This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
File:                     o20K5eL7_8zgh3Drwgwha5-_lIU.cer (raw, json)
Hash identifier:          gTi591+Qn7O1Rn0F69AM6dfFQaSLTLptbUO2X2WLINg=
Subject key identifier:   A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5C8CC89A03142861679BAE46DA7253
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:19:35 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 24955
                          AS: 39593
                          AS: 41704
                          AS: 47119
                          AS: 47775
                          AS: 57128
                          AS: 57865
                          AS: 59712
                          AS: 60095
                          AS: 60192
                          AS: 207240
                          IP: 46.191.128.0/17
                          IP: 77.79.128.0/18
                          IP: 79.140.16.0/20
                          IP: 79.174.32.0/19
                          IP: 81.30.176.0 -- 81.30.223.255
                          IP: 84.39.240.0/20
                          IP: 89.189.128.0/19
                          IP: 92.50.128.0/18
                          IP: 93.157.248.0/21
                          IP: 94.41.0.0/16
                          IP: 95.105.0.0/17
                          IP: 136.169.128.0/17
                          IP: 145.255.0.0/19
                          IP: 171.25.177.0/24
                          IP: 178.214.224.0/19
                          IP: 185.1.0.0/24
                          IP: 185.44.8.0/22
                          IP: 185.162.32.0/22
                          IP: 188.191.112.0/20
                          IP: 193.104.64.0/24
                          IP: 213.5.104.0/21
                          IP: 2001:7f8:70::/48
                          IP: 2a02:1c8::/32
                          IP: 2a03:b0e0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:8c:c8:9a:03:14:28:61:67:9b:ae:46:da:72:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:7e:54:b7:2b:39:45:24:cc:f7:90:ea:e9:
                    51:dd:be:f9:ee:6c:7d:e7:3c:22:18:2b:de:b2:82:
                    3f:73:da:76:a5:db:c1:dd:a5:56:ac:67:7b:ab:fd:
                    00:23:da:27:8b:7c:ad:bb:7d:a8:a5:6b:62:4a:3b:
                    6c:ca:3d:c0:55:98:1c:28:34:28:6f:e5:71:20:07:
                    3c:bf:d9:36:b7:7e:a1:5b:8a:0b:ad:b8:68:1f:df:
                    fd:ab:a5:92:37:c8:73:a5:28:0c:d1:2c:9e:99:91:
                    3c:90:8a:bc:84:99:71:50:a2:ea:81:ea:3c:d0:ce:
                    7b:f0:71:39:0c:3d:d8:71:98:b2:8f:d0:dd:a7:9d:
                    99:0c:c6:89:89:5a:77:a8:88:2b:1b:26:7b:81:0b:
                    f8:9e:f1:4b:3b:56:12:b6:b5:fe:cb:e9:29:bb:a3:
                    7e:5b:2d:c5:b9:db:03:01:28:68:93:c1:79:9a:7b:
                    89:15:79:ad:4e:a5:47:49:a0:a1:1c:96:4d:62:20:
                    e0:f6:c3:43:75:64:2b:71:87:57:ea:7f:7b:10:74:
                    6a:a4:69:cb:72:ac:fe:1f:a2:ab:28:c0:cf:66:b3:
                    d1:d7:27:00:65:6b:9d:95:59:fa:fa:01:8e:08:0e:
                    ce:9c:f6:6a:64:80:f1:d7:ef:84:5c:75:50:55:f1:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.191.128.0/17
                  77.79.128.0/18
                  79.140.16.0/20
                  79.174.32.0/19
                  81.30.176.0-81.30.223.255
                  84.39.240.0/20
                  89.189.128.0/19
                  92.50.128.0/18
                  93.157.248.0/21
                  94.41.0.0/16
                  95.105.0.0/17
                  136.169.128.0/17
                  145.255.0.0/19
                  171.25.177.0/24
                  178.214.224.0/19
                  185.1.0.0/24
                  185.44.8.0/22
                  185.162.32.0/22
                  188.191.112.0/20
                  193.104.64.0/24
                  213.5.104.0/21
                IPv6:
                  2001:7f8:70::/48
                  2a02:1c8::/32
                  2a03:b0e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24955
                  39593
                  41704
                  47119
                  47775
                  57128
                  57865
                  59712
                  60095
                  60192
                  207240

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:5e:b1:72:d1:65:c2:1c:45:f4:d9:31:c2:70:c8:02:54:
         1a:ca:c7:95:e4:8b:0a:b3:7c:08:95:4e:1d:7f:6f:bf:33:f6:
         e8:89:dc:66:84:0d:f8:95:f5:4d:a6:12:c6:04:53:2c:10:3e:
         a4:b2:d5:80:76:60:2e:40:3e:3e:69:97:88:14:61:20:09:fc:
         79:1b:80:f7:bb:65:42:4c:e4:68:9f:0c:80:0b:05:7a:f3:94:
         99:57:4f:1e:28:a9:86:6a:c3:b0:74:47:d8:4c:4c:ea:4e:30:
         b1:2f:4b:ae:d8:4b:3b:64:69:6d:d1:20:33:fb:33:fb:2f:2f:
         e4:f6:96:4b:c9:99:7d:0a:41:58:03:cf:0f:82:a1:d2:b2:40:
         e5:58:1e:af:14:4c:0e:91:25:d2:7b:ba:34:b7:85:64:15:65:
         9d:3e:24:f2:3c:5a:69:ff:2e:65:75:1c:85:8e:35:5a:6b:be:
         10:70:b5:9c:e4:5f:24:58:b4:5e:f7:dc:bd:b5:ae:0f:05:54:
         d7:df:91:61:f5:75:2d:8a:ad:82:e7:03:73:19:0b:19:8a:89:
         aa:1b:33:41:bb:48:ec:32:7f:60:ce:b5:1a:57:27:1d:21:dd:
         ca:cc:36:9e:37:0a:19:8f:6c:79:8a:85:4d:ab:04:8c:90:9e:
         d9:7c:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----