This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer (raw, json)
Hash identifier:          O11qR5sgFCDgTvLugDdWO4ez+JqJBjiyKmUPrSPP2jA=
Subject key identifier:   BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B797EDC988A561F97D267DB7F97713FD5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 12:18:35 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 210036
                          IP: 193.36.104.0/22
                          IP: 2a0d:d740::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:dc:98:8a:56:1f:97:d2:67:db:7f:97:71:3f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:7a:f2:fd:0d:ea:37:be:80:81:b0:39:46:
                    6e:92:15:3c:45:aa:fb:0d:36:e5:10:80:84:73:76:
                    92:51:56:07:a4:66:63:5f:91:a1:57:49:da:2c:4f:
                    31:ad:fb:e4:e8:7d:fd:14:dc:74:69:5b:38:33:81:
                    45:a4:24:18:3f:75:fd:85:1e:c0:d6:fc:4f:df:70:
                    f4:f2:18:18:33:f8:7e:e1:9b:63:3b:a9:ac:0b:60:
                    4c:67:d4:00:81:ef:c6:7c:f2:4c:3d:34:cc:f3:77:
                    29:8e:03:f3:fb:b0:47:7c:4f:18:e4:da:aa:db:78:
                    ec:ef:da:35:80:7b:fa:d1:85:08:13:48:e1:d7:81:
                    c5:f4:99:36:ba:62:50:fa:80:30:2c:3a:49:7c:c6:
                    7f:77:c8:b9:32:30:99:6b:78:98:03:0c:22:17:ec:
                    d3:5f:fd:6b:0b:67:d0:d1:e2:74:22:e3:72:3f:06:
                    0a:72:f4:0d:f8:04:96:3c:26:b9:14:fb:4a:87:57:
                    dc:5e:db:21:2f:99:d5:5e:4d:6f:19:64:23:25:7f:
                    4c:2c:6e:f6:50:59:83:a3:0e:0a:9b:67:f3:81:8a:
                    f2:e9:25:ee:3f:ea:bc:fa:75:60:6e:8b:c0:74:e7:
                    44:cf:bb:a8:b1:2c:d0:66:48:b8:4d:71:ae:bf:0a:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.104.0/22
                IPv6:
                  2a0d:d740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210036

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:06:a6:79:ed:25:f9:f9:1d:60:3e:7d:d6:ca:48:6a:80:
         bc:82:6c:b8:08:3f:09:2d:e7:a1:6e:ad:cf:d1:d5:23:5b:96:
         90:15:96:45:a2:a3:67:65:d0:35:39:44:6b:33:a2:79:ad:cc:
         57:2d:c1:ce:4c:a9:63:5e:3d:f6:c0:83:9f:2d:2f:a1:b4:f5:
         4a:eb:46:ad:01:eb:2d:c5:d4:b4:f6:4d:64:c2:66:15:bc:1f:
         4a:77:ea:91:11:24:fa:54:b9:69:1c:7b:00:e9:16:26:c8:70:
         86:22:97:90:e3:2e:ca:5d:8a:8b:73:49:c5:8e:49:d5:f7:bd:
         2d:f4:84:2a:f9:ba:f3:e4:27:83:42:ff:b9:08:87:9b:86:73:
         60:7b:1a:a4:00:c3:4d:00:15:4b:a0:85:28:32:b9:e9:61:7f:
         f4:dc:99:e8:7d:af:d3:0b:29:b5:2a:8d:fd:c1:a5:6c:0f:2f:
         da:e2:d6:63:cc:2b:f7:f5:78:4b:e7:cf:e5:5e:42:ef:ed:91:
         04:07:1d:2e:41:6e:53:0f:41:e6:fa:f0:23:3b:31:c3:4a:f9:
         a4:c7:3e:c4:ff:6e:5b:be:36:5c:9b:a5:56:25:ff:9a:be:74:
         aa:bf:d8:e7:98:e1:5b:21:56:80:77:37:2c:b6:86:40:a0:bb:
         e2:cf:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----