This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
File:                     l6A46SAR7iaAaKFRfSRM4iwmVU0.cer (raw, json)
Hash identifier:          RvWwaRDWY/uFVsEO3XdP9kys0ZHKkhbbfHUS1s/9lxo=
Subject key identifier:   97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA4C2FD0EB8B7427741DBAB1AA94DFE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:19:14 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 207079
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:c2:fd:0e:b8:b7:42:77:41:db:ab:1a:a9:4d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=97a038e92011ee268068a1517d244ce22c26554d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:fb:10:16:04:29:15:97:64:4c:71:ae:e9:
                    64:07:f5:fe:a2:0a:cc:9e:26:b4:9f:d3:b5:4d:25:
                    f5:00:9f:5f:c1:9e:88:4d:21:30:89:fb:fc:c3:29:
                    43:d9:97:b0:6d:f7:7e:22:2f:7e:6f:96:b7:4c:ce:
                    50:f7:1d:d4:17:7f:07:4a:49:48:8f:01:2e:7b:e1:
                    43:f1:7d:6f:76:11:35:0f:4d:ea:89:48:72:ad:b0:
                    c1:31:e2:a0:fd:3e:1d:c7:01:16:4d:1c:a5:03:88:
                    00:70:6a:b3:1a:46:f9:dc:3b:4d:48:ae:74:0f:23:
                    d1:cc:cf:16:fc:f8:f0:91:7a:e0:17:c0:c5:03:2c:
                    78:e3:f8:7f:6a:2c:e3:98:2d:c1:68:30:b2:a3:c0:
                    0c:35:d6:0d:d1:f4:9d:6f:ba:b8:e9:35:9b:6a:86:
                    22:d4:9a:66:fd:17:4f:e5:f6:02:b2:8e:14:be:89:
                    df:af:f4:b2:e1:e1:a9:18:a3:97:a8:cc:bf:1f:98:
                    ab:99:db:f3:c5:bc:e4:c0:b8:77:bc:0e:f1:08:6b:
                    3e:28:ad:8e:87:0e:66:f9:54:51:90:bb:0d:5d:51:
                    2d:22:f6:9b:62:0a:cd:ef:cf:30:4d:ad:2e:03:37:
                    05:a3:78:ff:9a:38:b8:fb:6a:0e:5b:c2:73:cf:b3:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207079

    Signature Algorithm: sha256WithRSAEncryption
         04:12:b6:62:cb:d9:e6:1d:97:b2:37:92:41:7f:f7:0b:2a:82:
         e8:1a:19:ed:c7:bf:61:93:b5:31:f3:e3:7e:2b:8b:e1:2f:24:
         64:9d:1e:85:a5:68:71:0c:43:64:bf:c8:fe:d3:12:79:56:82:
         68:01:69:2b:68:6e:86:fd:8d:9e:15:56:5b:85:b8:4e:32:3e:
         b7:25:b6:f1:68:b2:38:eb:eb:15:21:ab:16:39:d3:2b:34:c3:
         6e:07:cb:e7:66:c9:5b:ff:7d:72:71:e7:ed:d7:76:85:47:46:
         51:4d:43:4b:07:23:fb:9a:49:14:a0:48:42:72:81:74:2f:66:
         42:3c:67:4e:1c:0a:0d:3a:19:26:27:a5:ef:69:df:44:0c:cf:
         01:25:7d:4e:53:44:7c:cf:a1:ba:74:a6:36:29:b6:97:e0:a7:
         5e:0d:96:e5:c4:bd:15:15:64:79:89:0d:74:3f:f9:bb:28:e7:
         ef:b6:af:6c:96:15:bd:4e:6e:ec:2c:e6:a5:a5:a5:a5:98:6f:
         e4:dc:aa:ab:4d:6f:47:60:2b:02:33:a0:9f:a8:9a:52:26:6b:
         f8:d3:40:15:35:ca:50:67:ee:77:f2:a0:54:0b:1e:bc:e4:42:
         3c:be:54:2e:8a:5a:e6:26:55:bc:98:4a:01:33:2a:4f:3d:2a:
         ee:9a:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:51:18 2026 by rpki-client