This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
File:                     mRyTTgj1egPvTro2taTaeYolIgc.cer (raw, json)
Hash identifier:          5frz/ZruUye3sfMVJpIpUVoLXrYauLyXvYmJ1QxX9NU=
Subject key identifier:   99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C125B1684E6D17A3E081B09784FD531
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 00:18:56 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 211317
                          IP: 193.104.158.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:5b:16:84:e6:d1:7a:3e:08:1b:09:78:4f:d5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=991c934e08f57a03ef4eba36b5a4da798a252207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:c6:29:60:91:fb:97:a6:da:7e:0a:f7:90:
                    aa:9a:3d:11:34:07:e4:f4:72:de:da:39:11:b0:a2:
                    64:ef:82:41:03:aa:f3:8c:7a:0f:0b:a6:9f:ee:50:
                    4f:c4:56:a3:34:ba:6a:0c:b0:31:1f:8b:e8:ca:6a:
                    46:d0:6f:50:f6:29:55:98:b5:95:ba:77:83:0a:37:
                    b1:96:e2:e8:10:a2:b6:32:6f:6a:ff:d4:f1:8b:60:
                    f7:2b:2c:34:6c:c0:64:f8:db:4f:94:7b:d2:a0:31:
                    cc:5f:77:65:6d:af:47:fd:b5:f1:e1:2e:3c:e8:c7:
                    9b:85:dc:8a:0e:89:a6:ad:97:bd:7a:38:55:53:31:
                    bc:ec:7f:3a:fb:52:ae:9d:a1:19:60:ae:d8:c8:39:
                    f5:a4:30:aa:39:61:df:bd:0b:6a:7e:2e:37:de:2a:
                    f6:dc:73:b8:55:01:dc:83:08:42:95:cb:0f:dc:15:
                    54:5d:31:d9:76:e8:09:70:b2:6b:80:7d:a4:e9:e1:
                    07:82:20:78:e7:4a:53:67:d2:04:b8:66:bc:61:16:
                    38:0c:e4:68:87:8e:fb:f4:0f:38:5e:5c:47:28:0d:
                    d2:c7:3c:9b:99:3f:fa:34:08:eb:c6:f8:2c:5a:21:
                    88:07:5f:66:94:38:f7:c1:9d:0c:28:e8:40:c9:7b:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.158.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211317

    Signature Algorithm: sha256WithRSAEncryption
         37:65:65:d7:3e:f2:75:b0:69:c4:df:a1:ea:a6:c7:b4:42:ec:
         76:88:28:24:54:97:18:37:d2:33:d6:fa:43:a3:81:cc:2c:ee:
         e6:2c:b2:32:41:26:46:7b:1d:15:a5:71:77:87:b6:23:e1:d1:
         50:6c:e0:b0:17:f0:7b:90:61:e3:d9:51:9b:b6:69:8a:d1:07:
         19:f1:eb:54:17:66:4b:a0:1c:be:af:c5:52:4b:a1:68:86:4c:
         19:75:e5:8c:e0:87:be:ed:dc:af:4d:62:15:45:29:fc:cd:25:
         ad:fd:52:b6:fb:8a:d0:9b:10:ba:f9:e5:83:75:75:e3:3f:e9:
         d1:85:51:be:a9:21:43:86:d7:2a:ab:8a:71:11:29:77:d4:20:
         a2:06:5e:3e:a2:d4:7e:ac:74:74:fd:fd:18:9f:aa:7d:46:18:
         a9:42:f6:7d:1a:15:45:2f:60:45:dc:c0:bd:3b:48:87:45:b8:
         bd:b8:a2:85:3b:37:2d:4c:52:58:f4:68:0d:1d:3a:8d:d7:a5:
         ee:bb:90:9a:30:76:a9:dd:20:7e:77:98:25:5b:fd:7b:de:5f:
         0a:82:04:4b:11:86:3f:54:3c:a2:a3:16:51:ee:0f:69:84:7d:
         95:3d:f0:02:b0:e1:85:d7:16:45:04:ea:f3:c6:e3:a5:ce:84:
         9c:2c:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:34:57 2026 by rpki-client