This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
File:                     pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer (raw, json)
Hash identifier:          Err1NUM41yXe0Jhl8ozUvadx70H+JpV2xQSoAajHIPQ=
Subject key identifier:   A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A26790800A6C909534CE7013260126
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:17:47 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 206781
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:67:90:80:0a:6c:90:95:34:ce:70:13:26:01:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a442a13095b79bca86e2cda012e4c4cf62467969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:89:f1:64:5b:25:92:88:05:4d:8e:db:95:
                    11:23:b1:26:aa:ef:36:3b:eb:a7:85:cb:59:4c:d8:
                    3f:b7:d2:79:5e:e4:16:a5:cd:c3:3c:bd:37:57:7c:
                    18:b0:f0:07:16:5d:15:d5:e1:1b:6d:ea:08:51:fb:
                    75:21:1e:d2:32:2f:e8:df:a7:91:c3:08:81:b9:5a:
                    84:1a:25:d3:40:be:3f:b9:67:e9:79:ec:e4:21:75:
                    c0:6d:a3:6f:70:15:b6:78:1f:6d:a1:84:3f:c7:89:
                    f9:8d:07:a6:de:1f:c7:55:7f:51:67:ac:25:c2:57:
                    18:af:66:67:17:f8:67:4c:88:5e:fd:4a:c7:f3:a8:
                    3e:a1:0c:ba:15:26:3e:29:e6:98:c4:10:d5:fa:bc:
                    9c:35:e5:33:6a:84:3d:aa:86:b3:d8:a0:ff:b4:44:
                    a7:9c:f2:3d:2c:37:cd:7c:b7:b2:4e:00:b5:f5:55:
                    a9:ae:83:b0:58:f4:93:87:ee:e7:50:ef:31:03:fd:
                    d9:fc:3d:d0:73:dc:75:c0:7e:01:c9:4b:bf:a7:04:
                    a5:fc:53:28:7c:5c:2b:91:fd:79:ec:48:e6:3b:65:
                    00:7f:d5:54:0c:5f:83:a6:29:2f:8c:07:fa:b0:63:
                    b6:7e:59:7e:e2:d3:3f:db:b5:7a:3d:9a:d6:23:84:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206781

    Signature Algorithm: sha256WithRSAEncryption
         09:58:a7:e6:08:7e:bd:58:c4:9a:51:c1:dd:8c:b4:b4:49:b6:
         a4:76:6c:c3:79:a3:7b:0d:5e:71:30:85:91:61:d9:84:d7:4b:
         1a:3f:3f:c0:7a:f5:87:01:44:d9:a3:bd:8e:c3:39:21:01:d6:
         0c:75:e0:41:5a:9f:30:8e:97:e4:be:4b:47:d7:f8:54:36:cc:
         25:f6:08:be:d2:cd:e2:35:03:d5:72:e1:36:2f:9a:f1:7f:e8:
         64:5e:32:40:13:7f:d9:44:d0:64:c3:77:eb:c7:c6:4b:83:2c:
         cd:02:a2:95:c9:46:2f:b8:61:af:ad:27:28:66:f8:38:50:10:
         90:53:a6:6a:75:58:9b:aa:3f:56:33:d7:cd:b8:e1:20:36:47:
         42:88:d9:9e:83:c0:f7:32:aa:d8:93:76:6f:a2:e3:fb:9c:41:
         e5:c4:bd:58:74:0b:55:93:2d:3b:b2:39:bd:70:1a:f5:99:b9:
         12:d6:f8:94:35:9e:00:f2:8f:6a:c9:48:c0:df:97:c2:d4:80:
         f8:9c:42:e2:17:74:e7:cd:af:cc:1e:88:72:d3:b3:b9:6d:4f:
         ad:9f:4d:02:bb:77:bc:8a:b0:d3:27:7b:c2:84:fd:5c:8b:af:
         c1:db:03:ad:31:a6:7f:d8:65:5e:dc:69:83:19:d0:4d:43:50:
         b5:41:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----