This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
File:                     mogMjbFaBDs74WXi2DG6oEerAKw.cer (raw, json)
Hash identifier:          F36XF2uPtNm/umqAZXZEhbxcyABo2bSBvpMH6ixK8/g=
Subject key identifier:   9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7EA70EB9C02F6FDF6CDC5D2EA84C7D36
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 12:20:36 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 77.95.24.0/21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:0e:b9:c0:2f:6f:df:6c:dc:5d:2e:a8:4c:7d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:20:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:2a:d4:36:0b:c4:d4:cb:f8:1d:df:7e:46:
                    74:1f:86:f6:2c:5f:98:1d:5a:8d:04:49:9a:ed:98:
                    47:c7:21:26:ff:07:e8:cc:7f:a5:8b:cd:12:30:5a:
                    0b:e1:72:13:24:d6:e4:ba:55:50:38:21:6b:43:68:
                    88:22:c4:2a:12:53:7d:c1:3f:de:24:2b:64:8e:4d:
                    6f:42:7a:da:c7:c7:31:03:62:c2:fd:a6:97:c3:42:
                    9b:43:29:48:31:85:11:8f:f3:08:72:bf:3c:ef:2f:
                    f8:1a:47:17:f4:e8:4d:fe:e6:5a:46:ce:f1:67:2f:
                    db:6f:89:50:41:dd:e4:12:1b:72:a3:bd:88:f9:a9:
                    93:68:3a:5a:0d:04:b4:0c:ce:76:52:49:2e:3e:03:
                    fb:3f:6b:b9:38:c8:8a:a6:04:dd:27:50:b3:37:9a:
                    b8:18:e2:ef:23:7c:b0:72:74:f1:ea:3f:1e:2c:58:
                    63:be:79:7a:f0:8e:26:b1:e9:03:50:0c:c6:f4:53:
                    8b:15:1f:d3:fc:66:f5:64:fa:67:fc:98:96:f0:82:
                    f0:1a:78:65:5a:05:7a:9c:cb:ef:81:d9:f0:89:94:
                    ea:7f:45:e7:dc:a1:92:9d:e1:0e:e3:44:51:43:2b:
                    e6:5e:93:4b:56:57:92:89:99:3a:52:92:6c:ed:19:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.95.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:02:20:47:51:61:bd:cc:f6:81:57:19:07:da:cb:23:7c:6b:
         e1:a7:55:7d:e3:2b:d0:e9:6a:64:3e:21:69:73:42:90:90:d0:
         62:4e:09:a5:f8:52:f4:93:d7:54:4c:6a:df:6d:2d:c3:cd:61:
         62:d5:ca:98:94:5d:05:a0:a2:de:7a:11:4c:30:63:93:af:ba:
         dc:3b:76:40:5e:e6:54:bf:33:ca:44:ad:88:47:be:75:6e:37:
         46:f1:43:f2:2d:8a:d2:ed:de:a8:fe:93:6e:89:ac:84:44:34:
         d2:98:75:c2:7a:01:7a:1e:5e:d6:37:0a:9d:9a:31:65:de:be:
         73:41:9c:61:fb:3f:d5:74:ca:c0:c2:c3:ca:60:0e:53:ef:af:
         eb:41:c4:f7:9f:99:e3:ce:1b:4b:65:c4:df:2f:fe:ec:e0:79:
         d7:7a:ac:91:d6:49:3f:61:32:a1:7a:8c:bd:a4:22:59:f0:5d:
         8e:90:cf:ea:47:e5:b6:2f:9b:b9:99:6e:5e:78:fb:ab:9a:a3:
         56:47:ec:40:4c:a0:d2:2b:71:e0:58:b9:0b:80:2e:dc:6e:d0:
         dc:4b:00:a4:a0:4a:fa:ed:75:03:4e:83:71:12:7e:66:5b:e1:
         b8:1f:69:9a:dc:8c:a2:13:02:e7:2b:24:77:a0:ee:29:52:31:
         5f:50:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:26:28 2026 by rpki-client