This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
File:                     oewv8gIW07xkdbhQpGXjYvTs7s0.cer (raw, json)
Hash identifier:          JXcG1zNveQiD6zE+QmAozE5iepWRDSISEOcMvmlEWy4=
Subject key identifier:   A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C12B5547940023902C5DA4A94CB8FF0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 00:19:19 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.46.1.0/24
                          IP: 193.46.44.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:b5:54:79:40:02:39:02:c5:da:4a:94:cb:8f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:19:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:ef:f5:34:f1:25:49:56:2e:6d:54:80:bf:
                    f8:54:e7:9f:0c:e6:bb:08:49:d0:fd:d1:78:a6:48:
                    69:19:0a:f0:27:68:6e:8a:0e:96:cc:16:b2:05:6f:
                    31:07:63:a5:d6:91:fc:67:f5:6d:e1:f3:e1:2d:c4:
                    8a:4a:cf:d5:e6:6c:c9:52:6a:df:27:4f:df:8d:b2:
                    64:ec:c8:70:f4:f7:6a:55:7e:3e:32:6a:01:5d:80:
                    f7:d6:07:bc:ee:6f:10:f6:4a:2a:34:3b:6c:07:dd:
                    1c:49:84:b5:ac:c6:1a:5f:77:64:ab:cc:ac:6c:70:
                    40:67:02:71:ac:8a:20:53:79:e0:23:06:6f:d1:cb:
                    69:53:50:f0:43:e0:d9:0a:92:59:b5:c5:71:0b:54:
                    2c:53:76:eb:f4:52:ae:2a:42:ff:75:84:8c:d1:9c:
                    8e:04:21:ab:51:94:16:49:d2:3f:90:0c:35:9e:a6:
                    50:a0:65:eb:35:17:80:c0:ce:5e:51:c9:23:eb:3a:
                    35:10:ae:06:d2:c4:92:d5:23:24:9e:ed:d5:ee:f3:
                    a8:1a:8d:c5:61:4b:d1:5e:24:62:bd:ae:ba:21:a9:
                    63:9b:cc:61:96:28:af:36:b1:1a:d4:ec:d9:53:a4:
                    29:05:77:f1:47:8d:8f:29:2b:81:fd:57:85:38:f1:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.1.0/24
                  193.46.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:48:db:f4:87:eb:e2:af:15:30:c6:6c:98:a4:67:96:00:
         25:70:cd:58:83:d9:75:7a:25:d3:2a:d0:4c:98:e8:1c:58:30:
         be:54:62:de:c4:e0:b0:80:cc:34:ef:98:9f:68:bb:3c:ad:37:
         61:60:79:db:b6:5e:ea:11:bd:bc:c6:b0:c9:a0:27:f8:a1:ac:
         96:4a:46:7b:9d:a7:bd:78:28:2f:68:39:1e:b3:2d:7b:d5:a1:
         8b:37:00:26:07:0b:d1:f6:a1:c8:a3:7d:35:da:9a:6b:54:45:
         ca:d5:38:76:e0:c1:45:1d:8b:6f:65:cc:8f:e8:25:b6:88:ef:
         e3:a4:b6:d6:8e:41:fd:a9:ad:f7:dd:22:f1:fb:6c:f2:a8:ff:
         d6:e5:04:74:21:d5:fd:14:cc:e7:db:c1:eb:5b:5d:7c:e1:21:
         5e:f5:8a:97:62:b7:9b:aa:22:f3:b6:57:43:76:8c:43:d3:36:
         3c:42:82:84:05:6c:a2:99:3a:92:94:2d:1b:74:1f:52:ff:41:
         e6:c1:58:bc:55:1a:cc:54:78:50:5f:df:18:57:58:4e:90:2a:
         b3:6a:fb:70:18:a0:ff:20:41:a4:1c:03:74:ff:13:9f:f1:c7:
         06:bf:fd:4d:cd:56:b5:92:0d:9e:fe:93:70:9f:b3:a2:19:6a:
         88:b6:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:11:10 2026 by rpki-client