This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
File:                     lowsVdyOuZe_WRIdTC_9VESiLi0.cer (raw, json)
Hash identifier:          D98Veoz7d94bIYwz00les+MGhB9inbusEfdcjWsIrEA=
Subject key identifier:   96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B797F45A394DE65920248667C45699914
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 12:19:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 199917
                          IP: 185.30.208.0/22
                          IP: 2a00:b1a0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:45:a3:94:de:65:92:02:48:66:7c:45:69:99:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:b6:64:b3:45:48:da:2b:6c:15:6e:06:a5:
                    ed:91:65:c7:eb:ec:4f:a3:48:45:f2:4e:a6:6f:b6:
                    97:ce:a2:9d:d2:0d:47:d1:f9:cd:90:c3:20:98:01:
                    fd:54:3c:82:ac:b5:3f:a8:98:ad:04:12:62:bf:90:
                    41:41:a8:92:2f:28:d3:19:3e:71:b1:0b:69:a3:df:
                    a6:da:be:96:2a:ea:75:02:26:04:12:56:ab:48:af:
                    6e:fc:9d:24:08:50:aa:8e:22:a5:13:e5:3f:90:f3:
                    79:94:58:49:2a:fc:b4:b1:4d:66:cd:22:43:da:c3:
                    5e:45:fe:e4:fb:11:a2:c5:8b:78:9d:c6:45:67:c9:
                    20:9f:54:74:54:21:5f:8c:61:f7:4a:92:af:f7:85:
                    30:b1:5b:15:e5:d2:e0:b4:eb:db:29:7d:8e:07:ee:
                    6c:16:1f:73:1e:c0:5b:9c:6c:a4:74:00:6c:25:07:
                    c4:9f:d7:e8:c7:cd:08:9d:89:8b:74:df:c4:2d:ce:
                    e6:7d:8b:e4:ab:02:18:7a:fd:e7:af:7a:74:ee:90:
                    9c:32:bc:f7:23:1b:d3:ce:4d:13:12:7e:95:c2:82:
                    66:ef:6b:b4:cf:57:51:cb:db:54:21:69:e8:2e:d3:
                    32:d9:2d:56:ff:ee:e3:30:29:46:4a:c4:0c:a0:65:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.208.0/22
                IPv6:
                  2a00:b1a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199917

    Signature Algorithm: sha256WithRSAEncryption
         9c:2b:02:a4:99:9a:71:1c:59:36:1e:ca:0c:5e:89:7d:7f:9d:
         32:ee:6d:40:bc:fc:7d:6a:25:d1:88:31:34:1b:8b:99:67:c8:
         4a:ad:d5:db:1f:57:c8:ef:b2:ba:08:52:c1:23:57:07:bb:db:
         99:88:d1:74:22:7a:0e:73:90:c6:ac:22:0c:95:9a:dd:6c:be:
         71:4e:d1:ab:39:24:10:2a:c3:b8:a7:66:44:49:97:1f:9a:08:
         93:f5:d3:f9:74:59:7b:8b:56:5d:ea:dc:d0:b4:82:f2:ae:46:
         ee:c9:cd:7c:a3:eb:2b:6c:cd:5a:14:7d:2e:a8:f6:61:01:c8:
         bf:a1:b3:6d:6c:71:51:3c:54:98:da:5e:c2:cb:22:17:08:5d:
         9a:29:08:ed:6a:bf:13:bf:c3:05:62:c8:ec:38:f5:76:97:29:
         ee:f9:6b:1b:ac:08:98:fb:70:cf:1f:9a:0c:62:c2:96:86:55:
         ab:8c:5e:20:c2:44:a3:92:18:9e:9f:86:54:e1:d0:13:61:64:
         dd:aa:ff:b2:40:f5:be:aa:4c:db:a6:1d:83:12:f2:90:2a:02:
         28:19:05:95:50:e8:cb:98:c8:bb:50:5d:42:74:63:2b:a8:73:
         ea:bf:1c:28:cb:d7:4a:cf:6f:80:bb:54:6a:73:c0:35:77:ea:
         71:9b:79:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----