This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
File:                     jHSEmpcKkwTfRfjii264f_CeC-o.cer (raw, json)
Hash identifier:          ZkU50zo8Ji9CmtUw3JiurFMJ3wjN+SpfTIGud+fL5ew=
Subject key identifier:   8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B76EB5E09DC813B2CE363DD34194BF01A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:18:15 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 198119
                          IP: 195.137.231.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:5e:09:dc:81:3b:2c:e3:63:dd:34:19:4b:f0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:28:3f:22:a8:7f:cb:c1:92:70:d3:09:d2:
                    c5:82:69:60:26:8e:0a:0c:5a:0f:d4:55:b4:ce:74:
                    bf:99:6e:d2:f3:ef:36:ad:68:bd:3e:74:41:a4:60:
                    94:3f:6c:6a:15:cc:57:0a:5c:ba:a4:5c:3f:c6:13:
                    7b:eb:d5:e3:d2:f9:91:d0:b8:d4:cc:6e:74:96:3b:
                    a5:2d:6a:59:2a:b4:87:0f:37:31:94:7f:45:54:c0:
                    ec:c1:1a:40:75:02:cf:29:8f:99:83:f0:1d:6c:ff:
                    81:fd:d6:56:06:61:cf:d1:e2:aa:a9:db:d1:38:a9:
                    a7:61:60:33:30:a6:09:d7:eb:7a:a5:07:db:4b:57:
                    23:6b:db:a0:a9:a9:41:46:5e:9b:9d:7d:8c:92:97:
                    2f:76:c6:ff:d8:29:87:62:8f:84:3d:f0:0c:8a:f3:
                    72:8a:79:f7:1b:fc:86:7f:2b:1e:13:7b:88:e4:c1:
                    f0:03:20:ea:09:1c:c4:dc:f0:7e:73:b6:00:b6:35:
                    7f:95:fb:5c:b2:7d:a8:0e:6f:49:dd:d0:c6:3e:a0:
                    3c:d5:51:7e:23:86:63:44:a1:18:09:fd:d8:4f:df:
                    d8:9f:86:e4:5f:0d:07:c9:7b:f5:7d:3b:05:ce:45:
                    07:16:f9:65:c6:07:5a:93:98:57:91:87:4e:0f:66:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.137.231.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198119

    Signature Algorithm: sha256WithRSAEncryption
         69:9c:3c:25:35:76:50:a7:66:36:18:60:d6:26:58:52:a8:1d:
         b5:5c:3e:05:24:c9:b4:cd:4a:d6:56:1d:d0:06:9d:ea:9e:71:
         2f:1c:6d:c5:0c:09:9a:a2:bd:93:ed:61:42:cb:54:bf:3a:90:
         1d:9f:a9:35:b8:a7:fc:25:66:cb:0d:fd:0f:09:52:c8:74:ac:
         cd:6e:f7:78:eb:2f:3c:20:fd:ae:3a:8a:4a:29:8e:31:c3:c4:
         97:0c:63:99:f3:3f:78:98:d4:07:a8:e4:bc:82:cf:1c:d8:a1:
         01:44:5a:9f:bf:43:c4:e4:5c:4f:d3:85:52:0a:37:3c:06:2a:
         d5:c8:5d:a4:17:2a:41:01:a2:94:f6:2d:cd:ea:c6:a7:3e:cd:
         50:80:df:28:6f:1e:f7:87:6d:cd:f6:c6:03:a6:e3:6b:53:16:
         5d:f5:21:ae:a2:e9:6d:21:9f:d8:a2:34:af:17:0d:12:a7:dd:
         8f:b5:22:91:16:e0:2d:7c:33:78:5e:01:90:c6:e4:5b:df:6e:
         8a:7a:fd:96:d6:07:03:d5:a5:69:3e:43:12:2a:05:d8:d6:6d:
         f0:f2:2c:2e:80:ad:5e:16:2a:c4:8b:24:23:21:3d:ab:93:42:
         e7:5b:2f:31:41:a8:4f:3d:54:f4:7c:7e:a9:34:61:f5:c0:53:
         7a:7b:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:08:25 2026 by rpki-client