This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
File:                     g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer (raw, json)
Hash identifier:          Zuh/JHvwCQ3Nc8N+VR8CKKotNnJeWliiDCdiCDNUvEs=
Subject key identifier:   83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7DC9F65EB58BDB9CDACD7AA5913A23A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 08:19:06 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 57757
                          IP: 91.213.19.0/24
                          IP: 2001:67c:fe8::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:f6:5e:b5:8b:db:9c:da:cd:7a:a5:91:3a:23:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:19:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:5c:3a:d3:88:b1:e6:0f:51:c2:f8:9f:4a:
                    d3:cf:51:61:e2:9b:c2:e7:74:0a:96:5c:f2:17:3d:
                    cf:03:ed:ac:6b:e7:d9:ab:44:61:84:ee:55:f7:da:
                    84:68:1e:84:8a:e0:8b:64:88:c3:0b:ff:2e:7b:99:
                    2f:ea:52:f5:cf:87:34:9a:9f:55:06:97:6e:b8:86:
                    41:f8:36:c6:7e:39:2d:c9:81:68:56:b9:90:db:85:
                    b0:b5:7d:a3:3a:e7:6d:ba:c8:84:f7:1d:c5:ae:e5:
                    83:7b:c8:8a:55:f7:0a:41:01:75:ac:be:91:45:57:
                    ac:44:6e:20:78:9b:de:2e:a8:70:4d:f9:55:ff:2e:
                    88:a9:e2:69:31:92:54:fa:d1:a6:fb:d9:8d:d7:99:
                    11:ac:83:a9:41:07:56:a6:0e:a5:95:2f:a5:e2:e4:
                    d7:fc:7d:9f:46:be:85:72:7e:43:15:6c:5f:d2:cb:
                    66:d3:89:2e:34:1d:4c:2e:e4:99:23:a9:da:f9:39:
                    c5:6c:cc:83:ca:56:4f:7e:57:32:25:fc:58:0f:3f:
                    23:20:9f:8f:71:c6:b5:a2:f6:56:b7:e7:6c:b5:55:
                    a1:4d:cf:28:ff:41:5d:53:a6:08:7d:29:5e:ea:87:
                    06:aa:fc:c3:11:75:a5:2d:78:8b:ab:47:e1:11:43:
                    bf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.19.0/24
                IPv6:
                  2001:67c:fe8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57757

    Signature Algorithm: sha256WithRSAEncryption
         59:33:15:55:33:15:f8:63:6d:80:28:2f:92:67:4e:61:25:05:
         99:36:62:b2:fc:f2:8a:76:25:98:c6:1e:35:62:4c:7d:1d:31:
         77:fd:ad:87:43:11:ec:07:70:30:75:65:9c:eb:c5:32:1d:28:
         50:b5:1d:a7:13:88:db:21:08:c4:4b:e8:e2:83:d8:c3:a1:71:
         23:ce:80:e8:aa:8d:d4:93:75:70:1a:a5:b8:3b:90:f5:fa:74:
         b6:27:cf:7e:f7:93:2d:aa:93:97:74:54:e2:9a:23:f6:50:9d:
         88:b5:21:81:c4:b5:17:08:a9:46:65:0e:2f:88:92:75:65:5b:
         a8:4a:29:92:f1:d4:23:cc:c3:05:35:ea:53:3f:3e:be:27:10:
         7c:6c:0e:5a:cc:72:60:2d:ea:9d:15:fc:c8:fa:d0:75:9b:be:
         16:e6:e3:fc:5a:de:91:20:7c:a9:07:e2:9d:89:0d:3a:f7:bf:
         cc:ad:d9:87:d3:ee:c1:e9:42:e5:35:27:a6:b8:90:1c:c1:95:
         6c:7a:87:fa:66:cc:59:3e:c2:f4:ea:98:ee:03:41:d6:aa:69:
         31:db:02:1e:db:ad:f7:ba:8f:c5:aa:65:f5:76:4a:2f:b9:ac:
         6e:26:19:54:77:62:e6:81:16:01:15:28:af:d6:06:f2:10:c4:
         ee:34:65:aa
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZt9yfZetYvbnNrNeqWROiOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2VjZmI2NGJkYTUyMTM3MDhmZjY3YmFkNGM4Mzk1MGIxZmZkYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKZcOtOIseYPUcL4n0rTz1Fh4pvC
53QKllzyFz3PA+2sa+fZq0RhhO5V99qEaB6EiuCLZIjDC/8ue5kv6lL1z4c0mp9V
BpduuIZB+DbGfjktyYFoVrmQ24WwtX2jOudtusiE9x3FruWDe8iKVfcKQQF1rL6R
RVesRG4geJveLqhwTflV/y6IqeJpMZJU+tGm+9mN15kRrIOpQQdWpg6llS+l4uTX
/H2fRr6Fcn5DFWxf0stm04kuNB1MLuSZI6na+TnFbMyDylZPflcyJfxYDz8jIJ+P
cca1ovZWt+dstVWhTc8o/0FdU6YIfSle6ocGqvzDEXWlLXiLq0fhEUO/4QIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFIPs+2S9pSE3CP9nutTIOVCx/9w4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzAzMTQ2
My01OGU2LTRmY2ItOGNhMS0xZmNmZDBjOGJkZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMDMxNDYz
LTU4ZTYtNGZjYi04Y2ExLTFmY2ZkMGM4YmRmNS8xL2ctejdaTDJsSVRjSV8yZTYx
TWc1VUxIXzNEZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW9UTMA8EAgACMAkDBwAgAQZ8D+gwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAOGdMA0GCSqGSIb3DQEBCwUAA4IBAQBZMxVVMxX4
Y22AKC+SZ05hJQWZNmKy/PKKdiWYxh41Ykx9HTF3/a2HQxHsB3AwdWWc68UyHShQ
tR2nE4jbIQjES+jig9jDoXEjzoDoqo3Uk3VwGqW4O5D1+nS2J89+95MtqpOXdFTi
miP2UJ2ItSGBxLUXCKlGZQ4viJJ1ZVuoSimS8dQjzMMFNepTPz6+JxB8bA5azHJg
LeqdFfzI+tB1m74W5uP8Wt6RIHypB+KdiQ0697/MrdmH0+7B6ULlNSemuJAcwZVs
eof6ZsxZPsL06pjuA0HWqmkx2wIe2633uo/FqmX1dkovuaxuJhlUd2LmgRYBFSiv
1gbyEMTuNGWq
-----END CERTIFICATE-----