This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q6N0OU_hCA1kohnX01pJRi6Omaw.cer
File:                     q6N0OU_hCA1kohnX01pJRi6Omaw.cer (raw, json)
Hash identifier:          wvQqcY/2pdTcXAlEquC7sKza13jNc/sYfwt9vk0jeeY=
Subject key identifier:   AB:A3:74:39:4F:E1:08:0D:64:A2:19:D7:D3:5A:49:46:2E:8E:99:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F8520AE6BDB3EC1A0AAA9CC1903A3EB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/q6N0OU_hCA1kohnX01pJRi6Omaw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:23:09 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 56539
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:20:ae:6b:db:3e:c1:a0:aa:a9:cc:19:03:a3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:23:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aba374394fe1080d64a219d7d35a49462e8e99ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:45:b2:4d:1b:19:d8:fe:7f:42:4e:cb:cc:
                    d9:9a:fe:cf:3b:9c:9e:d2:07:b6:4b:32:f0:c3:99:
                    9a:d4:71:6b:23:26:fe:4b:4a:a7:bf:a0:e2:6b:f6:
                    ca:6c:de:46:41:79:4c:81:d4:c7:57:1d:50:d3:9b:
                    1f:e4:33:f4:3f:cf:8f:8e:a3:48:ff:d3:fb:31:c6:
                    2e:1c:6c:8e:aa:1c:cf:95:60:dd:86:1b:f6:0b:6c:
                    cd:e8:df:a7:06:70:41:d5:b6:a0:e3:68:26:d3:2e:
                    cd:89:ef:31:65:63:d5:7f:76:47:0c:fd:25:7c:bd:
                    eb:87:87:31:48:c2:aa:e7:88:72:08:8b:32:cc:68:
                    a0:c0:98:15:83:a9:fe:93:e8:7b:b6:37:50:ac:5d:
                    a2:97:fb:09:bf:61:d5:9b:09:7b:b2:d7:47:1c:ee:
                    16:7e:2e:cd:74:15:b2:f8:aa:d0:03:29:69:e6:31:
                    3a:e2:cb:66:63:d5:bb:f0:b6:f3:db:76:75:13:8a:
                    9c:9f:be:ee:88:6d:db:3a:4b:64:5f:90:03:c8:48:
                    d0:c9:db:2d:9d:b4:d0:ed:6c:1e:3f:bd:73:93:24:
                    5c:32:ba:8e:0c:f8:57:fc:fc:d3:30:a7:a3:f9:b1:
                    a5:7b:c3:f1:c1:58:b7:74:e4:b3:7d:97:48:b6:f5:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:74:39:4F:E1:08:0D:64:A2:19:D7:D3:5A:49:46:2E:8E:99:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/q6N0OU_hCA1kohnX01pJRi6Omaw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56539

    Signature Algorithm: sha256WithRSAEncryption
         77:50:a6:11:26:9a:1d:0c:07:f0:81:2b:39:a6:1c:4a:e8:e1:
         ba:02:17:d6:ab:3f:c7:3d:f7:9f:b7:20:58:02:9a:d1:7c:1e:
         d5:95:7f:de:87:94:2f:a0:de:58:f7:54:71:b7:1f:be:ff:e1:
         3b:e8:11:56:00:67:5f:a3:86:eb:19:49:92:d3:cc:86:b8:df:
         3b:e6:88:73:f1:1a:ff:0b:d7:5c:6a:d1:6d:1d:0f:cf:c0:d8:
         9f:b6:61:9b:62:7f:f5:c3:5f:a2:8a:5d:82:62:83:0d:05:99:
         de:2b:84:0b:c9:74:22:49:c3:4f:ec:8d:61:a3:b9:a1:90:17:
         0d:f7:d4:f1:ca:9d:e9:14:d2:3e:e0:db:d9:d4:ad:9b:a1:af:
         72:72:bd:60:8e:a8:0c:80:9e:43:b1:42:66:ec:62:c7:9e:ce:
         fa:bd:e9:c9:a0:c5:59:22:3a:9f:e4:af:69:21:55:06:14:8a:
         f5:0c:f6:89:96:6a:91:b2:61:3e:9c:25:d7:3a:53:3a:6a:66:
         03:7b:7e:b7:c5:d1:0d:bd:b8:5d:36:8e:0a:43:be:2e:17:d0:
         21:39:94:8d:b5:5e:c8:cf:37:a8:53:e6:c3:3a:2d:d2:e9:d0:
         60:d1:76:e2:74:a4:a0:b0:1b:84:bb:f2:c0:91:67:66:a1:cd:
         e9:d3:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----