This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jh_mbZ9htuZFpEe28GvUm9PgC84.cer
File:                     jh_mbZ9htuZFpEe28GvUm9PgC84.cer (raw, json)
Hash identifier:          mLBumBhDAiH1xhPIJgqrDTvS8JhT7DSAQwbsy9leXgk=
Subject key identifier:   8E:1F:E6:6D:9F:61:B6:E6:45:A4:47:B6:F0:6B:D4:9B:D3:E0:0B:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7AC7AC9B76D885B83CEDF4359F45B179
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 18:17:44 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:2f20::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:ac:9b:76:d8:85:b8:3c:ed:f4:35:9f:45:b1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e1fe66d9f61b6e645a447b6f06bd49bd3e00bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:a9:48:08:69:2a:06:4f:b6:b3:cd:fb:3e:
                    06:c4:d7:69:7e:a8:31:fe:b2:3d:5d:68:d7:da:66:
                    d4:a6:c3:55:c2:e6:f7:1f:d3:e4:31:59:42:f2:2f:
                    72:bb:ff:cc:53:4f:20:40:93:83:e9:90:c9:a5:eb:
                    be:1b:9a:fc:74:91:49:2a:29:99:5e:b2:b8:60:4e:
                    02:fa:b6:60:d9:fd:ba:1d:24:bc:0f:db:28:fa:b2:
                    b8:dc:0f:2f:61:6e:63:de:6a:58:78:ea:d4:fd:21:
                    36:cd:a6:5f:83:6c:17:c1:d0:60:f8:bd:37:e5:b5:
                    99:bb:2f:30:b4:15:ee:fc:12:97:df:db:98:4b:9b:
                    57:c4:96:bc:7b:4c:b8:7d:61:ea:e7:51:ec:df:df:
                    41:56:58:da:42:f1:f6:a3:8d:57:23:87:f0:2d:da:
                    cc:14:4d:ac:7d:b8:ae:7a:ff:08:20:d1:3d:8b:7b:
                    00:22:57:98:e3:e3:90:97:41:5c:52:68:5e:13:4e:
                    22:5a:8f:0d:1c:0c:7c:31:98:f9:f2:06:24:50:c7:
                    9c:42:a1:4c:9b:62:60:7f:45:41:5c:8e:b2:b8:fa:
                    38:5a:c5:0e:d6:e5:28:e3:8b:98:3a:77:ca:49:6c:
                    22:d2:d4:c8:a1:cb:89:f3:49:31:46:ea:8a:9b:2f:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:E6:6D:9F:61:B6:E6:45:A4:47:B6:F0:6B:D4:9B:D3:E0:0B:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2f20::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:ae:09:93:c9:7f:16:c6:35:cf:b8:de:e6:ef:e6:8a:1b:
         5c:9c:63:1f:7f:54:0e:48:4e:41:2d:85:b9:57:c3:5b:0a:b4:
         4b:dc:d8:ff:50:21:f7:e7:bb:7e:79:96:8e:a0:7f:5d:97:ac:
         60:80:e2:9b:49:10:f3:bc:1a:7d:29:ef:2f:f3:bb:4a:09:89:
         76:26:5d:96:5b:5e:71:ce:a9:94:22:01:73:d1:50:04:72:2c:
         8a:9c:78:59:42:d6:92:e9:8a:f2:6d:fc:47:9b:b8:d2:b5:95:
         07:8d:61:32:38:af:9b:0b:1d:4e:a8:29:f9:46:81:c9:49:b1:
         f4:4a:f2:8f:7d:cd:9c:12:11:b3:9d:95:54:76:9b:a9:8b:ec:
         86:b4:b0:04:24:34:53:86:25:d8:37:18:51:39:3c:dc:cb:53:
         c4:3e:f5:83:77:e5:2a:d5:11:e0:c8:ae:ec:47:cf:ad:24:ef:
         0c:8a:a9:90:5c:68:7f:47:63:00:13:bb:80:80:11:55:02:42:
         9a:fc:b8:d3:b6:79:13:02:42:d8:0e:a8:ab:98:be:43:3b:8a:
         13:25:e8:81:36:9b:50:4a:ff:b9:c8:51:4d:c6:a2:96:66:09:
         ba:e7:74:07:57:3f:3b:6f:78:ed:b9:94:1c:91:fb:53:19:d3:
         aa:8f:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----