This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
File:                     ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer (raw, json)
Hash identifier:          f7v5NIImq96zIl6tGa8gJcMQJ265t0Fv8xv7yNPHb1k=
Subject key identifier:   89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E3780DD3375735448755D8C04F7ECB5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:18:45 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 59956
                          IP: 2001:678:b4c::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:80:dd:33:75:73:54:48:75:5d:8c:04:f7:ec:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:fe:18:ed:a1:c6:fa:9f:e0:bf:fe:d4:d6:
                    01:ce:d5:bc:97:18:8c:a0:55:a3:15:ea:6e:3d:62:
                    b8:7b:3f:7a:22:2b:db:a3:94:d8:48:cb:07:b1:2b:
                    ad:22:70:a5:7c:ab:bd:65:a8:4e:18:ed:30:72:8c:
                    1d:e7:d1:15:e2:b6:3f:fc:20:0e:d5:d3:f4:e8:a6:
                    3d:98:f5:40:53:ea:ca:86:8e:08:3b:68:63:56:7d:
                    5f:2b:63:05:46:36:99:ec:a7:d7:72:46:27:69:36:
                    e3:2a:5d:29:c6:e4:54:ef:2a:89:e7:79:4e:0a:a3:
                    ae:26:c1:cf:33:ec:ac:ef:05:ef:b0:75:1f:bd:a5:
                    01:c4:ed:f1:d6:b0:77:ad:1c:0f:07:fd:5e:3d:4a:
                    8a:b0:39:a1:c0:a8:d5:a9:c2:40:68:d0:e5:10:fc:
                    74:11:b0:dc:99:37:70:c6:bc:db:fa:7f:9c:bb:3e:
                    d7:72:b3:1d:5d:b8:40:79:69:31:0e:51:83:28:d7:
                    9a:72:62:59:32:2b:9c:e6:fd:c7:07:3c:f4:3d:2c:
                    45:78:78:2c:32:9d:a1:0c:3c:48:b4:e7:7b:c0:d6:
                    37:b8:d7:13:1c:2d:a4:30:c4:3c:26:64:69:9c:87:
                    90:28:d7:86:72:fa:c4:37:c1:0f:2d:93:60:3e:a3:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:b4c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59956

    Signature Algorithm: sha256WithRSAEncryption
         78:89:98:91:e9:35:f8:36:64:6a:f8:33:57:6e:05:6e:05:f1:
         dd:6f:46:36:55:ac:ad:63:58:8b:4c:d0:54:1d:d4:38:1b:e6:
         6d:9d:13:51:a4:ae:0a:a1:01:15:da:fe:6c:b9:55:4e:07:61:
         42:36:6c:93:7a:ce:89:ad:d1:4c:0b:ca:65:04:86:31:e8:1a:
         c8:e9:b3:7e:b4:8e:fa:2c:13:e0:7f:a8:3b:8b:43:d7:93:95:
         17:04:c0:16:df:e4:81:00:41:57:48:a5:c4:77:59:92:cf:9f:
         41:d5:6e:96:3d:b1:fa:94:67:c7:80:03:c2:ec:2a:d3:13:82:
         79:c1:60:f9:f6:c8:fa:90:c7:e1:fe:8f:fb:e5:70:7f:69:03:
         7e:1f:10:63:b5:13:6d:13:9c:28:52:31:9d:a9:6f:d0:31:36:
         16:58:ea:20:50:87:a8:88:26:bb:53:9f:da:5b:1e:e4:22:a7:
         48:3e:ca:ba:ab:2e:03:11:13:16:8d:35:22:21:c4:20:65:01:
         d2:4c:6b:55:73:cf:a1:00:76:07:47:e3:89:3b:39:5b:15:7f:
         2d:45:a6:6f:d7:36:2d:65:33:d4:97:f1:19:15:68:bf:0d:2c:
         a9:8b:00:a5:f7:c1:d6:06:ab:18:82:5d:69:98:70:10:ad:55:
         51:81:49:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----