This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
File:                     jHVawZtqHD41NGRn_nDrVR_S7n0.cer (raw, json)
Hash identifier:          SB1ZGQkxBx7Y+Ig8Xo5THnh5yWnTykM0f0/tjhAivcc=
Subject key identifier:   8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E3856C5F730A982FC4D47A0535774FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:19:40 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 210426
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:56:c5:f7:30:a9:82:fc:4d:47:a0:53:57:74:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:19:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:91:93:4b:4b:47:d7:dc:01:88:5a:46:63:
                    57:99:8c:57:33:57:26:70:56:46:86:2b:e9:8b:82:
                    25:b6:96:37:da:01:08:b1:43:00:58:7b:df:97:8c:
                    72:72:39:6c:3e:f8:3f:76:e1:fc:44:2f:b2:32:e7:
                    ed:d5:81:66:8c:5b:2b:ef:92:35:9e:5d:7d:7d:f3:
                    c1:e2:e9:b0:4c:a9:5e:c5:61:b5:e0:2e:c9:07:00:
                    58:87:a8:9b:34:74:a9:69:77:a4:cc:52:b5:34:cf:
                    0d:1d:eb:ce:60:c0:0b:1b:ef:c7:22:28:7d:14:8e:
                    cc:ff:21:b7:10:9a:bc:14:41:89:52:5d:8d:be:00:
                    a3:56:8c:39:cc:00:e8:50:d9:92:00:6e:a1:8f:1c:
                    6e:9a:8f:1c:5c:f2:44:1a:87:34:11:86:dc:81:cb:
                    1d:73:2e:0b:03:ed:7b:ac:22:b0:96:f4:4b:ca:67:
                    30:b4:dd:0d:fe:c7:e6:b7:43:b6:c9:f1:b9:23:6f:
                    16:83:eb:ed:24:96:d9:b8:51:50:be:db:a7:f9:e0:
                    c2:76:ae:56:e1:15:df:e7:c4:b9:17:89:79:fd:45:
                    00:78:05:a8:aa:0e:b4:28:be:3c:ae:58:1b:6d:5f:
                    42:bb:ad:41:1a:bb:2e:e3:f6:ba:29:9b:2d:80:8c:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210426

    Signature Algorithm: sha256WithRSAEncryption
         31:05:80:7c:d3:a8:64:a1:74:d7:a3:24:84:9a:89:a0:0e:85:
         25:ee:d3:3f:7f:a4:c3:66:ca:7f:5f:16:11:45:a8:87:b3:38:
         7f:fd:12:f5:9e:bc:ec:13:ba:13:cc:c4:84:a5:58:be:4e:0b:
         40:1f:fd:c5:b9:e1:84:13:67:bd:48:ff:79:53:8b:88:23:2e:
         da:a7:16:23:96:14:60:61:04:28:7f:cd:86:b7:0d:a1:86:14:
         8e:51:ac:21:f4:c4:23:34:55:33:03:38:d9:79:82:0e:4c:c6:
         82:fa:4c:b8:31:27:35:35:f8:5d:48:fb:37:f7:83:4d:25:ee:
         33:00:d5:ad:44:08:a8:06:9d:0e:2e:c7:af:9d:e9:5e:d1:e0:
         5e:93:9a:fe:46:79:2d:e6:73:33:15:83:58:b5:9d:61:44:86:
         ca:ff:cd:50:a2:3d:65:a5:e4:8c:67:73:77:05:f1:82:eb:22:
         a3:46:a3:cd:4f:2b:34:14:ee:e9:73:3a:55:b4:30:18:71:c6:
         fc:99:31:cd:c5:93:4f:d8:d9:dd:7b:5e:39:72:d1:ab:33:3c:
         49:87:c3:17:c2:f2:67:f4:79:fe:d5:1e:72:46:78:ff:34:9e:
         aa:ce:fc:ab:8a:65:aa:36:94:c3:ce:74:02:ff:1a:51:8a:86:
         f3:f0:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----