This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
File:                     pFzsFmCtLf53GpoSNLHRKpxbghE.cer (raw, json)
Hash identifier:          P2W/ajVXUZnb7hsY4DwKHrSXN/Ge4y1NP3wknm0afc8=
Subject key identifier:   A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E38F376F9F9C7684300023CEEF3C58C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:20:20 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 201173
                          IP: 2001:67c:2d50::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:f3:76:f9:f9:c7:68:43:00:02:3c:ee:f3:c5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:20:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:29:cd:6e:fa:0e:5d:09:8f:f7:78:2c:8b:
                    1d:07:80:e8:61:0c:da:f0:b7:14:a4:78:1d:76:df:
                    2c:0f:f2:71:57:d2:c3:2f:7d:e7:d0:1a:67:e0:6f:
                    dc:65:ae:c4:fa:81:94:36:e9:6b:83:10:b2:7e:b7:
                    2a:50:94:a7:64:a0:e1:30:22:be:3c:bf:31:4e:60:
                    a8:5e:da:0c:1b:16:72:ba:2f:ae:98:77:6b:bc:09:
                    00:59:f1:af:d3:58:81:14:fc:70:af:6b:f6:a3:a9:
                    b5:1a:f4:93:b9:71:4a:23:a5:a3:aa:84:05:3d:e5:
                    6a:48:f2:71:6c:0b:77:d7:a0:79:2d:42:54:10:8d:
                    9b:c2:ba:68:25:a9:42:7c:bc:bc:48:b3:96:db:22:
                    ed:13:74:68:98:f6:c9:d1:a5:bb:28:53:d4:3f:02:
                    79:44:8c:ea:94:12:50:6e:51:e0:24:5a:8a:ce:39:
                    88:23:56:49:d7:5c:83:21:a4:2b:fc:a3:1f:83:c4:
                    b8:47:bd:1c:a3:aa:7c:ac:23:2a:18:3f:8a:f6:90:
                    75:34:9a:53:3d:f7:0e:5b:2f:d0:2b:00:93:71:77:
                    6d:38:e0:8f:bc:d3:16:54:76:92:e6:2c:d8:80:68:
                    ed:f1:4d:4a:33:42:b2:5f:80:4f:f8:83:9d:e4:57:
                    8a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2d50::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201173

    Signature Algorithm: sha256WithRSAEncryption
         04:b5:df:9a:84:56:f7:ce:4f:eb:d4:14:b9:28:9e:51:cd:d3:
         19:09:29:c6:1f:de:e4:3a:2e:74:64:49:80:ff:d8:07:e5:67:
         fc:81:e1:bb:d0:f7:65:54:91:24:ec:1e:04:d0:05:14:bf:88:
         be:f5:bd:53:64:6b:dd:b1:09:26:88:8b:9d:82:9b:fe:1b:c9:
         c9:00:bf:a6:6f:af:5d:87:ee:4e:75:c6:21:83:be:8f:25:b3:
         80:b3:c8:93:85:b2:31:00:94:e7:49:c8:01:d9:c9:57:73:92:
         5d:68:cc:a8:ba:73:b7:40:98:10:99:87:34:e5:5c:62:38:1e:
         ef:22:e9:1b:b9:b3:d2:87:4b:73:90:bf:7d:4a:64:1d:b0:3c:
         49:1d:46:5e:56:f6:33:3e:fe:0a:f6:a4:05:a0:54:f6:e7:24:
         8f:e1:6b:d2:28:fa:4e:95:d1:aa:cc:1d:3a:f5:d5:b5:63:b2:
         10:40:2a:29:4a:e9:31:89:da:7c:c1:9a:d8:87:50:c4:55:19:
         97:e6:72:6a:3c:a4:d8:33:13:63:31:5e:16:b7:57:48:fb:b7:
         82:e5:83:e1:51:7c:7e:86:4d:cf:c1:ee:72:73:50:a9:06:c0:
         ce:c0:13:3f:00:5d:58:a9:1f:7f:eb:1b:90:74:27:06:bc:2f:
         7f:95:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----