This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
File:                     ikAMEXs2e5IxswUvpRV8OaXgxJs.cer (raw, json)
Hash identifier:          oBy3ChPmEJ/JkpDixfZKxj1QIT9F3UlaI3AsTkHeKCA=
Subject key identifier:   8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B2BB2E31806F79F8A1FA806750905E2F8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 17 Dec 2025 09:45:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203127
                          IP: 193.30.92.0/24
                          IP: 2a11:1dc0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:b2:e3:18:06:f7:9f:8a:1f:a8:06:75:09:05:e2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 17 09:45:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:d1:d2:27:ac:a2:48:cf:bc:9c:a7:6b:38:
                    e5:02:7e:ea:ce:3f:23:2d:85:8c:de:c4:fc:61:13:
                    75:ac:23:74:22:89:ed:05:72:30:e7:88:15:b3:b3:
                    c8:4e:d1:55:7d:da:b7:72:66:fc:3e:39:21:02:0f:
                    87:3f:92:f7:a8:3e:d1:3b:da:77:84:2d:d4:d1:da:
                    b9:0c:b6:a4:ea:f1:d8:46:b8:7c:a2:0d:3a:00:b2:
                    63:00:69:2b:5e:9d:c3:e8:44:c6:e1:8f:ed:b9:f6:
                    76:32:20:fd:00:33:71:86:f4:a8:c5:0d:bb:9d:3b:
                    d9:c8:41:d4:ee:65:fe:9d:05:f9:24:04:72:bf:f7:
                    bf:7f:f5:dc:ba:c0:c7:3b:8f:ca:82:11:6a:54:eb:
                    86:90:f4:9e:1e:30:4f:a6:3c:c2:91:0d:f3:42:8f:
                    ed:7e:aa:39:74:e3:67:7f:c5:37:15:bf:fd:bf:34:
                    f9:da:f7:f2:c6:32:17:d4:f8:fc:e4:7a:76:b0:e8:
                    a3:37:e1:d0:09:04:b5:59:82:f1:1b:1e:8c:da:e8:
                    51:3f:d0:21:86:c6:97:dc:8c:c2:2b:5d:9e:4d:02:
                    f8:c5:19:4b:a4:e5:a2:9f:1e:be:57:be:4b:64:f1:
                    2e:bc:4e:ef:99:57:76:c9:df:0e:73:a8:37:5e:79:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.92.0/24
                IPv6:
                  2a11:1dc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203127

    Signature Algorithm: sha256WithRSAEncryption
         75:71:a9:1e:66:7c:03:d2:c1:3c:d0:4e:c1:bc:f5:4d:ef:cc:
         19:9a:7f:34:5f:7c:f7:e0:67:de:6f:4f:fb:63:fb:a2:f4:32:
         96:5f:92:2e:11:e9:c0:cc:16:d7:bb:50:13:83:83:5c:9a:c4:
         f5:32:32:05:3e:09:4b:a4:72:23:f7:04:ab:9f:27:99:ed:59:
         41:48:d9:82:0b:26:6b:db:1c:4e:ca:5b:e4:e1:7f:de:df:a4:
         11:79:b8:ed:6d:9b:d3:8e:c8:3d:9b:3e:11:b2:db:4a:a2:59:
         e0:c1:87:04:85:e5:f2:1e:5a:5b:ed:3e:e6:20:72:37:47:af:
         a7:cb:1b:4d:81:78:97:a6:d9:a2:b7:3d:99:54:e6:26:13:00:
         d9:ad:02:05:9d:14:dd:3c:9a:b5:8c:93:2d:9f:c9:f7:b8:8f:
         dc:32:a1:f6:bd:57:dd:b1:54:9b:f8:45:4a:ef:b2:f9:b7:e0:
         33:38:0f:19:1c:7f:af:30:2e:a6:24:9e:ab:f4:e3:96:4e:89:
         2a:82:bb:5d:3b:12:00:de:97:fa:aa:12:05:69:8d:8a:20:2a:
         95:e7:47:f7:87:b7:7c:65:da:66:d4:c7:62:f2:d6:9a:b7:4f:
         07:78:d1:1b:8d:88:3a:a7:c3:6f:d5:03:0d:a8:1d:28:6c:77:
         cf:e9:8a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----