This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
File:                     pABDs-E67Tl_iTLPXRP_T0qv5ro.cer (raw, json)
Hash identifier:          y7vbPhR1H4BD+t+vXFFV9TugHwCoqouiTsH5DcC14iU=
Subject key identifier:   A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C11AFD934D1EDB092297C6CF4D677F0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 00:18:12 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 204285
                          IP: 185.254.116.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:af:d9:34:d1:ed:b0:92:29:7c:6c:f4:d6:77:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:77:90:2f:91:a9:f0:a1:b7:9a:40:29:9a:
                    7d:75:27:02:1b:3d:49:ca:31:cd:2d:a0:20:43:a6:
                    75:e2:21:43:5e:42:08:1e:df:e6:2b:10:d0:8b:ea:
                    aa:24:22:6f:ac:44:83:a3:f6:61:c3:8a:01:96:7d:
                    af:8d:02:fb:a6:60:8e:ab:d6:53:87:7c:d7:b0:90:
                    3a:27:de:ff:89:77:a9:cd:4a:4c:46:7f:18:5e:3c:
                    d7:8d:d0:27:22:a0:02:ad:22:4e:34:66:90:4a:11:
                    57:39:c9:d4:46:ae:85:e9:96:ef:67:d7:43:79:46:
                    06:1c:45:f3:bc:ce:f4:36:ea:38:57:d9:15:b1:bc:
                    a1:67:9a:4d:a5:dc:ee:cc:77:2c:e1:25:94:57:f9:
                    01:b2:4d:09:3a:e7:a3:47:28:3f:4a:6a:91:7d:f8:
                    77:07:14:b7:4b:a1:76:fd:bb:00:e4:2a:ab:89:0a:
                    56:88:51:8c:70:3e:9e:40:e6:45:95:23:21:bd:06:
                    62:e0:11:5e:77:d4:c3:ce:4e:38:b3:cd:c5:0e:93:
                    3c:5a:07:eb:ed:17:c8:4d:58:ae:77:4a:90:f9:68:
                    b2:ef:9a:8d:50:fa:2a:aa:9d:a5:5e:7d:7a:d4:ff:
                    b6:14:2f:9f:24:d9:56:dd:ac:7f:93:b4:38:07:85:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.116.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204285

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:04:84:9f:95:5d:83:2e:11:09:b5:8a:39:52:92:89:18:
         8c:e1:6f:60:29:b1:7d:7a:c7:d4:c0:b0:cd:a0:d5:51:5f:1b:
         70:85:9b:4c:f1:59:33:40:cf:54:9a:e4:de:85:93:f5:8b:c8:
         fd:4d:51:0d:7e:35:54:a8:23:6f:b4:7e:e7:f0:54:45:e7:0b:
         48:32:a8:56:10:bd:6e:24:d8:d3:c8:dc:f1:8e:31:be:38:d8:
         53:d7:3e:a1:95:3b:94:f8:b3:24:8f:9a:66:90:39:8d:17:a5:
         dc:56:5f:e4:28:dd:1e:a0:9b:0d:3f:8b:33:84:d2:6f:0b:01:
         23:ab:12:3b:60:51:87:40:52:34:78:7b:59:b3:a0:9d:d3:b1:
         a0:e5:84:82:09:cf:e1:cd:1f:81:54:65:99:c7:2a:e9:fb:5e:
         94:f6:1e:68:75:c9:1e:f8:9c:8d:1a:ee:6a:ae:ba:2b:2f:40:
         70:8b:70:39:3f:27:1b:9f:ec:bd:f2:11:b3:f0:a4:d0:0a:0b:
         9d:f6:cb:9b:3e:71:bc:8b:91:77:23:e0:9f:6e:12:4b:34:a5:
         1c:92:8c:50:83:34:66:50:59:7e:57:ac:ef:71:1e:57:e6:0d:
         33:2a:b5:88:df:7d:7e:08:e7:31:3a:e1:b7:be:57:7c:c2:d6:
         5c:57:76:39
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZt8Ea/ZNNHtsJIpfGz01nfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDAwNDNiM2UxM2FlZDM5N2Y4OTMyY2Y1ZDEzZmY0ZjRhYWZlNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYd3kC+RqfCht5pAKZp9dScCGz1J
yjHNLaAgQ6Z14iFDXkIIHt/mKxDQi+qqJCJvrESDo/Zhw4oBln2vjQL7pmCOq9ZT
h3zXsJA6J97/iXepzUpMRn8YXjzXjdAnIqACrSJONGaQShFXOcnURq6F6ZbvZ9dD
eUYGHEXzvM70Nuo4V9kVsbyhZ5pNpdzuzHcs4SWUV/kBsk0JOuejRyg/SmqRffh3
BxS3S6F2/bsA5CqriQpWiFGMcD6eQOZFlSMhvQZi4BFed9TDzk44s83FDpM8Wgfr
7RfITViud0qQ+Wiy75qNUPoqqp2lXn161P+2FC+fJNlW3ax/k7Q4B4WwYwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFKQAQ7PhOu05f4kyz10T/09Kr+a6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2L2EzZDhm
NS0wZDNjLTQyZmEtOGM2OS1iOWMwZGY3MGFkM2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvYTNkOGY1
LTBkM2MtNDJmYS04YzY5LWI5YzBkZjcwYWQzZi8xL3BBQkRzLUU2N1RsX2lUTFBY
UlBfVDBxdjVyby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBuf50MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMd/TANBgkqhkiG9w0BAQsFAAOCAQEAGaIEhJ+VXYMuEQm1ijlSkokYjOFvYCmx
fXrH1MCwzaDVUV8bcIWbTPFZM0DPVJrk3oWT9YvI/U1RDX41VKgjb7R+5/BURecL
SDKoVhC9biTY08jc8Y4xvjjYU9c+oZU7lPizJI+aZpA5jRel3FZf5CjdHqCbDT+L
M4TSbwsBI6sSO2BRh0BSNHh7WbOgndOxoOWEggnP4c0fgVRlmccq6ftelPYeaHXJ
HvicjRruaq66Ky9AcItwOT8nG5/svfIRs/Ck0AoLnfbLmz5xvIuRdyPgn24SSzSl
HJKMUIM0ZlBZfles73EeV+YNMyq1iN99fgjnMTrht75XfMLWXFd2OQ==
-----END CERTIFICATE-----