:ad:a9:2b:7f:cf:5d:d5:8e:
                    e8:c7:59:41:7a:23:05:5f:f0:85:05:1e:a3:e9:d2:
                    35:94:a9:ca:60:de:1f:c9:67:58:6c:c0:c4:a0:ee:
                    93:57:93:3e:1d:3f:0d:15:34:bc:4a:51:60:31:2e:
                    c2:62:c2:d9:3c:11:87:2a:69:af:bc:16:c1:7f:32:
                    68:7f:fb:4c:83:55:47:22:01:b4:fd:57:bb:b1:69:
                    10:17:2c:36:30:ba:e4:5b:72:0e:c6:76:f5:a0:c7:
                    e8:a4:1a:f3:9a:4a:a6:11:35:3f:43:ec:2c:ac:64:
                    bc:d2:17:f6:d8:e1:77:be:9e:65:4e:b5:26:e5:73:
                    c4:80:1b:b0:63:25:d3:3c:0f:6c:42:3c:12:1e:9b:
                    2e:6a:11:42:27:52:b6:22:93:77:40:fb:1a:9e:c2:
                    68:f2:0a:f1:9e:7c:d6:fb:11:5c:6e:eb:dd:53:6e:
                    36:2f:91:90:bc:d4:94:44:87:40:d8:bd:18:63:ed:
                    6d:b5:a1:f0:46:71:38:36:8a:d7:d6:6a:fa:a2:ea:
                    c6:df:78:0d:cf:b3:5e:8e:c8:9a:ba:b9:0c:28:b9:
                    e8:d8:0f:cd:9f:57:91:1f:1a:4f:e5:6a:dc:03:89:
                    bd:b3:81:32:d2:63:f7:a3:64:77:f6:13:91:bd:96:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.90.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198163

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:6a:98:28:75:25:98:c9:41:f4:77:53:d0:f6:95:da:22:
         08:f4:b2:54:ce:c8:c8:af:e8:dd:df:2c:28:92:42:61:3e:6e:
         81:de:29:2a:44:4a:d4:e0:66:3f:2e:d1:fc:d3:29:0e:6e:34:
         6b:ea:5b:5a:87:be:8d:95:65:9d:52:31:5c:e0:46:f5:21:2c:
         41:9d:9b:cf:db:28:30:20:9b:2d:a9:e5:c7:3f:e8:6b:55:dd:
         0f:20:06:c3:88:c1:e6:05:52:b7:04:99:e3:71:2f:d0:52:06:
         cc:cd:31:c3:01:6e:9f:0d:5e:58:33:b6:68:8d:75:70:05:04:
         d3:96:53:9b:ee:55:49:a9:2d:a6:59:5d:16:10:91:a1:95:63:
         7f:9e:50:56:61:45:2a:99:c0:d6:bf:30:16:3c:bf:19:c4:fd:
         76:35:b5:cf:48:8d:a3:7e:f6:09:f9:65:f1:a3:5b:c3:fd:6f:
         39:af:d4:5c:6f:36:db:9e:32:e2:12:03:42:1c:84:9b:6a:12:
         b0:a7:2b:ae:2a:ba:17:9f:da:3d:67:5c:99:4d:e0:62:09:25:
         27:99:e2:30:aa:72:63:97:03:7f:79:ba:47:e7:cc:a7:34:74:
         5a:bd:56:e7:31:04:44:7f:06:b5:d8:21:5c:55:0c:34:f3:d2:
         3c:44:f2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:24:34 2026 by rpki-client