This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
File:                     mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer (raw, json)
Hash identifier:          hP63qY6rcw/WUf+PAGB6HOjEPA4RUL0AfvdX2ZphzHg=
Subject key identifier:   9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F15A70EC3148DF220F12864D30293C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:21:24 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209624
                          IP: 139.28.148.0/22
                          IP: 2a09:7c0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:a7:0e:c3:14:8d:f2:20:f1:28:64:d3:02:93:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:21:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a6:10:1c:45:0a:2d:63:85:21:6f:0e:42:1c:
                    8d:b8:b5:bf:71:a4:61:a6:1e:4e:da:32:75:5d:59:
                    2a:4c:8f:ad:4f:5b:f1:b9:c6:16:ca:b1:a0:59:21:
                    fc:33:3e:7c:d3:0f:f7:94:12:17:08:73:51:e9:ac:
                    43:4f:5f:79:9d:64:18:46:5d:1a:58:a4:ef:f4:e2:
                    6b:e0:ac:2f:f3:c4:0e:9a:19:f7:85:e4:00:8c:e6:
                    4d:91:dd:d4:53:91:9d:6e:25:9a:97:22:d3:22:05:
                    85:19:fc:4b:0d:2f:1a:26:70:67:18:61:18:4a:8d:
                    c9:25:58:38:e0:99:b4:c6:3f:58:fc:32:3a:30:8b:
                    0e:8f:b0:c7:2c:04:33:ae:7c:65:bd:29:35:4d:b4:
                    02:49:fd:70:10:d5:b0:34:84:05:51:c1:3b:a0:c5:
                    99:53:a7:cc:c0:a7:09:0d:b5:14:ae:0a:e9:94:fe:
                    41:a1:32:a0:3c:33:5c:51:6a:1a:4d:74:bc:8f:b0:
                    4b:6c:fd:ba:0a:dd:8a:e0:14:da:51:5a:2a:9f:c4:
                    99:62:48:f6:98:f9:2e:de:fe:c6:f3:97:dc:5d:73:
                    38:66:c5:58:cf:4f:f2:7f:48:bf:2e:89:d9:a9:e4:
                    77:a0:c4:d0:25:e0:08:6d:63:19:cf:9c:78:b4:c0:
                    fb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.148.0/22
                IPv6:
                  2a09:7c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209624

    Signature Algorithm: sha256WithRSAEncryption
         50:fb:07:cd:c2:5f:90:48:84:72:6b:61:e2:22:c4:4a:57:ad:
         cf:c0:81:83:a2:b7:2c:f6:75:2f:0a:9a:84:27:81:63:52:15:
         17:1d:fb:14:ea:7f:2c:d1:e7:90:85:a1:66:d9:ed:b9:b0:8d:
         1f:3a:65:21:1a:d4:e3:15:05:0f:46:4a:1d:de:b0:a2:7d:a9:
         e5:81:3f:51:f5:83:99:0b:d8:fc:06:34:9d:48:99:20:13:10:
         6c:3f:78:25:89:ee:74:4c:65:98:7a:e7:15:24:0d:79:87:0b:
         aa:0e:78:00:e4:a9:7a:32:b6:cc:1f:aa:31:e5:fd:e5:f4:cd:
         f1:eb:ab:67:29:22:61:c1:f9:7f:df:7e:72:e7:4e:18:cf:65:
         64:23:b3:19:e6:07:d8:ce:35:57:aa:cb:96:c5:08:4d:b1:c9:
         83:a8:ff:9d:e8:12:3d:86:74:b5:2a:7f:2b:ff:29:71:ad:75:
         b8:1d:6e:d5:e5:8d:47:bf:d2:58:d4:4a:83:2b:08:b5:fc:ce:
         b4:b9:9c:80:dd:68:2b:45:40:84:09:d9:92:b1:ae:d6:66:11:
         b2:f9:85:e1:3c:4c:01:74:99:97:1c:20:35:94:c6:ed:17:0d:
         10:b1:1a:55:dd:2a:e7:86:33:f6:cb:f8:d4:45:59:43:f1:71:
         52:53:d3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----