This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
File:                     ioludoVA84eh3U_52qS4W6SKkG8.cer (raw, json)
Hash identifier:          IO5uRtVBDysdLIs+2F+uIZWMYxR61MZo8sLYxO7r3Ds=
Subject key identifier:   8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F831083F8CB0354D220A3783378834F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:20:54 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 201160
                          IP: 185.60.224.0/22
                          IP: 2a02:7660::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 15:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:10:83:f8:cb:03:54:d2:20:a3:78:33:78:83:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:20:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:db:fa:c1:73:c4:e7:16:5c:6b:78:ed:fe:
                    eb:dd:5f:07:5e:92:a2:8f:5e:f6:28:8e:55:a6:ab:
                    0a:e9:5e:e0:ac:46:07:2b:65:1c:d4:1d:d5:fd:89:
                    63:b6:ad:e5:64:47:f9:9c:66:62:9c:3d:a2:05:19:
                    23:93:b7:82:09:f7:cc:6e:ce:19:24:c2:cb:c5:de:
                    e7:87:72:28:a5:34:87:1d:0f:4c:a8:aa:6d:d0:b0:
                    44:90:c2:d4:6d:8d:82:8c:07:6d:05:78:6c:20:32:
                    e0:8a:41:fa:f2:4f:8d:f8:98:ae:7c:94:0c:62:31:
                    d0:68:ad:31:f1:46:b4:a7:77:dc:ee:e5:04:74:0b:
                    de:4a:1b:96:5e:31:ce:f2:93:87:5b:79:7e:ea:6e:
                    be:9c:6d:77:b9:b4:c9:13:4e:18:e9:bd:6f:1a:16:
                    44:c0:ff:83:c9:69:96:b8:fc:cf:13:0d:43:f4:64:
                    6b:14:c9:ca:59:1a:5d:99:2d:4f:ef:cc:03:a2:59:
                    0f:dc:79:99:2f:4f:04:cd:b1:f7:aa:9a:73:dd:6c:
                    cd:96:57:4e:2b:68:be:30:d0:76:6a:57:b3:2f:7a:
                    81:a0:7b:6c:f9:5d:48:52:61:e9:e3:59:80:bb:d9:
                    d4:29:db:38:68:16:c3:30:19:e5:54:f7:db:b2:f0:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.60.224.0/22
                IPv6:
                  2a02:7660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201160

    Signature Algorithm: sha256WithRSAEncryption
         0b:8d:b1:56:a4:82:09:4c:91:af:6e:d6:fd:4d:09:67:e9:0e:
         cc:2f:4e:b5:f7:9f:58:7e:55:ac:9d:77:06:f2:25:ce:86:6a:
         54:84:a0:4c:41:a5:f7:ff:13:9c:1b:b8:46:78:f5:f5:ba:cf:
         75:1f:fc:32:0f:05:69:d6:0c:65:de:2d:37:10:ef:1c:ed:60:
         f7:1c:6e:0e:f7:ab:1e:89:8a:f0:2b:7e:06:16:58:8d:54:2e:
         2e:88:aa:12:d6:c4:5c:4c:f9:8f:28:bf:b7:b5:e1:0a:e9:b4:
         92:1e:9d:6e:d2:8d:e0:f7:f2:d2:31:70:60:8c:0c:63:15:0e:
         d1:14:18:7a:4d:f8:2a:a3:c3:99:66:e0:5c:0c:55:16:cd:bf:
         b0:0b:d2:a4:80:dc:6b:76:77:df:23:0b:43:35:35:86:e8:63:
         54:69:58:e6:9b:6d:d0:13:fa:95:a2:da:5b:58:ce:67:50:f3:
         71:6d:dd:ea:88:c8:fc:91:d3:ea:a0:4f:92:84:af:c0:22:4b:
         73:6e:74:77:61:c3:de:e9:00:89:fc:2a:9f:07:1b:3b:7a:42:
         03:c0:17:80:78:a8:7a:d8:4e:6a:34:39:ab:17:64:52:44:14:
         4b:93:d5:56:53:f7:5f:5d:08:19:66:cf:c9:c6:c0:77:ff:8b:
         a7:0a:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----