This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nscEvg6b7zQJT-8mSVnj9-HPais.cer
File:                     nscEvg6b7zQJT-8mSVnj9-HPais.cer (raw, json)
Hash identifier:          UQPJJgu/2+LoL2mTPfeDazI8cdd4fyzJvAAees/sYBw=
Subject key identifier:   9E:C7:04:BE:0E:9B:EF:34:09:4F:EF:26:49:59:E3:F7:E1:CF:6A:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F13A670A31939B4C39990A74AABD264
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/nscEvg6b7zQJT-8mSVnj9-HPais.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:19:12 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 60844
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:a6:70:a3:19:39:b4:c3:99:90:a7:4a:ab:d2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9ec704be0e9bef34094fef264959e3f7e1cf6a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:2e:8d:e4:54:7c:cc:e4:ea:b7:40:e8:8b:
                    3e:74:5d:c2:0e:d6:48:a3:cd:29:99:db:15:f6:14:
                    a6:04:c9:2e:1a:67:0c:4a:2f:49:fc:bd:9f:97:79:
                    8f:e1:02:0f:f3:e6:a8:00:80:18:9f:b2:49:e7:52:
                    42:8e:b0:84:a3:4c:de:53:a1:0c:c0:92:ec:cf:8d:
                    d0:b7:d5:51:5b:ed:86:49:32:0e:55:0d:28:59:44:
                    d6:e9:ec:e0:37:31:c5:c2:5c:f9:6a:f3:1c:b7:27:
                    4f:55:8b:16:6b:09:b2:56:ad:8a:56:95:2c:d9:2e:
                    a4:2a:7f:97:8a:ea:78:ac:b0:54:20:80:6f:a6:0d:
                    7e:d7:8b:4f:83:d8:3d:17:04:8d:41:cd:36:89:c2:
                    21:42:d9:29:3c:c3:55:0b:99:7c:40:ab:0b:c9:0f:
                    0d:c7:55:3e:c5:78:e7:71:98:e3:ac:8a:84:e8:24:
                    f8:11:91:dd:b3:8e:9a:8a:7f:a4:6d:a5:37:d3:d8:
                    fa:1b:fa:37:83:04:c0:f2:65:af:46:a8:cd:c0:93:
                    5b:b2:85:37:7c:fe:a6:c4:7a:0b:fb:f9:d0:bf:4f:
                    bd:94:54:4d:4d:39:91:1b:aa:da:98:de:26:fb:35:
                    5a:04:d5:29:78:75:b6:a3:e0:7d:d3:c3:55:ab:df:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C7:04:BE:0E:9B:EF:34:09:4F:EF:26:49:59:E3:F7:E1:CF:6A:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/nscEvg6b7zQJT-8mSVnj9-HPais.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60844

    Signature Algorithm: sha256WithRSAEncryption
         5d:f6:50:b0:2c:20:87:52:ed:a6:22:33:00:9f:77:b3:79:d4:
         0f:e4:f7:1b:5a:b6:8f:41:9d:0a:d4:f2:9c:60:33:5d:2f:3b:
         53:2e:57:90:4f:f3:88:a1:43:bb:ff:a5:b3:fa:ce:45:a8:bc:
         93:ac:dc:30:65:db:fb:04:38:5a:11:ec:be:21:54:ab:42:ff:
         84:23:f2:67:7a:7a:8d:0f:cd:35:12:f6:ec:83:99:f7:56:da:
         ff:bf:e6:46:af:3f:bd:c2:c6:ba:84:ce:95:fe:ec:ee:c2:81:
         82:30:f7:9e:54:c6:38:5e:7b:ab:44:42:4a:85:f4:e5:3a:0c:
         29:35:09:2a:87:a6:c6:f4:a4:b5:da:8c:a7:21:9b:72:95:ea:
         95:77:d6:2c:67:28:2c:c3:cf:b1:ae:00:79:cc:ed:c8:cc:c8:
         f1:c8:76:11:76:e5:5a:27:d3:34:69:aa:d3:19:c7:12:ab:6c:
         ca:e5:cb:56:fe:76:ae:ce:79:6a:fd:85:b8:0b:37:a1:32:88:
         c9:b5:b1:6a:6b:e9:1e:b4:aa:8e:67:f9:dd:e4:f4:0e:1d:82:
         a2:34:97:bb:28:6a:dd:13:6b:1c:38:af:18:60:30:0f:bd:f3:
         09:c2:27:74:d1:1e:b5:ff:cc:b1:87:4b:29:ba:b6:3c:83:8d:
         64:9b:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----