This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
File:                     rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer (raw, json)
Hash identifier:          wjeTdfvLBcfi01j4QDfGsEimW5/cWuIUNe+jEl4KNR8=
Subject key identifier:   AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7FF2B62466A6BEB6BF269E545B80035A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 18:22:51 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 60896
                          IP: 185.24.80.0/22
                          IP: 2a00:7220::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:b6:24:66:a6:be:b6:bf:26:9e:54:5b:80:03:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 18:22:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:7f:06:c9:47:34:eb:f0:da:6c:1a:91:43:
                    b1:b3:5a:19:b3:d2:d8:06:77:bd:a7:77:cd:40:87:
                    e9:7e:a2:6a:21:4c:fa:09:f0:56:13:40:2c:07:24:
                    14:be:1a:62:78:c3:3e:31:1c:53:4b:63:3a:7b:50:
                    0b:46:61:6f:ea:14:b2:54:fc:9a:26:ff:7a:0e:80:
                    9b:10:32:45:d7:d0:7d:9e:02:12:48:c2:68:51:b4:
                    38:a6:db:fa:24:e2:6b:e2:4b:ce:ea:16:bd:a6:b1:
                    d3:f0:80:57:c4:a0:52:28:57:29:74:01:9b:95:4f:
                    d0:a2:79:fd:84:ee:51:b6:a7:ef:f8:51:c9:26:f5:
                    07:68:48:c9:33:e1:7f:70:78:b1:a5:01:02:b4:52:
                    bf:07:03:8c:a9:1b:ee:05:73:71:34:52:15:34:3e:
                    80:59:d9:47:46:34:f4:93:98:1a:91:cf:28:9d:b2:
                    15:67:33:a1:b6:b1:2e:67:f9:e5:74:4a:ed:8f:bd:
                    3d:a0:5b:36:d8:48:18:97:35:c0:bd:0c:54:cf:c5:
                    37:03:b7:1f:c3:6d:d5:53:60:4e:d9:b5:e5:d7:7c:
                    6b:06:7b:83:4c:62:29:43:32:fc:b4:d2:1d:42:ac:
                    8f:fe:1a:5b:f5:68:0b:07:a5:19:09:ae:3b:1b:d2:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.24.80.0/22
                IPv6:
                  2a00:7220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60896

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:4c:56:a8:42:d2:9e:f8:11:09:ef:ce:3b:d3:ab:ac:7e:
         5e:82:b0:12:a9:1d:f7:c4:27:aa:3e:e3:4c:56:96:49:ef:65:
         30:83:7b:e0:30:c6:29:ea:f6:67:de:ac:1c:ff:43:24:66:c9:
         9c:e8:bc:65:4d:56:11:09:12:45:3e:7a:70:65:8d:b4:8c:4c:
         84:ea:6c:1a:08:0a:76:8a:2b:5c:3c:e1:64:be:82:fc:06:a1:
         96:d6:c2:35:be:f3:d7:6f:c0:9f:95:76:86:0e:8c:6a:a8:b9:
         20:f7:9c:f3:16:25:53:65:5c:c9:01:b1:84:56:cf:5a:87:98:
         9b:46:4a:d4:f6:f3:ca:c5:62:59:eb:63:e5:6f:6b:2b:5b:f1:
         b4:10:fd:4f:b4:bd:b1:28:51:d6:2b:a9:85:93:ad:c6:3f:b4:
         ce:97:57:77:5c:05:0f:76:21:1c:ae:fc:06:b6:30:ce:27:99:
         9b:93:41:ea:69:1a:36:8b:43:99:73:85:fa:a4:47:3e:dd:93:
         02:86:18:40:c6:1c:57:c7:6b:b2:70:03:e7:8d:fa:05:bc:e6:
         48:9f:b0:e8:ab:64:93:a6:eb:b3:05:b6:03:bc:bf:c2:ab:10:
         32:02:6d:4f:d4:74:ab:98:97:77:f7:86:72:d2:a2:89:9c:ca:
         12:c0:50:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----