This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
File:                     fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer (raw, json)
Hash identifier:          t7sBTXsjMrwZIsCvp+L45WRn05xZeK6NFEsKVpKbm4Q=
Subject key identifier:   7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5CAD373A8F80FC90382435E27DE2FF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:19:44 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 196817
                          IP: 91.213.6.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:ad:37:3a:8f:80:fc:90:38:24:35:e2:7d:e2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:19:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3d:85:b0:7e:86:9d:5b:fe:0c:bd:10:46:9d:
                    a5:17:97:83:52:d8:c7:02:ec:49:59:33:00:f7:78:
                    ca:07:2c:44:19:59:3b:48:ac:af:3c:8a:de:f1:8e:
                    ae:d1:5c:99:dd:9b:21:f9:d0:e1:e9:59:2f:d2:6e:
                    55:12:a9:e0:91:5e:64:4c:e3:74:c7:5b:18:28:c0:
                    86:43:e7:45:e8:66:83:03:34:af:20:23:52:cc:c1:
                    1c:e6:89:d7:cc:fc:ac:09:35:48:f9:0f:4c:9a:37:
                    7e:f5:2a:71:f8:b6:92:3b:67:4c:eb:34:e7:5e:37:
                    25:e7:5d:b7:ad:b9:33:64:46:dd:72:5c:86:e3:e0:
                    15:b2:5e:fc:d3:8d:6f:a4:cd:14:12:30:10:0d:90:
                    5e:5a:2b:b9:78:98:ac:0d:6d:97:ee:f3:e1:b2:46:
                    dd:61:b1:37:4b:fb:e6:26:39:0c:61:d2:b2:10:30:
                    49:c5:48:96:f9:89:71:ce:7e:d6:49:12:1f:28:64:
                    9b:2e:ca:58:af:d4:1d:0d:17:c9:ea:66:c1:77:3a:
                    18:0e:79:b8:77:d3:7d:61:29:90:cb:42:a9:b0:a2:
                    b3:a9:ce:a0:b0:a0:6c:fe:64:cf:d8:ff:53:6b:3b:
                    82:1b:47:5c:bb:0b:b6:48:9a:33:c2:5f:9d:2f:1f:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.6.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196817

    Signature Algorithm: sha256WithRSAEncryption
         68:26:89:95:2a:43:5a:02:90:21:5d:b9:02:32:82:5c:79:10:
         fa:3f:a5:f7:18:a3:bc:c2:91:18:05:fa:f8:2d:f7:bc:79:c4:
         c4:ad:ff:ec:8a:93:63:67:c3:ca:bc:42:51:a5:49:8b:56:b2:
         70:3d:8e:57:47:a7:ec:b1:8c:11:1f:fd:3f:66:0e:92:0a:68:
         4d:c8:46:41:0f:a2:42:4c:b6:5f:f4:e1:3e:8d:1c:a0:fc:02:
         41:20:95:30:87:27:08:67:c2:c8:5d:9c:fe:ee:79:10:b6:18:
         2e:8d:6a:ae:16:c8:f1:43:6c:43:4a:8a:85:fc:a8:8f:a9:10:
         93:a5:b9:95:4b:bd:be:8e:ed:2c:2c:a5:77:e6:a7:95:e6:b6:
         9c:f1:73:98:69:c4:81:ad:5b:9f:9a:40:b9:0f:9d:3b:2d:f2:
         89:1e:85:9c:6b:3e:68:3f:47:e1:7c:d2:51:c9:05:2c:bf:57:
         3d:3c:e2:01:33:28:4c:98:3b:de:6f:fa:5a:a7:c6:c0:2d:fd:
         b8:50:28:93:39:7a:19:3e:af:cb:66:10:b5:fb:a9:14:ed:82:
         dd:ca:23:8e:60:fe:15:8f:e3:88:dc:9a:bc:f5:e9:e4:26:96:
         1b:a9:f4:97:e9:ce:4c:9b:d7:c6:d8:8b:7e:53:f0:9c:cb:af:
         05:f6:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:04:56 2026 by rpki-client