This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
File:                     qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer (raw, json)
Hash identifier:          gmWD+nUMCnf7CNqhOc30VELWlsqUVM4xnZFvcWZ+fo0=
Subject key identifier:   A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA4CF57FAEAF1DCD0E44393F7007998
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:19:17 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 212279
                          AS: 212425
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:cf:57:fa:ea:f1:dc:d0:e4:43:93:f7:00:79:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:19:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:66:ac:ce:4f:1b:04:3f:81:bf:2b:69:c2:
                    8c:3d:2e:90:f2:e9:03:4c:fd:3c:cd:9c:ab:5c:c5:
                    bc:00:eb:96:9a:81:26:37:87:1b:1b:22:9e:9f:e9:
                    c8:8a:f8:24:e1:fe:42:df:cb:eb:1e:72:a1:cf:b4:
                    d6:59:a6:ad:77:0d:21:fe:3b:79:00:aa:83:e1:1a:
                    e6:ef:e9:0c:d6:4e:13:28:96:10:af:d8:a8:9d:89:
                    85:32:9b:62:2f:90:88:c7:b3:f1:30:f3:31:de:b7:
                    7f:80:77:88:b0:74:84:94:9e:d9:6d:1f:76:be:c1:
                    13:d6:11:51:e8:1a:58:fe:ad:e2:cf:13:cd:d0:4c:
                    2f:53:31:f9:28:66:5f:ba:3b:fa:8d:b4:df:99:ac:
                    e5:1a:19:e9:73:e7:10:af:b9:a9:43:db:f3:dc:da:
                    a2:4a:6c:a4:28:17:ec:65:90:84:c9:62:23:d0:46:
                    d1:e7:4d:7d:6a:ec:5b:d0:42:c8:5e:5c:d4:58:9d:
                    fa:4c:1c:2b:fe:ae:05:e1:87:6c:4e:cf:e1:ba:b2:
                    f0:4f:c1:ae:71:80:7e:c5:96:a9:23:b4:5c:f7:7f:
                    7c:f4:10:b1:70:c1:e4:fb:c4:5c:8b:d5:f1:7d:79:
                    45:61:10:b4:8a:cd:44:d0:a7:b4:41:d4:6b:c1:a7:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212279
                  212425

    Signature Algorithm: sha256WithRSAEncryption
         5a:c2:97:05:8a:62:13:cd:2b:1a:d9:9b:2a:cb:c5:35:a9:43:
         f1:84:45:66:f6:50:42:1a:e9:41:1c:b6:dc:5d:f4:c9:ad:d4:
         9b:48:cf:a7:d8:79:ed:41:f8:86:cb:3c:b1:6e:1f:c5:5d:f9:
         39:1f:32:f1:83:9f:67:1c:16:f1:ba:a6:35:77:1c:e8:6a:27:
         a6:1f:a3:34:97:d8:2e:47:0b:68:99:d3:14:52:f2:d4:da:61:
         09:9d:18:31:59:06:53:6d:b6:e1:ff:49:01:84:21:a3:0e:44:
         eb:94:56:d3:80:57:df:d2:8a:f3:6c:28:61:55:f7:5b:49:9a:
         4d:53:1a:eb:a1:3a:2e:a0:68:0e:ec:a7:32:9f:26:87:a8:61:
         fa:fe:0f:a1:f8:a7:d9:9f:a5:e2:68:fb:94:c8:1e:e5:f5:12:
         58:7d:8e:69:d8:c0:6a:7a:d5:f2:fc:67:73:27:07:8b:b1:e7:
         01:73:e6:e4:c9:d4:56:62:cb:e5:3d:5f:63:02:1f:21:5f:4a:
         1b:d1:e6:2f:58:de:01:d5:a5:44:0a:35:67:2e:21:f7:ed:c4:
         b9:8a:74:9c:cb:92:4e:87:70:15:7f:49:8b:28:95:72:3b:de:
         47:64:51:04:68:cf:1a:6b:71:50:e4:bc:8b:88:88:40:d2:31:
         6f:89:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:48 2026 by rpki-client