This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
File:                     gvjR2XuYaTmDMZTuI04MTZW1KJM.cer (raw, json)
Hash identifier:          zb6ogiMW5Nw8gE0Wika/Iz5vmwMxYcxZpklC9XtZSfY=
Subject key identifier:   82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79114115095FFF28A42E0FCA73F37EFF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 10:18:52 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 47106
                          IP: 193.46.209.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:41:15:09:5f:ff:28:a4:2e:0f:ca:73:f3:7e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82f8d1d97b986939833194ee234e0c4d95b52893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ee:1f:ca:9a:be:ca:a7:4b:9a:cb:a1:55:c4:
                    95:0b:37:f3:47:d5:d8:34:6e:bb:7e:ee:43:dd:94:
                    eb:da:23:40:de:dc:f2:a5:dd:94:2d:4e:86:cf:05:
                    a1:93:ce:6a:fa:24:5e:71:23:80:37:b0:4a:2b:0f:
                    67:37:c6:e8:c5:f5:03:31:18:92:fe:ea:cc:5c:2d:
                    b0:66:dc:d1:04:4c:03:18:c3:e3:00:35:8e:f9:29:
                    f3:53:51:aa:03:06:dc:53:9b:5d:04:62:bc:ab:39:
                    a7:ff:45:08:c2:82:d5:9c:43:80:64:73:b1:74:01:
                    3c:12:b0:bd:84:cd:af:7c:07:61:53:f6:d2:f0:b7:
                    f6:18:f2:53:66:2a:99:76:68:98:d0:45:26:8c:bd:
                    a5:dd:cc:af:14:fd:a4:80:e5:84:f4:b2:9c:a8:00:
                    fb:29:6b:f9:ed:de:6f:fa:2e:a3:fb:00:5b:62:d0:
                    8a:e6:19:87:36:76:9e:e8:4b:18:36:f3:f8:52:69:
                    94:71:42:ee:58:b2:ba:15:16:b7:ea:79:52:e4:53:
                    8c:2c:87:cd:3a:62:0d:28:7a:39:2f:8c:64:c0:69:
                    7f:44:08:ec:34:45:d0:a8:76:20:e2:8c:10:78:5c:
                    67:e3:a7:8e:3d:35:17:e4:87:29:48:86:0d:f1:19:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.209.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47106

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:c7:5a:9a:5d:18:6e:51:dd:a0:c2:27:3d:f4:90:db:87:
         06:90:65:16:25:c0:28:10:79:6a:22:b2:55:c2:62:73:41:29:
         a4:b4:d1:0f:a9:49:16:d8:a4:cb:3f:62:8e:6b:93:e4:ec:0f:
         ce:8a:2f:27:47:3c:ce:2a:ff:49:45:33:3e:0f:ca:a7:21:31:
         5b:4d:a7:58:32:65:3b:77:c6:b4:a9:7d:83:70:42:a1:27:b5:
         da:dd:cc:a9:2a:20:ac:f4:fb:c1:76:e6:21:3d:79:8d:f1:fa:
         11:9b:6e:f8:d9:14:da:d1:e4:ef:d5:6a:a0:ca:23:89:8e:cc:
         34:31:ea:70:00:c3:ca:7b:e8:ec:05:59:cb:12:8e:52:32:90:
         21:0c:79:8f:91:0f:80:2c:ae:a2:0c:f4:e1:23:8f:60:11:37:
         f7:98:2c:ad:e2:61:48:e9:12:e1:1d:dc:90:fe:68:0e:72:95:
         e1:92:46:79:9b:b7:11:66:86:a9:7b:89:5f:1e:5e:fb:09:f2:
         9a:7a:dd:8a:4f:4d:5c:72:8d:3e:de:ce:cd:94:c3:33:8b:18:
         eb:50:be:5e:ee:73:30:be:c9:a8:50:c0:69:73:32:7a:7d:c8:
         fe:93:a3:e8:73:80:9a:3d:28:eb:65:5e:f9:2b:0f:04:79:5b:
         5f:46:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:51:08 2026 by rpki-client