This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
File:                     ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer (raw, json)
Hash identifier:          3fUWNd3aRGx0nVXNInhhCSEhy83HDKOAZzdNEwsVV/s=
Subject key identifier:   8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B285A258827953FAE91B591E298A89325
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 16 Dec 2025 18:09:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202794
                          IP: 195.222.106.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:5a:25:88:27:95:3f:ae:91:b5:91:e2:98:a8:93:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 16 18:09:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:22:e3:aa:7a:3a:2f:08:7b:ab:a1:92:7d:74:
                    89:d2:ee:0b:f3:54:b9:7b:f7:bc:9e:0b:c2:4b:64:
                    66:4e:c7:15:07:96:a3:ce:07:18:6d:2f:40:d3:67:
                    4e:95:cf:ad:ec:aa:79:3d:c1:38:64:97:1a:c2:82:
                    dc:d8:09:19:86:fc:06:b4:f3:4a:11:28:96:2f:1d:
                    9f:e1:4f:00:7f:00:d5:15:e4:17:a5:22:c6:25:b9:
                    3f:12:2c:2c:1b:c8:61:6e:f1:70:da:0b:f3:29:d6:
                    82:66:1d:5a:12:6d:76:c1:20:f3:99:93:b0:33:76:
                    a6:47:84:77:42:ce:a9:c9:66:b5:1a:7b:84:c9:d3:
                    60:2c:cd:6d:a0:e9:86:5a:57:75:2a:1e:32:20:ee:
                    c6:63:c9:72:da:50:49:9a:bc:58:a4:58:71:c6:77:
                    c0:ea:f9:af:46:c7:0c:ec:a3:2c:2f:be:59:8e:0f:
                    55:c8:40:a0:67:b7:f9:da:48:d0:b1:0f:61:86:3e:
                    fc:b8:ae:c1:a2:35:92:3f:70:7f:cb:1e:40:d8:6a:
                    17:af:16:1e:5f:52:d4:b1:c7:c9:63:0d:c9:17:d7:
                    3c:2f:18:a0:3a:c7:df:f6:d3:66:9a:19:8d:c5:b7:
                    35:88:05:37:a6:7e:74:3b:73:22:a6:dd:07:41:e9:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.222.106.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202794

    Signature Algorithm: sha256WithRSAEncryption
         11:45:27:b9:2b:eb:4f:50:1f:fd:d1:50:37:a3:7b:82:1d:53:
         b9:b5:d5:74:78:97:6e:3d:f0:bc:12:0a:5b:be:6e:00:d1:4a:
         ef:7f:b5:88:44:cc:f3:fa:2d:ed:7e:16:ea:8c:ad:03:8f:36:
         06:39:88:58:18:c7:1c:39:fb:7b:6c:f5:fe:dc:c1:ac:04:f0:
         72:6d:eb:75:1f:69:58:73:ad:4e:89:5f:c0:42:7e:5e:8c:cb:
         76:d3:2a:1e:99:c3:b6:89:f0:61:66:5c:31:00:8a:8d:f1:5d:
         bc:6f:b0:ba:33:90:42:18:b5:e2:93:5c:ac:10:76:47:b4:05:
         c7:47:5b:bf:e9:05:62:f1:4e:55:97:d7:45:d3:d9:fe:4e:3c:
         5a:25:d2:5d:cb:04:76:ec:c5:7f:93:23:d9:e6:ee:77:36:fb:
         30:a1:80:b3:4d:65:e7:3b:47:08:f6:78:6b:81:84:78:de:b8:
         a7:28:77:82:5e:1f:c4:1b:3c:4f:be:3c:77:40:d5:aa:6f:f5:
         2e:73:5b:d2:b7:08:c1:15:f5:17:d9:44:91:81:3a:d2:55:64:
         b8:f8:b0:17:05:5c:23:34:bf:63:a3:77:a5:4b:72:d7:30:64:
         8f:57:04:ab:6f:52:21:2f:3f:30:9b:a9:67:3b:fb:a4:1d:ff:
         14:fd:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----