This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
File:                     sVS0YRuM6ChydbxHppr6N4tBQL8.cer (raw, json)
Hash identifier:          JsNu8G4nDVOt+INbWiejy0cLoUfLr/W8O4qxx4nMY/4=
Subject key identifier:   B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C80A71060EF8B751D403987D75EAFCA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 02:19:24 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214683
                          IP: 176.112.91.0/24
                          IP: 2001:67c:e48::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:a7:10:60:ef:8b:75:1d:40:39:87:d7:5e:af:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:44:30:5f:67:d1:33:d9:b3:8b:53:29:f4:
                    dc:69:e1:12:2b:b1:bf:f7:d9:5f:de:33:4f:22:f2:
                    03:02:3c:3d:b0:69:2c:38:8e:2f:28:51:67:ec:07:
                    06:5d:2b:12:ab:5c:eb:23:5a:28:4b:16:06:f7:34:
                    6b:99:c1:e5:59:21:fc:99:88:1d:d2:4a:fc:16:18:
                    c5:fa:e2:df:8a:d1:5d:8f:36:a0:51:ee:fe:16:c8:
                    4c:7b:1f:b1:ab:16:f2:de:95:d3:89:4f:ac:12:9b:
                    88:7f:dc:48:de:df:b6:84:d1:cd:ef:51:fd:76:80:
                    f7:bd:75:31:99:5a:ab:d2:b9:c3:33:1a:36:af:74:
                    54:ea:6d:61:9f:1a:c9:5d:bb:4f:25:89:a8:5c:9b:
                    42:12:23:30:fe:13:46:68:82:4b:00:47:63:80:cf:
                    7e:53:14:1a:5f:9a:7a:6e:9f:42:ad:2d:00:d9:3c:
                    ea:b8:5d:4b:2b:f8:1c:f3:01:51:92:2a:a0:e3:bb:
                    e3:cb:c5:eb:8d:91:ed:1a:84:da:15:9d:ad:80:e4:
                    79:ea:6b:a1:ae:e6:10:74:bb:0d:fb:cd:d2:24:b5:
                    6b:74:0e:80:d7:14:28:b2:98:10:b8:dd:28:4d:39:
                    9a:4a:e1:69:93:86:5d:57:16:43:d8:53:90:d2:6d:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.112.91.0/24
                IPv6:
                  2001:67c:e48::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214683

    Signature Algorithm: sha256WithRSAEncryption
         a1:43:fc:0d:16:9a:01:3a:a4:7b:cf:0e:25:9e:67:3e:6e:b0:
         d3:2a:5b:dc:d0:0b:3c:59:44:68:cb:a3:79:e4:b7:4c:ef:1e:
         61:33:32:4f:9d:f8:18:8b:2e:2c:8a:af:58:0a:15:24:a9:5c:
         af:bf:8d:ad:d5:df:6e:68:41:6a:91:ef:ed:07:63:04:d7:54:
         3c:92:bc:54:da:1e:8b:b7:04:c0:83:9b:3a:ae:6d:6c:73:f7:
         3d:a6:7c:ab:29:04:2a:12:06:cd:bb:a2:55:a1:4a:65:8c:18:
         44:9b:b8:c6:11:5b:81:06:9c:c1:3e:ec:ba:a2:12:2e:b6:53:
         34:13:56:31:7f:a0:8c:fe:42:cf:54:dc:28:88:4e:87:a8:56:
         a1:60:65:a1:7b:1b:0e:8b:dd:e9:50:02:44:8d:7e:47:be:b7:
         b7:1a:72:5b:b6:ad:6b:14:ab:cc:06:85:ea:e2:78:17:da:c1:
         8e:6a:df:de:ea:69:88:38:4c:5b:34:99:a1:1f:a5:69:70:a8:
         d2:c2:77:3a:ab:34:c5:a5:16:16:66:0a:0e:0f:7a:b7:03:79:
         c1:15:12:ae:4e:47:e8:bc:91:ab:d8:09:be:63:2b:6f:d6:94:
         fa:27:cd:1d:6a:97:d1:40:d0:46:a3:f4:e0:f5:b6:3d:bc:77:
         94:06:4e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:24:09 2026 by rpki-client