This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
File:                     re6JwT1t5zqJRAS_fq-e5eQN6jM.cer (raw, json)
Hash identifier:          t40YhkdMx1IFEKlz0Fh/XdRl9VM3V/9gS055eRUTRHY=
Subject key identifier:   AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C6DE81484DA6446BCD269B51ADFCED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:00 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 200254
                          IP: 45.131.8.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:de:81:48:4d:a6:44:6b:cd:26:9b:51:ad:fc:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:95:67:3d:a8:bc:29:3d:a8:70:4b:71:83:
                    86:5e:f4:8c:af:26:91:5f:7c:b0:68:5e:bc:e1:ae:
                    9b:84:d7:76:04:ce:19:4b:4c:a3:00:d2:c3:57:83:
                    6a:77:4f:f4:71:68:21:7c:f6:ca:32:07:27:89:93:
                    50:92:6b:23:fe:82:bb:ff:4e:f9:09:65:bd:fc:e2:
                    db:5f:c6:be:9c:04:fe:1d:dd:25:71:e2:26:5a:94:
                    b1:3d:69:2f:aa:af:8e:72:44:c5:78:24:2d:ba:db:
                    90:aa:3a:4c:37:07:95:b5:b1:a9:43:da:ed:be:67:
                    1f:07:56:29:97:c4:34:e7:07:c5:53:3c:28:01:51:
                    11:e8:86:51:59:b2:61:a4:e6:23:8b:52:0c:32:08:
                    83:07:fe:ab:58:05:f6:40:3f:aa:15:c0:2d:07:b9:
                    b7:be:ca:c2:14:bd:8b:34:3d:3f:ac:8c:bb:38:f5:
                    50:df:52:6a:9f:7f:40:2d:e0:36:22:37:c6:c4:4a:
                    02:e2:12:d3:85:db:3c:06:38:1c:86:11:b7:73:50:
                    37:44:e6:dd:8e:1e:d8:b9:46:5d:d2:b0:87:43:89:
                    07:93:db:6f:8c:12:d4:82:d7:56:50:26:ad:66:37:
                    47:29:b1:09:c0:93:c2:85:1a:e9:f6:b2:f4:1c:f0:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.8.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200254

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:84:cd:9e:a2:c6:ea:95:4c:8b:6b:20:1d:ed:5e:dd:d4:
         22:ec:18:c8:af:75:d3:9c:3c:6c:9f:0e:ff:1b:5c:a9:28:b9:
         62:5d:f5:d1:e9:d5:1c:52:f1:f6:74:d4:88:94:d1:98:41:da:
         b0:05:8d:41:c0:ce:cd:18:a0:17:c5:50:15:e5:1c:2d:be:01:
         f1:80:0c:22:1f:30:07:4b:93:58:41:10:58:56:ad:16:cf:72:
         78:ed:27:02:1b:9e:8e:7e:62:d9:83:ea:67:82:96:3b:45:72:
         a8:37:62:4b:02:b0:4c:76:80:bc:36:30:77:a8:d8:8d:a7:48:
         03:6d:b0:fa:cb:60:97:0d:18:b7:bc:b3:2b:8f:f3:64:e5:84:
         3f:f2:32:f9:c0:89:69:e7:95:81:29:b0:17:1c:d4:61:e6:60:
         90:32:6a:56:08:00:e7:b2:0c:48:3e:ba:ea:75:75:df:7c:bc:
         7d:47:55:e6:53:ae:62:1f:69:21:37:78:87:21:3d:20:f3:b5:
         12:2a:5a:6e:62:55:71:fa:d7:e9:ae:12:f9:d9:a3:7d:83:8e:
         16:9b:a7:7f:a0:93:f5:09:cb:22:52:55:e2:d9:23:0c:f6:e7:
         ba:19:c6:59:5a:de:d8:bc:07:5c:52:6d:e0:a5:a5:e0:8f:b5:
         11:e1:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:09 2026 by rpki-client