This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
File:                     gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer (raw, json)
Hash identifier:          I4E75gzKkeJuPGt5kwF4oDj+UKjj2DZKg14Ca3DjPgg=
Subject key identifier:   80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7DCAEDBA75076180FA2B9A9B24481D0E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 08:20:09 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213936
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:ed:ba:75:07:61:80:fa:2b:9a:9b:24:48:1d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:20:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=80e7137d0d80586246c6aff496727b603d351692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a2:aa:59:94:93:62:74:4f:b4:65:86:3e:75:
                    f5:28:13:1a:e1:d8:f5:03:d0:b4:91:92:9b:3c:ba:
                    cc:7a:3a:29:1d:6e:d0:dc:f6:09:2a:24:a5:11:84:
                    48:58:39:8c:d9:b8:c0:13:c6:62:bc:a6:f6:0f:41:
                    a5:a3:3d:c5:34:d0:31:c9:38:18:23:92:1d:dc:0f:
                    f2:5d:9a:32:ce:30:98:49:66:4d:b5:ab:5d:6d:dd:
                    90:e0:66:c2:d8:76:13:b6:37:97:b0:9e:dc:29:54:
                    08:86:ff:16:b8:c1:6b:60:be:36:23:a0:68:d2:fb:
                    6a:a7:d4:a9:a7:e9:f4:31:36:17:fc:20:ee:f4:05:
                    4b:a9:9f:fb:7f:81:ad:69:46:56:77:1b:8d:90:89:
                    df:01:85:49:b9:d7:0d:86:01:d0:3e:d4:ff:e5:1c:
                    71:02:12:8d:1d:c4:ed:72:4d:55:82:9b:3e:94:be:
                    f8:4c:0d:f7:19:58:16:67:50:25:12:20:25:5b:1a:
                    be:11:92:8a:cf:9c:c2:06:7b:c4:c6:e4:cd:94:6f:
                    4e:d4:04:d6:fb:17:1c:fc:02:99:0e:cb:f9:6d:74:
                    87:f8:9d:1c:ab:aa:06:31:03:c9:5e:f0:4c:d2:1f:
                    64:41:5f:80:b4:56:b4:3d:c6:b7:48:e4:73:f3:ea:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213936

    Signature Algorithm: sha256WithRSAEncryption
         9b:28:75:01:5f:42:92:2c:46:c3:b0:f0:30:08:ea:29:30:4f:
         33:f7:89:f6:3f:bd:49:01:f4:5d:53:75:18:29:ad:4a:2f:b7:
         ff:f0:cc:1b:45:ad:c0:43:b9:c9:7e:46:e7:b0:20:69:40:c3:
         e8:06:b8:8d:17:a1:4b:65:c0:a5:17:c2:8e:71:34:60:54:28:
         21:1c:46:b2:16:09:a4:4a:64:59:e7:79:0b:d6:08:f0:db:8a:
         a1:ed:8e:ff:4b:24:6b:28:cc:b3:9e:82:36:5c:10:74:1f:df:
         12:df:cc:1f:cb:24:e4:b7:e1:fb:8b:68:a8:f2:6a:a5:4b:7e:
         29:6f:80:d7:0a:e3:4e:db:b7:10:33:18:41:c1:51:5c:1b:c9:
         ed:d3:cc:ef:23:a1:1e:ad:c3:36:44:25:b0:7c:d2:ba:fc:be:
         98:5d:3d:64:73:16:53:73:f6:e2:cd:e0:33:12:8c:f6:57:91:
         4d:94:62:8b:44:68:39:18:f9:6e:5f:6e:cf:9a:ae:02:3d:2e:
         44:f4:20:c0:fe:55:1a:4b:cc:98:ba:94:79:78:80:cd:d1:80:
         50:02:88:08:af:ef:5a:ad:c6:a4:63:2f:ef:d9:21:0d:9c:7d:
         be:55:67:2f:77:b2:75:cf:1a:a6:c4:a4:d3:4c:51:b1:80:4e:
         1c:f3:25:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----