This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
File:                     eruW1HY31HxxYVtg2h9pHEpvC3A.cer (raw, json)
Hash identifier:          00gEIGuWbsO9hVeZUMA8kVbqiB+CLcK8/qj2cbNPzL0=
Subject key identifier:   7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7AC7D5BFAEAD7E3168B2B085FA0FD6EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 18:17:55 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 59975
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:d5:bf:ae:ad:7e:31:68:b2:b0:85:fa:0f:d6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:07:cf:51:93:a4:88:0c:e4:a5:7f:eb:a2:df:
                    a2:dc:db:36:ca:cb:53:aa:de:c7:5f:ad:50:4c:b3:
                    66:41:09:1c:86:cf:11:36:6f:2d:60:b8:9b:3a:4b:
                    0c:db:0f:76:0c:a3:a4:90:8b:9f:b3:b0:67:67:18:
                    07:34:5d:0a:7b:3a:90:c3:56:82:a6:94:37:01:c2:
                    81:ac:f0:4a:40:31:46:03:27:16:d6:d6:b8:e9:e0:
                    dc:3f:37:b9:fe:91:c4:41:ea:20:1f:19:71:11:ee:
                    b3:21:56:31:f3:8b:38:f5:5f:59:59:18:69:da:5d:
                    5d:73:c6:04:71:fe:f5:eb:0d:9e:ed:da:2a:e4:95:
                    ba:75:4c:8e:55:56:90:f9:fa:27:91:38:e9:06:9b:
                    db:e4:b9:de:9f:87:c2:ae:84:6d:59:7a:79:b9:ef:
                    54:6d:39:9f:74:61:be:0c:d7:df:40:71:25:65:d6:
                    eb:6d:a6:97:d7:4e:d3:3e:89:6e:62:e8:cb:8f:eb:
                    c6:01:16:ef:ce:69:68:02:53:89:25:89:72:55:f4:
                    33:e7:bf:cb:0a:75:71:5d:3d:37:f3:ae:de:e5:9c:
                    24:77:45:c4:58:8e:80:fb:e7:54:71:22:93:06:73:
                    3f:ef:84:e8:85:bd:d1:95:c8:d7:90:44:5b:fe:4d:
                    75:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59975

    Signature Algorithm: sha256WithRSAEncryption
         17:54:50:ad:14:03:ab:c3:dd:87:3c:84:b6:e4:71:b1:a3:04:
         a2:5f:10:19:f6:6e:5b:a3:ef:96:34:ce:f9:20:78:c4:cd:43:
         a0:5d:05:7e:c3:b8:e0:d7:7d:b9:d8:67:6b:26:be:28:8f:14:
         78:ea:7d:ac:8a:ac:3f:4d:0d:1d:27:39:53:72:c8:47:a9:aa:
         47:bf:31:35:df:db:17:60:65:78:f5:14:58:22:4b:9f:e1:8d:
         2a:51:c0:d8:e4:33:79:d8:c8:b0:6d:ed:41:aa:0f:c0:67:2e:
         2e:d3:da:3e:b6:5f:c4:76:59:c3:32:1a:19:5f:5d:63:83:50:
         46:89:2d:84:17:4d:df:90:3b:48:24:74:0a:7b:9a:b0:1e:92:
         2a:af:81:d4:69:d7:d8:29:7f:18:af:7b:62:bb:65:e9:be:fb:
         0e:d3:08:65:4d:af:85:6f:65:50:f1:19:cb:f1:20:3a:bb:be:
         43:e7:61:04:71:19:79:a8:da:25:09:5d:7e:9d:0c:fd:7a:47:
         ea:8b:23:9a:b1:5a:7f:b4:db:73:af:5e:ef:27:c2:be:32:5c:
         b5:16:8d:be:74:5a:dd:d6:80:50:e4:72:17:da:bf:7a:f9:54:
         8d:91:8b:9a:30:9d:17:ae:44:be:d3:47:cd:9e:bb:56:dc:26:
         45:18:eb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----