This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
File:                     se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer (raw, json)
Hash identifier:          b07WaDY3+Y8IT6kmjCq+qJCRayRHJIvwjV5aPBhCn5M=
Subject key identifier:   B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B797F4516D1B5769EADD852FBF87EC1AE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 12:19:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 57929
                          AS: 199603
                          IP: 37.46.88.0/21
                          IP: 2a00:71c0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:45:16:d1:b5:76:9e:ad:d8:52:fb:f8:7e:c1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:e9:1b:43:14:f1:58:73:05:55:08:13:7e:
                    da:dd:fa:d2:fb:96:e8:16:4f:ed:ba:96:dd:3c:7f:
                    98:f1:4a:57:74:2a:6d:95:b5:b9:48:0c:cb:91:8d:
                    2d:18:21:fd:07:ca:01:35:93:6c:12:93:83:2d:1e:
                    60:1a:f3:ac:4b:90:e2:a0:6c:67:95:ee:7c:f4:52:
                    b4:fb:5b:1d:fb:bd:b8:54:9b:41:0a:3f:c8:ec:fb:
                    56:94:ee:d7:5a:91:3a:83:af:44:9a:1f:d9:e7:1a:
                    0e:92:70:44:1e:b1:f3:82:cc:7e:fc:45:e9:83:78:
                    19:7f:65:54:ce:ee:ea:74:69:45:db:c7:52:fa:8e:
                    61:aa:72:59:12:b2:69:7e:d0:1c:0f:12:cb:5f:4a:
                    e7:3e:19:04:08:1a:7f:62:be:b6:67:18:26:37:54:
                    42:77:e6:93:50:f1:49:2c:3c:11:a9:70:27:f0:87:
                    fa:cc:5e:20:d6:d6:a5:36:14:f3:ca:6d:71:72:2b:
                    bd:4d:b1:fb:e5:26:44:6e:27:d1:10:b7:32:65:5b:
                    06:3e:03:ca:4e:5b:ae:15:96:f9:f2:ea:d7:8e:e5:
                    d8:d4:3f:b6:85:ad:6a:f2:45:36:f7:44:47:73:65:
                    25:d3:bd:cb:0f:7b:79:f9:1a:98:41:84:e4:5e:14:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.46.88.0/21
                IPv6:
                  2a00:71c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57929
                  199603

    Signature Algorithm: sha256WithRSAEncryption
         8d:6e:9e:60:3e:b2:72:42:aa:88:26:14:54:9e:a9:e4:c8:c9:
         55:74:ed:a6:72:be:38:02:08:93:1d:9e:43:17:c8:68:97:87:
         57:d0:82:1b:89:a6:b8:a7:16:92:97:c7:e3:66:f9:af:89:ae:
         1b:5a:4b:27:b7:2f:11:7b:f8:87:c1:2d:66:fc:09:fa:c6:f6:
         89:5a:63:d5:9a:6d:e8:25:90:a6:74:b1:89:57:c7:e8:3c:b1:
         89:dc:7e:01:e0:fe:d4:22:4e:e8:c9:3b:c6:ec:a1:de:45:9e:
         79:bf:42:d1:22:5f:48:b8:56:92:a3:d8:70:3b:89:a9:6a:20:
         bd:31:44:51:dd:ad:1a:9f:a0:c9:91:e8:c0:fc:cb:6a:55:77:
         52:f0:c8:13:f0:17:97:5d:85:e6:5b:a5:85:d6:80:02:27:e4:
         3d:7a:33:72:2a:e6:80:ba:26:4c:da:ad:cd:c5:ea:3e:f6:f6:
         09:a4:87:67:e9:4b:22:1d:ba:31:f7:61:22:90:5e:67:3b:ae:
         fb:a0:79:b5:0b:db:fd:44:fe:3b:d1:be:74:02:74:cf:02:b9:
         68:d4:b9:d5:60:e3:43:97:87:ed:a9:b3:f7:1a:eb:88:59:81:
         dd:0d:38:15:bc:ab:47:d0:ca:67:e4:bc:df:bd:08:eb:68:6f:
         fe:cc:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:11:26 2026 by rpki-client