This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uw-EN95rslGCGnpfuBETdvFwkCM.cer
File:                     uw-EN95rslGCGnpfuBETdvFwkCM.cer (raw, json)
Hash identifier:          Mnq/tNEIiAgleJYgwshpDQ5zNSw5es/3f52A9nGhPgA=
Subject key identifier:   BB:0F:84:37:DE:6B:B2:51:82:1A:7A:5F:B8:11:13:76:F1:70:90:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7952573FAB79202DBD31321B4BA179AC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 11:29:58 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 216324
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:52:57:3f:ab:79:20:2d:bd:31:32:1b:4b:a1:79:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:29:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb0f8437de6bb251821a7a5fb8111376f1709023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:56:2c:08:c6:42:22:2e:b5:52:2f:81:51:c0:
                    46:fd:72:2e:8c:06:dd:64:a6:c2:f7:eb:5c:13:ee:
                    1b:ec:c4:8f:d4:9a:ab:5c:02:07:ab:11:5a:0b:cf:
                    d1:1f:05:4f:71:c0:06:d6:ca:56:ec:81:87:da:81:
                    38:bc:dd:49:3f:f8:14:cb:b7:9a:8c:65:cd:01:3d:
                    e1:25:bb:d5:08:10:be:92:a0:58:1b:fe:aa:ae:7b:
                    00:cd:e4:29:43:16:42:e4:ef:96:f7:03:27:24:29:
                    c0:33:8c:f2:cf:6f:ac:b9:cf:be:1c:34:20:15:10:
                    e4:88:10:b0:52:2b:22:d5:e2:aa:6b:a4:d3:0b:99:
                    92:1a:e8:92:8e:cc:3f:33:af:3f:59:ba:63:a1:06:
                    fb:ef:51:b7:ee:74:86:28:6e:d3:02:68:02:8f:7c:
                    72:cd:aa:3a:5c:96:09:24:a6:14:4a:e0:b7:8f:d1:
                    b8:de:49:7f:32:2d:5d:ec:e2:30:f8:5a:f7:70:0d:
                    a8:bf:ca:e4:55:30:fd:4f:de:97:4c:c5:8c:ed:3c:
                    04:d5:c8:de:df:d2:34:8a:1d:a4:93:3d:b6:d8:0a:
                    3c:46:08:63:ac:8d:c3:3a:cb:b6:1c:a2:a4:d0:a7:
                    91:6e:db:3b:18:27:0d:f2:b1:14:4c:51:75:ae:be:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:84:37:DE:6B:B2:51:82:1A:7A:5F:B8:11:13:76:F1:70:90:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216324

    Signature Algorithm: sha256WithRSAEncryption
         8e:e0:30:81:4c:90:5e:e5:ab:6d:47:d0:e6:1a:15:06:58:75:
         d8:28:e9:ae:d7:c0:a5:e5:a3:47:22:59:f7:60:fb:b0:4a:31:
         b0:e2:b7:8c:b1:af:95:71:68:bf:5f:64:60:fc:ff:cc:68:af:
         ca:a0:5f:01:21:03:d8:6c:02:24:4c:28:39:d8:3c:c3:1b:cc:
         be:4f:73:7a:03:86:4d:5c:2c:8a:b7:85:ca:71:4a:cb:bb:ac:
         97:c3:67:5b:8e:f8:33:50:8e:c6:f9:0c:bc:3d:4c:9b:a2:ae:
         dd:f0:96:17:c2:cb:51:c5:b8:2c:af:22:63:1c:91:6d:57:fb:
         b5:d2:ea:d1:d6:70:c5:9b:d6:f9:6e:70:38:17:6e:63:93:57:
         e1:8d:ef:2e:04:28:bb:d8:c1:56:69:3f:96:7b:ab:16:6a:25:
         2e:a5:4c:62:a8:e7:78:89:46:d2:98:48:57:16:c6:f8:a2:50:
         9a:4c:c1:94:8e:1c:2b:87:e0:5a:9e:ee:b9:72:d6:b3:02:83:
         07:a9:99:6b:2f:38:42:cb:cf:3e:bc:79:b6:15:a8:2e:2a:50:
         8c:41:05:91:3d:17:f7:f1:72:8d:37:ce:38:ec:5a:49:44:f3:
         5b:0e:5d:aa:44:a2:d6:97:95:42:96:2f:67:45:9f:6f:f9:dc:
         03:4d:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:46:49 2026 by rpki-client