This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
File:                     mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer (raw, json)
Hash identifier:          H+Xjj966soZgWr7ysCTErzGC4cmLkJl7ENUEDS+mn4o=
Subject key identifier:   98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7B364509BB33ACEA88A2BE2AC6A89D3A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 20:18:32 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 207196
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:45:09:bb:33:ac:ea:88:a2:be:2a:c6:a8:9d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:e8:27:56:a1:c5:e1:23:b7:5f:7a:a5:0c:
                    95:6f:1e:d1:a0:0c:e0:d0:45:cd:56:fd:7e:f9:f9:
                    5b:a7:ae:2d:1f:89:98:3c:66:66:9e:98:58:c5:ce:
                    ea:a0:a1:a9:e5:fa:86:0c:23:08:0a:6a:02:d3:b0:
                    f2:39:42:6b:6e:b2:a8:e7:f9:42:ec:b4:dc:c6:fe:
                    95:77:1b:79:de:ca:c8:95:b3:dc:7e:fd:d2:9d:93:
                    65:87:ec:58:87:08:8b:ca:33:01:0d:c0:3d:b3:9a:
                    7e:dd:78:5d:af:3b:79:49:6e:00:2d:fb:0e:b4:04:
                    8e:ed:78:00:e0:13:4f:d9:0b:ea:9d:fd:eb:a9:42:
                    6d:a0:88:18:f8:ce:59:7c:b1:0b:08:0d:62:23:c1:
                    d1:5b:f8:6d:40:84:19:ea:70:fe:90:e6:e0:d3:ca:
                    17:8c:2f:18:6c:10:af:a3:e4:42:26:69:e5:6f:8d:
                    2c:2c:3c:70:e2:2e:e4:d2:08:18:70:c9:72:81:2f:
                    8f:2d:b7:7d:c8:99:1b:26:e2:0c:6d:ed:2a:1b:ac:
                    52:56:1c:58:47:54:7a:96:d1:44:1d:85:cf:43:d1:
                    4b:5b:e8:4e:2e:25:dc:13:3e:34:6b:54:6d:f9:25:
                    4c:d6:a2:82:63:c7:24:94:aa:07:d2:73:9f:76:eb:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207196

    Signature Algorithm: sha256WithRSAEncryption
         a6:84:89:3b:6c:30:88:ce:93:97:59:0c:cc:f3:3a:6a:7d:d1:
         ac:01:cb:95:e2:2e:8d:2b:2d:5a:e0:8f:2c:20:78:40:05:03:
         c5:a9:f0:5f:2c:f8:b9:bf:5e:e8:e5:d9:60:90:f0:59:4e:9e:
         e5:fd:ce:61:00:45:8a:90:0a:34:73:7c:2e:b2:f6:31:37:c0:
         ac:fd:b8:61:08:da:5c:e1:95:9f:15:0e:37:e1:b1:67:ba:83:
         13:b8:56:b5:e6:eb:b7:e5:72:66:36:f6:b8:42:35:a5:a8:05:
         d9:70:12:8c:11:eb:b3:37:1d:1f:2b:1e:0f:27:aa:d3:68:df:
         1e:f9:bc:a1:64:e9:d4:94:c6:d3:ff:73:5a:88:0e:62:b9:2f:
         0d:f1:6c:cd:3d:a2:08:82:f8:c7:79:30:4f:d3:46:b1:d7:55:
         ba:d3:d6:5b:b7:a1:3b:eb:d1:2b:62:11:4f:d8:80:58:4f:f9:
         33:9e:0f:b9:95:2d:9b:ea:c2:a2:4a:f1:8f:4b:77:db:b5:97:
         9f:6f:9f:bc:40:fb:c7:11:87:fe:97:50:c7:dc:c1:bd:d5:cd:
         94:ad:fb:57:b3:93:4b:98:f5:67:12:d0:58:00:bf:e0:ef:cf:
         b1:87:2f:35:b0:62:a4:a2:7c:fa:ad:1e:6c:e4:ef:1e:4f:66:
         19:c9:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:05:36 2026 by rpki-client