This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
File:                     sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer (raw, json)
Hash identifier:          QZUbI1zZSMur8BSdOCYtoPB0URNpaFB9fEBiOxfsblU=
Subject key identifier:   B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CEE3C12B45B7CA5799711F962CDD818
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:19:06 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209348
                          IP: 85.208.228.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:3c:12:b4:5b:7c:a5:79:97:11:f9:62:cd:d8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:19:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b01a59d0a61aa6174438988cc83598dbfea5a998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:f0:78:7c:d8:1a:b5:4c:64:32:b0:6f:28:
                    a3:62:aa:d6:f5:32:e8:75:b9:d1:5c:04:f5:83:5e:
                    ae:42:92:98:1f:a4:5f:17:1d:e0:d9:17:ce:b7:41:
                    15:4c:7a:be:82:a1:94:c4:54:e9:b5:5f:98:06:99:
                    9d:2a:95:93:32:0a:a3:35:a9:1b:88:6e:af:57:92:
                    67:4e:f8:22:37:da:4c:03:c3:c5:8f:de:8c:1f:2d:
                    74:82:14:c9:80:e3:a2:20:45:60:ab:65:0f:62:19:
                    9a:cf:4f:3c:6a:ef:8f:9a:55:0c:09:25:84:46:b1:
                    c1:6a:e4:64:69:1c:52:19:6c:1e:a2:7b:92:21:a0:
                    df:98:01:d3:c2:bb:2e:d2:12:b4:66:63:ad:c6:8e:
                    cf:30:2a:76:a2:7d:67:4a:ff:98:6f:b4:53:31:b8:
                    37:ce:fd:ea:78:43:f0:84:8e:09:d8:df:d9:08:15:
                    6b:76:d5:38:3b:01:f2:5b:df:c9:3a:9a:c6:4f:e4:
                    6c:96:9b:05:11:b8:90:75:4e:87:e6:19:11:5c:fa:
                    37:01:a9:25:3e:7d:fa:89:7a:90:de:6c:9f:91:10:
                    2e:a7:c8:70:e3:f7:94:3f:8c:5f:39:47:e3:11:af:
                    10:47:66:bc:a6:5e:98:df:b5:d0:f1:d8:15:4d:af:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.228.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209348

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:82:f0:a4:ba:f3:4b:50:36:49:e5:3a:f1:62:12:4b:e9:
         86:dd:dc:28:a4:44:ba:97:8e:5c:da:4e:f7:86:37:18:a3:06:
         a8:71:9c:b7:f1:d3:a5:b6:b4:2f:65:61:15:8b:98:cc:49:fc:
         0b:cd:0e:69:e8:00:16:48:43:a0:eb:b7:b3:cd:f1:a5:8b:12:
         11:d1:ca:ae:f1:1b:79:0e:47:98:3e:15:16:75:d2:5b:28:da:
         84:86:75:b2:1a:1c:80:b7:36:6d:eb:38:8b:25:61:e5:49:45:
         6a:0b:08:14:57:4c:d1:67:dc:08:30:60:49:53:52:09:6f:46:
         cb:ae:d3:33:d1:3e:b5:54:62:45:79:83:4b:ed:ba:40:80:21:
         27:c8:26:bc:1a:90:23:57:15:51:01:68:7a:58:3c:a2:2b:ad:
         35:7d:25:24:31:8a:33:48:88:34:d7:4c:50:83:6c:60:65:ad:
         90:f6:60:52:08:b0:5d:a8:a0:02:1e:6b:4f:be:03:79:08:01:
         1b:ba:fb:46:03:6d:7c:fc:d6:d1:22:aa:a9:85:33:cb:86:ae:
         0e:ea:a4:6c:7b:ae:99:f8:06:86:b8:99:73:5f:ff:59:d7:3a:
         8a:97:da:54:97:6f:82:e8:ba:0a:7b:e3:a0:84:51:9b:10:20:
         c5:d4:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----