This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
File:                     jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer (raw, json)
Hash identifier:          S/Jcuu1HLucPxxjojfWHpmIsnSa/cllsI9mmyduyQ7g=
Subject key identifier:   8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019C0E574BEA744F96E0179905063B27E4CC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 30 Jan 2026 09:58:48 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 203828
                          IP: 185.122.144.0/22
                          IP: 2a0a:1a80::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0e:57:4b:ea:74:4f:96:e0:17:99:05:06:3b:27:e4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 30 09:58:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:11:e3:23:c4:68:cf:ae:3a:ea:07:6e:8f:9a:
                    de:d5:01:49:69:4f:ed:2b:52:e5:cd:cb:80:9f:20:
                    15:bc:32:15:3d:b4:83:56:a0:78:f0:f6:75:94:16:
                    46:36:f5:26:62:1d:3f:4b:1f:71:17:be:31:a3:ba:
                    1a:6f:46:5d:3b:da:4e:4e:a9:4b:7a:14:82:d4:77:
                    34:3d:2e:96:ef:2b:e8:9c:52:60:33:c8:f4:cb:d5:
                    f9:15:be:a0:a2:ea:58:97:16:6b:93:34:eb:3f:13:
                    c5:69:a1:3f:50:ec:ff:c0:26:bb:e6:b9:2f:3c:83:
                    ba:15:16:28:01:06:fd:16:f0:b6:c8:4f:8e:f1:47:
                    cf:d7:18:9c:93:4a:07:e3:91:a0:a4:6c:ca:ad:d6:
                    13:61:dc:88:d5:4a:0e:cb:27:4e:13:e8:33:d0:a5:
                    64:da:e2:4a:43:a3:1b:63:4b:02:3f:fb:13:32:20:
                    4d:88:ea:aa:1c:a6:da:63:1b:62:0d:ab:ab:50:38:
                    7d:58:63:67:ca:49:4b:2d:ef:e4:73:d5:0c:47:26:
                    e4:bf:d3:87:3e:df:9c:d7:e3:34:ad:c4:1d:1d:a7:
                    27:35:75:ef:3e:2c:84:14:3e:76:c1:90:ce:e8:b4:
                    cf:fb:c9:7b:0a:34:2b:c3:ab:e3:77:68:e5:88:33:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.144.0/22
                IPv6:
                  2a0a:1a80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203828

    Signature Algorithm: sha256WithRSAEncryption
         a8:79:f0:62:db:2f:65:d7:76:0e:15:99:f9:d5:b5:2d:94:9b:
         93:75:2f:d7:7c:3e:b8:4d:82:a9:68:58:45:44:a9:a0:d0:81:
         ee:c6:ab:45:d1:4f:1b:37:82:2c:1b:80:2c:ba:43:64:5d:a6:
         66:cb:fe:31:e2:fa:be:32:7b:27:eb:15:bf:18:fc:0f:63:5e:
         28:b6:24:b2:d1:20:eb:e0:e8:9b:91:af:96:f6:01:77:bb:f0:
         f2:c9:ba:88:1b:82:0e:47:fb:2b:82:73:9e:8a:11:84:8b:d4:
         72:8c:84:5f:bd:7d:42:ee:a3:5c:17:4e:71:27:4a:e5:de:13:
         b7:ad:12:c8:ef:cf:a2:ef:b5:f2:fe:1f:f9:7e:77:56:61:46:
         e7:4e:6e:7d:8a:d2:dc:0b:15:00:aa:df:e4:46:0b:e4:ae:0e:
         9e:01:4b:f5:31:6f:e3:7d:d8:7a:bc:f0:8b:cb:0e:aa:1a:95:
         4d:14:c4:01:f3:28:d0:7b:26:02:ad:f0:2e:69:0f:93:10:80:
         28:18:01:37:71:cf:bd:2d:4c:6c:df:36:c3:3d:ab:92:10:a7:
         78:4c:e7:e7:b9:3c:24:59:f4:7e:fc:4b:31:cd:a4:2a:65:ff:
         4c:25:20:9f:50:97:2f:ea:2b:b5:9d:79:27:59:c6:6a:d3:07:
         1c:4d:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:40 2026 by rpki-client