This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
File:                     mXwn0VtG2xhLwCswPIa0fEScG1Q.cer (raw, json)
Hash identifier:          lnxBNE2tjfpwodVpen6LQB1rKljADNIBGZdjT8gmgqE=
Subject key identifier:   99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B783554CF584986F2514ECBE8F12B9C3E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:18:39 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 210693
                          IP: 188.93.112.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:54:cf:58:49:86:f2:51:4e:cb:e8:f1:2b:9c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=997c27d15b46db184bc02b303c86b47c449c1b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4d:29:b2:6f:c9:50:81:77:49:94:3f:7e:65:
                    3f:65:33:f0:64:5f:72:16:7d:78:02:c2:d2:1a:03:
                    f7:5b:ff:35:88:f8:05:1c:01:49:d1:66:ce:58:90:
                    33:3a:a9:73:9a:25:64:4d:3d:96:d4:2b:3c:24:45:
                    12:cf:a0:de:60:b6:6c:b3:1c:1d:db:67:6f:4f:60:
                    a4:c4:cf:c1:bd:92:ad:be:42:fc:47:93:7f:bd:c4:
                    be:9d:97:e0:4a:64:68:0e:85:89:ea:9a:96:0c:50:
                    fb:11:65:04:b0:38:57:7f:11:e2:c5:30:f7:bf:15:
                    3e:49:31:56:90:9b:c4:1b:8e:e0:99:9d:5a:32:dd:
                    01:44:49:ca:67:0b:6d:82:32:93:1b:8f:7d:cb:b1:
                    5b:27:95:73:7c:6e:1a:ce:43:88:6d:85:7a:92:24:
                    d2:f0:ae:bb:34:a8:24:1f:7a:09:d5:62:d5:f6:67:
                    e3:59:3d:dd:97:ba:9d:eb:cb:8b:b3:a9:18:06:f6:
                    1a:4e:71:2c:81:92:af:90:0d:b5:38:1a:5a:e1:a0:
                    43:77:75:9c:ee:0c:03:10:28:b8:0e:b5:ab:c2:42:
                    63:18:ed:87:06:62:16:4e:ad:92:88:48:44:ba:32:
                    f1:42:40:cf:c4:79:05:23:4c:fa:70:21:43:d3:0f:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.112.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210693

    Signature Algorithm: sha256WithRSAEncryption
         96:e3:a1:05:93:33:1b:da:64:63:0a:f4:55:f8:ea:ad:8b:38:
         70:28:be:c6:7d:2d:0f:01:3e:87:c3:7f:81:be:7b:d7:d2:94:
         33:6f:ab:dc:ec:e7:3e:79:6a:5f:87:ce:52:d6:3a:6a:8a:cc:
         4b:71:37:5a:aa:d3:16:84:0c:df:50:9d:f0:6f:51:65:82:00:
         23:04:80:85:1a:76:0c:ee:2a:8d:ab:11:e1:5c:7d:7b:6f:24:
         85:89:f6:ab:18:f6:2e:f3:5a:1d:6b:24:91:02:42:6a:9c:89:
         5c:dd:65:8b:57:78:d1:15:b1:f4:4c:39:8c:29:15:b4:f7:e8:
         d2:2e:d4:f2:ba:e9:65:3c:5c:23:ba:49:a7:ea:9a:3b:c0:e0:
         77:ac:5a:cb:52:1a:3b:76:0d:8d:19:9c:03:d1:d8:89:af:00:
         de:8e:4f:5e:59:3b:03:38:a0:a8:0f:59:d9:c2:5f:b5:6b:ce:
         38:c8:c7:9d:d0:a6:b0:1e:16:b4:41:dc:8e:fa:f9:51:b1:0c:
         a3:5c:9e:98:40:70:20:6f:e3:55:f4:e2:6f:b6:9d:83:b7:bd:
         aa:a0:bc:c5:a3:57:48:7a:58:d2:44:94:16:70:bc:c8:37:66:
         4a:f8:88:a8:fc:b0:40:cf:bd:53:2b:ec:16:46:78:97:db:bf:
         68:30:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:42:45 2026 by rpki-client