This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gAVnqlixEmbTjGRvpkc_VEk3fE0.cer
File:                     gAVnqlixEmbTjGRvpkc_VEk3fE0.cer (raw, json)
Hash identifier:          0CxiZmlUJJWmxasHcrNtIwr58lJJgSXJiJbvj943qTQ=
Subject key identifier:   80:05:67:AA:58:B1:12:66:D3:8C:64:6F:A6:47:3F:54:49:37:7C:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7B363A17E5CCA1112A9B48AA06097467
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 20:18:30 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213530
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:3a:17:e5:cc:a1:11:2a:9b:48:aa:06:09:74:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=800567aa58b11266d38c646fa6473f5449377c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:e1:f4:73:a0:9e:f2:fc:74:fb:34:d8:2f:
                    bc:f6:ab:fe:69:60:70:d9:78:18:f9:f5:c1:52:39:
                    14:06:7c:c3:2a:34:5d:ef:59:dd:a0:d8:f1:16:13:
                    2f:1e:63:40:ed:bb:7e:22:35:7a:a0:9c:c8:11:e1:
                    c4:94:2c:16:19:fb:6c:ee:08:0b:80:8c:ab:72:3c:
                    77:ea:af:7f:b1:38:cd:83:00:64:24:58:e1:8a:e4:
                    05:d5:d5:6a:92:a9:dc:a9:4c:56:c0:7b:6f:5d:6b:
                    36:09:70:be:ce:7d:6e:66:8a:4f:c6:31:23:d0:16:
                    73:3b:07:ea:c1:5b:8b:71:23:c5:16:75:bf:cc:1e:
                    18:83:51:e9:19:3d:ea:46:08:f5:d2:6e:f7:f8:fe:
                    34:ac:8e:d4:35:ad:be:b9:54:bc:3b:f3:28:e6:2c:
                    b2:f3:e5:2d:06:30:ac:1e:29:02:2a:db:49:9e:f8:
                    0d:46:f5:59:7b:08:12:3d:55:54:3b:4c:8c:2b:4e:
                    fb:89:68:e3:e2:16:fe:73:32:06:1e:ae:f2:66:d6:
                    8e:84:95:ba:5d:f0:2c:e0:a7:e6:e5:95:7b:37:f5:
                    1d:76:ee:58:35:f5:a8:96:f8:3d:e9:6d:b7:41:d3:
                    77:80:9c:4b:b1:06:05:fb:27:6a:19:89:24:49:f3:
                    9e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:05:67:AA:58:B1:12:66:D3:8C:64:6F:A6:47:3F:54:49:37:7C:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213530

    Signature Algorithm: sha256WithRSAEncryption
         17:27:7c:2a:a9:8f:fa:19:c4:f1:4f:12:4a:0c:ad:91:ab:71:
         fe:08:87:a0:ae:da:c7:9d:c0:e6:66:6f:40:ad:98:33:bf:6d:
         52:f3:50:f0:47:33:b2:63:3f:e1:14:cd:c7:f7:2c:fc:65:dd:
         1f:71:04:79:77:e8:6e:c5:86:89:ff:c6:c8:74:5d:f5:49:e8:
         3b:da:ec:45:52:ca:76:94:9f:ef:a9:54:8a:84:1f:37:8b:62:
         1a:02:df:1e:40:b0:7a:b2:72:94:3c:9a:9f:6b:0c:8e:cd:0d:
         ce:f7:31:c7:86:65:ef:d7:29:4d:f1:81:6e:76:35:de:f8:36:
         54:0b:a7:db:ee:d6:d6:12:1e:36:d6:98:7b:f4:b3:c6:be:f2:
         d7:db:17:e9:94:87:e3:1f:10:59:88:2c:c1:c4:5a:d3:af:aa:
         47:18:3b:12:78:24:e7:08:41:5f:be:26:23:a3:e7:00:a8:d1:
         8a:64:8e:ee:40:8d:76:d6:5e:9d:92:b3:7e:ca:b0:62:39:ff:
         ac:2a:e7:d0:68:7b:3b:fc:0d:92:0c:c7:09:b0:48:45:bc:e2:
         f1:ac:2c:93:66:7a:b0:43:41:4c:71:79:c8:f0:10:54:e6:12:
         9a:24:7d:db:89:04:26:30:51:ef:64:c6:a1:cf:5e:71:a3:b8:
         64:96:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----