This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
File:                     orYtO_awxSR-3fRJjCzOYMDR5Qg.cer (raw, json)
Hash identifier:          zWM8i2eGH3SFDULkNhcYdWQcKhlRDXtrVAVruF/8Mtc=
Subject key identifier:   A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79ECBA3069E8F1F2BCDEF7202A270043
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:18:35 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214044
                          IP: 2001:678:d18::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:ba:30:69:e8:f1:f2:bc:de:f7:20:2a:27:00:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:01:2f:8c:2c:5d:d8:ca:f6:a6:73:0f:ed:
                    35:ff:7a:03:f8:71:ce:3a:b9:46:c0:a9:c8:a4:b8:
                    5b:49:fa:16:60:5b:bf:61:de:94:2a:65:ad:76:a8:
                    47:1d:9c:ac:5f:96:64:2f:d6:35:ee:55:c7:78:27:
                    3f:09:86:bd:39:c9:31:39:3b:c7:1e:5c:49:a6:e9:
                    e0:ca:1f:c3:cd:31:b6:f4:9c:a7:8d:97:5b:5d:70:
                    ef:07:be:06:ef:83:c8:22:31:13:9f:1d:2f:02:74:
                    7d:45:0e:39:fb:b1:df:63:45:dd:c9:5f:9b:d7:91:
                    e3:03:cc:19:16:6e:af:16:93:e1:3a:78:b8:09:74:
                    9f:0e:19:2b:b0:83:a2:99:81:3b:4d:ef:5e:7a:48:
                    c2:70:0d:2d:df:f7:be:33:5d:01:90:4d:1f:82:ee:
                    b8:42:05:78:f6:cb:df:ee:8f:57:c3:19:1f:5f:52:
                    a6:e5:ef:b8:46:4a:bc:f5:e5:36:95:81:41:a4:0c:
                    4c:89:00:02:c4:90:e9:88:90:7f:97:85:13:b1:2d:
                    c5:3e:c2:2c:b1:32:3a:72:02:e6:25:54:56:ec:b8:
                    b6:5f:20:31:bc:ee:22:77:e8:28:33:e6:08:b7:66:
                    d7:f2:08:08:bc:eb:1c:d9:31:db:6b:54:43:e6:80:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d18::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214044

    Signature Algorithm: sha256WithRSAEncryption
         2d:32:81:8c:32:dd:62:32:98:dd:17:74:88:13:8b:a0:23:f4:
         8e:6a:41:23:4e:72:a9:0d:1b:57:35:f9:95:a0:3f:5e:86:47:
         20:3c:68:78:7a:a3:75:61:23:b8:82:44:4e:6a:85:2b:d4:18:
         a6:f8:b6:7b:42:5b:4a:80:8b:03:31:c4:43:6b:5c:d4:93:42:
         a3:e4:10:f7:a3:c4:f8:a7:74:33:22:71:fa:d8:43:f1:7e:a3:
         df:0a:d6:87:e8:5a:4d:55:62:a4:ce:51:de:f5:8c:25:f3:e7:
         f4:d9:50:c4:66:bc:2e:b4:9e:c9:2a:8c:56:6a:3e:65:42:a3:
         31:44:7d:35:5a:a8:ff:b5:50:3b:57:59:04:75:84:8b:9e:79:
         bf:61:c3:a5:0f:d4:4d:c7:6a:e0:44:a8:d1:e8:80:e0:8c:9e:
         4b:c2:d5:2f:f0:bb:b4:d2:d3:1e:4d:94:5c:98:e9:7b:97:2a:
         f3:42:36:fe:8e:ba:c7:9a:7c:90:54:bb:17:f4:bd:aa:29:ee:
         9f:28:d3:0b:c0:0c:02:b3:68:cd:ef:34:42:83:00:db:19:7d:
         90:6b:ed:b0:b5:6e:69:f5:38:04:74:77:96:0c:b5:d5:6a:16:
         3e:5f:0d:dc:0e:cf:ee:a9:f0:f5:b1:47:13:45:f4:7d:a7:13:
         08:66:8a:01
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZt57Lowaejx8rze9yAqJwBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmI2MmQzYmY2YjBjNTI0N2VkZGY0NDk4YzJjY2U2MGMwZDFlNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR8BL4wsXdjK9qZzD+01/3oD+HHO
OrlGwKnIpLhbSfoWYFu/Yd6UKmWtdqhHHZysX5ZkL9Y17lXHeCc/CYa9OckxOTvH
HlxJpungyh/DzTG29JynjZdbXXDvB74G74PIIjETnx0vAnR9RQ45+7HfY0XdyV+b
15HjA8wZFm6vFpPhOni4CXSfDhkrsIOimYE7Te9eekjCcA0t3/e+M10BkE0fgu64
QgV49svf7o9XwxkfX1Km5e+4Rkq89eU2lYFBpAxMiQACxJDpiJB/l4UTsS3FPsIs
sTI6cgLmJVRW7Li2XyAxvO4id+goM+YIt2bX8ggIvOsc2THba1RD5oCR2wIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFKK2LTv2sMUkft30SYwszmDA0eUIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzgzZGMy
ZC01MzExLTQ1YTYtYTA4YS02MmJmMTVjNDY3NGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvODNkYzJk
LTUzMTEtNDVhNi1hMDhhLTYyYmYxNWM0Njc0YS8xL29yWXRPX2F3eFNSLTNmUkpq
Q3pPWU1EUjVRZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA0YMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNEHDANBgkqhkiG9w0BAQsFAAOCAQEALTKBjDLdYjKY3Rd0iBOLoCP0jmpB
I05yqQ0bVzX5laA/XoZHIDxoeHqjdWEjuIJETmqFK9QYpvi2e0JbSoCLAzHEQ2tc
1JNCo+QQ96PE+Kd0MyJx+thD8X6j3wrWh+haTVVipM5R3vWMJfPn9NlQxGa8LrSe
ySqMVmo+ZUKjMUR9NVqo/7VQO1dZBHWEi555v2HDpQ/UTcdq4ESo0eiA4IyeS8LV
L/C7tNLTHk2UXJjpe5cq80I2/o66x5p8kFS7F/S9qinunyjTC8AMArNoze80QoMA
2xl9kGvtsLVuafU4BHR3lgy11WoWPl8N3A7P7qnw9bFHE0X0facTCGaKAQ==
-----END CERTIFICATE-----