This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
File:                     fJ1n8CerKw_yajV1FHOa_ogDesk.cer (raw, json)
Hash identifier:          KJtDyaRnyoJhfDlVxljxrgp4f/WvS0VKVY06YOGEM9I=
Subject key identifier:   7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A24DEE20354F046F698C7791742739
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:17:41 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.49.64.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:4d:ee:20:35:4f:04:6f:69:8c:77:91:74:27:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:87:76:96:45:90:ca:98:a1:87:04:e2:a6:
                    a2:c1:1b:f8:c5:90:a2:7d:74:47:b2:dd:ce:84:ed:
                    eb:a9:28:14:85:be:c7:ca:34:78:8a:f5:f2:b7:ea:
                    2e:7f:39:8f:c9:a9:d1:a0:25:50:29:8b:03:62:64:
                    90:9f:a5:fd:ec:98:50:5c:7b:ee:1a:98:3d:2e:5d:
                    75:bc:3a:5b:5c:09:c7:b4:92:1f:dc:5e:c4:19:ae:
                    0e:fc:c7:a9:91:8f:72:4c:d8:27:97:2d:ad:a0:84:
                    e4:77:25:df:61:7a:19:99:33:eb:d1:70:e5:fe:ad:
                    92:31:5e:ed:8b:19:e9:a3:fe:64:85:81:41:7d:7f:
                    58:a9:c9:fa:9f:e7:21:ee:e4:3c:6a:ad:25:be:e0:
                    f7:29:fc:c7:15:7d:a8:15:22:26:b8:ad:a2:c3:43:
                    4e:30:a9:2c:7e:c8:7f:9c:47:6a:8d:fa:d9:49:e2:
                    22:46:52:fa:89:90:8e:2f:12:b6:5e:ec:5f:22:7e:
                    03:96:1f:7d:c5:b3:49:b5:55:18:4a:b1:1a:84:be:
                    5b:43:0d:dc:b6:c9:6c:05:24:8b:10:19:5e:0a:64:
                    e6:c9:30:79:08:3c:5f:f3:a6:bc:96:e1:ca:62:7a:
                    13:2d:08:bc:4c:9b:e1:94:55:26:8d:53:63:9c:cf:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:82:b2:6a:2f:6e:19:91:cb:70:85:97:76:6b:ce:74:c1:
         d7:85:32:7c:d1:46:9e:ab:a8:30:0b:b2:12:ee:7e:95:c0:9d:
         c6:20:7a:68:d8:40:f1:c2:b6:94:bf:17:f2:07:d8:30:79:88:
         49:38:04:a9:33:dd:93:1f:ca:84:dc:45:e0:3d:9e:3f:8e:8c:
         c1:01:b7:27:76:db:15:22:d5:80:d0:12:e4:b9:78:d1:6b:a5:
         04:1a:ed:b7:89:e7:a6:70:3f:ab:05:f6:a8:15:51:83:88:cf:
         36:2a:6b:1d:99:b8:0b:ae:42:ec:26:4a:e0:0d:6b:70:7f:29:
         74:12:a2:54:8f:59:ed:13:d7:f5:73:d1:bd:5e:da:f2:4a:13:
         d2:00:fb:97:08:66:e3:11:fb:ef:fe:31:c2:71:82:63:79:4f:
         a8:ef:3b:79:5d:07:7d:44:6f:f9:7b:53:21:00:52:c6:1b:cf:
         31:58:8b:80:57:02:65:77:b5:51:26:ed:1c:36:2f:9a:55:48:
         4a:42:56:e5:d9:97:de:13:f1:7f:97:8d:7b:b0:80:bb:3f:76:
         d6:eb:e6:b6:d3:40:c4:84:aa:01:42:70:ef:9c:f6:68:24:a9:
         87:74:88:99:6a:20:3d:42:aa:78:26:9d:af:7d:20:8b:e1:53:
         63:6e:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----