This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
File:                     jGrD-sRfBdkCaII3X-ArFX1LdRg.cer (raw, json)
Hash identifier:          ywlTLccYNKmh9AKAfesKE5+hmDEfCtqAUGv9J5fOfDM=
Subject key identifier:   8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7835349B904DE9C4FDB904D6215DEF37
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:18:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209720
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:34:9b:90:4d:e9:c4:fd:b9:04:d6:21:5d:ef:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:7c:fe:f2:4c:92:32:7a:11:ad:e9:3a:8f:
                    eb:ab:ab:79:96:13:07:33:82:68:61:55:13:ac:6e:
                    a8:ee:5d:82:7f:cc:24:57:67:ab:39:77:a7:36:b7:
                    9d:bc:39:cb:3a:20:b5:ff:85:54:88:bf:e3:81:f9:
                    7d:73:0b:74:8c:93:04:c0:94:c3:44:81:28:bc:46:
                    3f:4a:e7:f8:09:60:c3:91:7f:d2:36:78:87:fa:77:
                    6e:b6:47:45:4a:36:c6:f5:ef:e8:96:d5:29:4d:c7:
                    ff:e4:f4:25:b5:d4:03:40:a1:3e:0c:49:e5:30:b0:
                    49:4c:94:4a:4e:02:c6:e6:d0:e2:39:0e:8c:5c:eb:
                    84:9a:11:2f:1e:fa:2a:fd:2d:0a:98:5b:b8:31:ef:
                    8f:90:29:a3:3c:d5:19:c2:ce:8e:1d:ff:7c:96:26:
                    a5:0c:46:37:5b:8f:31:2d:2e:00:b7:1a:93:4e:4b:
                    ad:f7:5a:45:3d:09:9f:c6:0b:a5:25:fd:15:e1:47:
                    89:0f:87:d8:5f:54:00:1c:a2:3b:bf:40:74:2c:d1:
                    d5:04:67:1e:e8:ff:95:61:ee:0e:4c:1c:77:49:4c:
                    92:45:58:d9:d9:dc:16:5c:58:0f:42:1a:52:80:c9:
                    a7:c6:d6:d1:cd:2b:28:70:1d:ca:2f:78:5b:86:54:
                    f4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209720

    Signature Algorithm: sha256WithRSAEncryption
         7e:02:be:99:96:3f:2f:c6:ff:88:40:d5:5f:bb:19:45:0f:c1:
         13:d0:1a:14:fc:f5:69:a2:0a:a5:0b:db:35:c6:23:61:3e:b1:
         ab:b2:40:29:f1:04:af:4f:ca:48:92:39:0e:af:07:e7:da:69:
         ce:66:2e:4f:83:91:5a:0a:df:f1:27:30:1c:64:64:08:5d:58:
         38:9c:5d:64:22:cf:ac:33:5c:08:81:93:63:ba:f2:70:3a:0d:
         48:0d:de:83:a5:2f:01:0e:02:7b:72:bf:bb:f5:af:3d:35:e6:
         a8:57:b6:7c:4d:10:c5:ec:53:a2:9d:29:da:23:81:9b:da:35:
         ae:19:8a:88:e2:4f:00:48:28:7d:fb:54:af:e0:e3:47:eb:45:
         97:9b:fe:72:c4:fb:1b:7e:6a:8d:0e:21:3d:9c:e5:ac:c1:ff:
         cc:9a:e2:09:18:69:ba:f1:6b:39:3d:03:c3:87:16:2e:98:f3:
         a7:1b:40:4e:3e:f9:32:5e:5a:f3:ed:52:c9:d8:26:9b:d6:10:
         93:92:66:a9:d2:e9:e7:0c:02:ec:95:a0:ef:b1:3d:d9:fe:13:
         cd:ed:8b:6c:ff:d6:42:d0:6b:5c:ec:36:e2:55:5e:6a:3b:b9:
         54:73:8e:38:8d:06:49:65:39:02:11:d7:3d:93:8a:3e:0a:84:
         6a:e5:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----