This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
File:                     odcYUzJOsGD7r8mIIzhgSZyWxTo.cer (raw, json)
Hash identifier:          ya5i1Pc2moVjPFLqCMvWy0OxdO/k0SMCLQBmV/r0N1s=
Subject key identifier:   A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C6DAE8F10403C5AE7F37285944B283
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:17:59 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 45.148.132.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:da:e8:f1:04:03:c5:ae:7f:37:28:59:44:b2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a1d71853324eb060fbafc988233860499c96c53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:60:c8:7b:27:86:de:d9:a0:f9:53:cc:71:
                    f7:ad:61:9c:90:4f:0d:7a:a5:69:89:dd:9f:b9:6d:
                    fc:1e:b8:08:ee:d9:f1:bc:47:0b:18:83:52:68:39:
                    8c:77:e2:9d:f2:59:5b:22:22:8d:d7:2c:bf:91:18:
                    a2:36:84:88:63:57:38:25:69:ad:93:a8:df:07:1a:
                    f3:55:8a:2a:74:ce:40:a6:d5:69:12:50:e1:9a:17:
                    30:77:8a:f6:4f:98:74:c9:76:ae:68:ab:e7:77:d1:
                    51:fe:66:28:97:13:43:19:88:9e:b2:00:46:95:25:
                    94:1c:80:3b:ec:d4:26:0d:3e:61:9f:bd:77:4a:d9:
                    7f:9c:e0:fb:36:99:d6:5a:f6:82:e0:af:5e:cf:46:
                    dd:54:82:d7:53:d2:c2:9d:96:de:25:72:6c:1a:d3:
                    a4:25:e2:ac:8f:b4:35:b0:a6:42:19:d0:a3:dc:73:
                    60:f4:de:9c:0e:11:f2:4c:8a:bf:d8:98:48:3a:12:
                    e6:23:80:52:31:e8:9b:7a:bb:4a:7a:4a:79:05:cb:
                    c0:05:f4:7e:2d:bc:a7:4e:dd:0c:19:f5:4e:0d:b1:
                    d5:ae:28:a2:9f:8e:76:94:a6:ba:d7:77:78:5f:1e:
                    d7:67:11:2d:62:78:43:7c:62:d4:f6:4f:23:18:cc:
                    f6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:f6:7e:e7:0c:7e:8e:83:58:48:c6:ba:13:f7:c9:23:52:
         32:73:e1:c8:3b:26:70:65:79:cb:3e:f1:02:af:d2:e5:00:24:
         16:0b:82:cc:75:15:bd:16:b2:55:34:b6:6c:1a:1b:f6:1e:ca:
         0d:61:d2:cb:1b:56:2f:a4:7c:20:fe:c4:e8:9d:6c:38:12:03:
         40:0e:b1:d0:69:66:4d:ce:83:37:b5:9f:13:c5:35:45:da:80:
         4f:1d:74:83:ff:72:1e:58:58:54:ac:ed:40:48:9e:00:09:47:
         aa:61:5d:4a:32:60:84:45:3e:5d:e1:8a:6b:bf:04:0c:56:f4:
         47:02:34:7f:ef:81:84:6a:38:9f:44:0d:89:c3:1a:d1:f8:24:
         03:a0:d1:c5:d7:f0:f9:ec:ee:5d:46:54:3c:93:81:05:95:c7:
         3b:98:28:59:ac:2d:c0:bf:ec:c5:1b:fc:a1:d9:79:a2:d6:82:
         53:3f:0a:8e:8f:4c:59:1b:fa:59:cd:9a:ea:35:1c:6a:c4:65:
         47:97:6c:30:d2:c9:db:a4:da:9f:d4:17:44:11:98:37:79:4a:
         52:ec:49:d0:a5:ba:8a:b6:94:bc:44:6a:dc:ab:93:e9:ee:40:
         b3:d0:ca:aa:66:21:45:f8:a0:e7:de:03:18:42:34:49:f9:4e:
         2a:9c:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----