This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
File:                     pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer (raw, json)
Hash identifier:          daynHoCs30/K1I6X9Ieyhbp3byw6Fk5blwKI2hgsbd8=
Subject key identifier:   A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BFFC636BD86E8E20FC107FAC0DF5FD55E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 27 Jan 2026 14:05:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 201938
                          IP: 185.152.244.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:c6:36:bd:86:e8:e2:0f:c1:07:fa:c0:df:5f:d5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 27 14:05:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:2e:8a:14:6e:8c:86:f7:46:ae:b3:31:a4:
                    1d:36:d1:25:c9:b1:70:4d:81:f0:db:3c:09:88:b9:
                    5e:3e:c5:d7:b0:43:32:0d:4b:e1:d9:03:f4:17:96:
                    0c:32:f6:af:40:c7:74:5b:56:8e:21:df:45:02:87:
                    eb:ec:7b:4f:2b:7b:2e:ef:bf:59:82:a2:d1:76:23:
                    57:c0:fd:d2:7a:0e:b6:f2:4f:52:4a:9c:1a:7b:2a:
                    77:f8:29:f4:33:12:ed:a8:03:04:f9:35:e2:4b:89:
                    87:54:96:73:a5:fd:a4:69:6e:df:51:d4:33:5e:67:
                    66:73:8b:e5:c8:70:0e:77:89:23:10:44:c4:bd:96:
                    9d:f1:81:6d:cf:3d:37:ec:b3:07:16:4a:30:5b:66:
                    e0:25:72:99:a4:57:05:59:b6:c4:5e:a4:e8:83:bf:
                    f2:7a:8c:b3:eb:ee:2a:f3:d7:e0:b4:c0:ea:00:a6:
                    a3:00:ce:31:35:5c:4b:74:b5:f2:bb:9f:34:e3:a4:
                    34:18:31:ec:71:45:3e:f4:ca:5c:0e:b8:2a:b0:e8:
                    fa:e8:42:4b:c0:31:9f:88:79:3a:eb:19:36:71:01:
                    d7:1c:6f:a1:9a:aa:c0:73:f8:4b:c8:13:d0:ae:f5:
                    e8:74:a5:c2:67:a2:e3:b8:5f:8a:4c:78:f5:9f:86:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.152.244.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201938

    Signature Algorithm: sha256WithRSAEncryption
         0e:1b:90:d8:1d:86:3e:c2:f5:87:57:84:c0:2b:08:d9:02:ab:
         e6:67:40:f8:d0:db:72:5b:4a:99:1d:fb:32:3a:a2:e6:68:32:
         a0:19:d8:c2:86:ce:a3:e5:96:3d:b7:65:aa:da:bf:f0:5b:18:
         87:c2:95:27:c9:4f:46:b8:50:ba:e1:91:87:56:e8:db:2a:58:
         0b:4d:cb:da:b2:1a:a3:79:e7:bf:84:7e:d6:b2:a0:ba:9a:94:
         66:65:70:57:9f:fe:ef:57:c6:f4:4a:4c:9b:ac:ea:05:5b:be:
         a2:be:0a:f0:36:da:61:b8:8c:65:9b:6c:bc:e9:0a:f5:f7:8c:
         cf:a5:64:07:31:d2:1a:aa:af:ca:96:04:51:fc:03:8f:b1:2d:
         34:a2:24:f3:f3:7e:a8:9f:54:0a:cd:c8:dc:60:1a:66:65:4d:
         9c:51:bb:15:9d:e5:fd:14:ac:7e:7e:7d:cf:5e:3c:be:29:11:
         12:c3:4e:ec:3c:17:ce:50:48:0c:3f:94:7f:e4:bd:3d:db:e1:
         c1:55:0f:a9:1b:f5:03:8c:2d:17:5c:39:66:33:6b:af:0e:bc:
         45:71:46:9a:6c:3b:b5:d3:e9:79:6a:17:e4:85:e6:9e:68:dc:
         92:75:8c:35:e1:ae:e9:92:38:60:51:5f:01:f7:32:79:26:85:
         96:f2:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:24:39 2026 by rpki-client