This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
File:                     hkCo0qJ0maklfW7UZjoLMNob_jM.cer (raw, json)
Hash identifier:          B+Og41jYpAYbw6BTlC/DcivAGqo5LcFNWE4zf1cK1wQ=
Subject key identifier:   86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA334A0B08549D852A8CFDA1D784355
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:17:32 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209652
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:34:a0:b0:85:49:d8:52:a8:cf:da:1d:78:43:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8640a8d2a27499a9257d6ed4663a0b30da1bfe33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7a:6f:69:d4:51:0f:63:89:fe:4c:ea:4b:e2:
                    c3:41:21:81:68:85:ed:85:34:87:aa:5d:4b:b2:9f:
                    41:d5:7c:42:c3:2c:76:d6:f9:06:09:5d:4d:8e:53:
                    d0:52:3a:be:fb:8b:25:42:8b:de:83:de:e9:fd:9c:
                    a5:48:83:b7:db:d3:c4:a4:51:de:27:ce:42:28:77:
                    49:5a:da:59:48:cb:f5:72:c4:e0:4e:55:d5:56:1c:
                    96:83:63:1f:a6:65:ea:5b:89:70:24:43:d3:94:7d:
                    be:eb:f7:7d:4e:d9:e5:c4:2a:be:25:7f:d8:2c:84:
                    99:ff:a6:b2:36:12:ed:b8:be:61:ae:ed:66:39:c0:
                    ec:ae:b5:65:e2:7a:b7:93:57:80:fc:9e:c6:a6:f4:
                    a1:0e:d6:63:ca:48:e8:bc:b5:1c:d4:b0:b5:94:81:
                    1c:47:81:56:a6:06:d1:da:af:1d:07:ca:89:94:ee:
                    8d:22:1f:76:71:7d:61:88:96:fe:78:6b:00:e4:3d:
                    8b:8b:8f:bf:6c:d3:e8:12:bd:8c:99:6c:ba:50:26:
                    6e:0c:01:17:dd:ef:0e:8c:1c:42:28:d9:4c:62:15:
                    8d:22:3b:6f:af:b0:84:06:f3:e8:68:84:2e:cb:3c:
                    12:b3:9c:15:73:8c:d9:24:86:e8:9b:cf:45:8b:34:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209652

    Signature Algorithm: sha256WithRSAEncryption
         2f:0f:01:0f:8c:3f:2a:99:61:c0:80:13:03:01:b7:c9:a2:d5:
         2e:43:3e:5d:cb:c6:55:9e:8e:1b:97:b5:6b:61:52:1f:7b:54:
         e1:24:f0:b8:6b:58:73:f5:10:18:e8:eb:b9:66:93:a4:9a:ef:
         33:91:ee:e5:cc:f0:85:96:6c:5b:47:b3:80:62:74:2d:8c:1a:
         0a:0d:90:73:85:f6:ed:03:a1:69:f1:35:c0:fa:ac:fa:ea:51:
         82:d5:16:5c:dc:3c:5d:dd:59:af:26:96:7e:1a:34:3a:94:c3:
         e1:b3:c0:91:bf:03:c5:f9:ec:3b:2b:c2:c5:73:3c:c9:9e:9c:
         f0:37:16:f9:47:f0:37:de:42:8e:3b:dd:0d:89:7b:ff:82:1d:
         f1:61:20:96:2f:c4:7f:a9:de:e0:4d:1d:b9:bf:83:5a:a8:cc:
         a4:46:79:bc:00:0a:03:e6:8f:0b:20:9f:88:c0:19:21:8f:0f:
         ad:fd:78:ee:3b:04:ab:05:58:8b:59:5c:f9:29:1c:72:7b:e0:
         03:28:d2:e0:9c:8f:cf:3d:06:e8:a8:89:6d:02:11:13:0a:bc:
         b4:6c:0f:85:96:fd:32:e7:4d:53:b9:61:69:22:e0:95:23:c7:
         17:ee:ee:88:22:7a:2f:b8:06:58:15:a2:12:da:0e:01:60:1f:
         bf:42:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----