This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
File:                     g103QIoiXxqJZPjXK8mdm75TMjQ.cer (raw, json)
Hash identifier:          LIL49nXYkMrTYhYypyJJCV/eeLi30G1JJM+eBu+XrHM=
Subject key identifier:   83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F84256F780A159BC245B09CE645A932
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:22:05 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 203187
                          AS: 204845
                          IP: 185.82.80.0/22
                          IP: 185.238.124.0/22
                          IP: 2a05:8e00::/29
                          IP: 2a0c:2e80::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:25:6f:78:0a:15:9b:c2:45:b0:9c:e6:45:a9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:22:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:e7:bb:5e:a9:be:d3:2f:d8:5f:c6:20:23:
                    4e:ee:86:25:de:80:ad:e8:fe:b9:a0:4a:f4:fe:5d:
                    fa:5b:4c:53:30:ce:07:47:2b:e3:6c:d0:be:65:77:
                    87:3f:d2:3a:59:fe:90:fb:2d:8d:b5:ad:9a:fe:df:
                    47:f5:f4:4e:56:3f:fa:41:d3:3d:7b:87:94:7d:9e:
                    dd:46:55:9a:ab:f1:3f:0a:5f:b6:89:c0:d4:96:6b:
                    ce:70:47:c2:53:58:e3:cb:d8:7c:d5:eb:3c:50:ce:
                    fb:3b:34:db:ea:3d:bc:18:02:ee:7f:6c:76:f1:d5:
                    ce:75:6a:bb:bb:91:d8:b6:36:c4:38:6f:ee:dc:b4:
                    c6:fc:c1:40:74:7b:6b:78:4d:79:f9:0b:51:91:59:
                    9d:fd:6f:09:b0:13:bb:51:e2:3d:af:1a:ea:17:ed:
                    44:c3:e2:05:88:c9:8b:86:54:63:88:a5:82:ba:1e:
                    03:30:c5:4c:53:ff:6b:a0:3c:4d:98:6d:63:b0:b0:
                    bf:d0:84:8e:d1:4f:69:78:4d:98:40:c1:4f:28:b3:
                    76:df:f2:ab:85:0b:fd:8f:61:9b:c4:dc:26:22:05:
                    74:8e:d9:5a:d2:84:e9:0e:7a:c3:8c:32:2c:ab:cb:
                    75:95:01:6d:8b:d9:73:7c:5f:a6:8a:40:01:d2:0f:
                    80:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.80.0/22
                  185.238.124.0/22
                IPv6:
                  2a05:8e00::/29
                  2a0c:2e80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203187
                  204845

    Signature Algorithm: sha256WithRSAEncryption
         3d:f3:fc:89:66:bb:ff:55:ca:2f:4b:53:20:65:0b:c4:bf:9f:
         ef:6b:06:58:3f:65:fe:d6:08:f0:b9:da:f2:0e:5d:d3:c0:69:
         4d:3e:ba:f8:d4:89:14:7b:48:70:a5:9c:3e:ba:aa:a9:47:4f:
         8d:1f:47:32:47:1e:0a:c3:56:da:14:60:14:7d:a1:47:76:c7:
         e4:97:03:33:16:ff:e8:81:6d:80:d7:c0:d0:11:d9:4b:7b:71:
         94:17:4b:a9:9e:0a:f1:76:33:a5:e0:19:c7:e7:f5:77:85:71:
         b5:1d:a6:05:ce:5c:45:ca:3a:31:c8:7b:3d:6b:d0:02:b9:ea:
         49:5e:67:a6:ef:cc:48:b1:d3:61:0e:f5:b2:06:6e:51:4c:43:
         10:71:3c:fd:91:0b:50:93:f2:fc:fc:4b:05:77:98:7e:98:c1:
         8c:0a:8d:cf:7f:e5:5d:dc:c7:a8:fa:0f:50:a1:e9:72:a9:c1:
         05:a4:02:1d:9c:72:40:ad:85:0b:1c:75:82:2f:d2:07:bd:ca:
         9d:b6:9c:b8:0a:73:94:a0:e8:a9:7a:82:49:55:00:e5:ed:a1:
         a8:3b:04:01:23:69:8d:21:25:13:6d:67:99:b1:82:05:82:d3:
         a4:cc:3c:10:40:5a:95:ac:9d:68:9f:8c:4e:2c:67:77:4e:37:
         7e:10:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:49:45 2026 by rpki-client