This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
File:                     uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer (raw, json)
Hash identifier:          wQlh233rvozXoBZM3Qjn1AeS+08O5O5LGjmInS4Mzic=
Subject key identifier:   BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CECCA4733432F82B6F0C45AA65DEDE4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:17:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 49990
                          IP: 193.104.73.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:ca:47:33:43:2f:82:b6:f0:c4:5a:a6:5d:ed:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb24311c1ec0673c50497924c202a13d212659b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:fa:a1:1d:18:34:3b:0a:9f:cb:ad:bd:96:
                    b3:2b:ce:22:e7:9e:8c:3f:b6:31:b2:3b:76:d1:09:
                    a1:b3:f9:3d:d6:4e:2e:61:b8:23:1d:ec:6d:a3:56:
                    1e:57:83:3d:ad:c6:09:56:91:5b:56:c6:1b:0f:f1:
                    e8:c8:0f:06:72:63:5a:b8:fe:db:16:96:d5:5b:30:
                    94:6a:ba:98:98:58:92:af:21:02:aa:ee:7d:5e:aa:
                    d2:d6:b8:d5:20:6c:67:1a:12:86:96:fe:1e:5c:ac:
                    a5:b6:08:3b:ff:3a:ec:ff:1c:d7:e0:b4:bb:00:07:
                    15:ca:91:06:82:d1:1a:0d:19:98:b7:4a:62:ca:d4:
                    85:f6:ac:4d:1c:4b:68:ef:a2:2a:a0:83:97:a5:96:
                    ed:53:6f:ec:39:74:82:2b:45:68:c2:21:eb:4e:b7:
                    4b:61:25:11:1f:74:82:ca:b9:30:82:ef:da:a6:b2:
                    ef:8d:92:45:88:c9:7b:69:01:22:e6:16:8d:07:39:
                    d5:bf:e9:12:56:86:46:2c:19:64:03:ba:c4:15:38:
                    0d:96:af:5d:80:88:1c:1d:a1:fc:74:00:67:6d:43:
                    12:a8:0b:4e:2d:61:bb:21:21:54:84:08:72:30:f6:
                    b3:e8:14:f2:71:18:be:4b:98:56:ab:86:21:13:20:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.73.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49990

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:40:db:02:80:c5:9a:21:ef:e2:19:ce:ba:4e:17:cf:a6:
         55:00:9b:9f:28:60:26:f6:a8:5f:8d:c4:be:3c:5a:14:2b:4a:
         ab:ac:0e:d5:f0:46:7a:22:35:14:ae:1e:b0:34:ac:d4:8d:f0:
         dc:de:e7:b8:62:db:f7:fd:26:d0:c9:4d:e3:ef:e7:03:28:6d:
         4b:5a:23:ce:6e:ec:09:05:e6:b8:dc:dc:ce:79:a5:ee:f9:a1:
         cc:2f:47:23:0b:b7:ff:92:6e:eb:41:80:0f:3f:07:11:d6:99:
         76:de:b0:91:59:cd:85:78:7b:56:6f:0e:15:fb:06:12:41:ae:
         72:9b:78:8d:3a:35:e5:6a:bb:f3:1d:4b:e9:dc:72:0e:3e:ef:
         0b:c9:22:11:4e:61:4c:66:a1:5a:6a:67:62:7c:d1:eb:ad:59:
         ff:78:47:a0:49:29:34:d7:52:c9:14:de:e8:ad:cc:c8:50:cc:
         aa:cd:01:52:33:bd:0c:63:a7:51:c2:15:7f:7d:7c:14:fd:95:
         1f:4b:78:12:60:c9:0a:41:b3:23:1b:f4:14:6d:49:d9:7d:cc:
         d6:b1:c9:94:43:d5:01:05:43:25:48:8c:20:2c:1f:45:ac:3c:
         aa:48:4c:2d:6d:c0:52:32:05:b0:1b:dd:91:7e:ab:bb:5f:38:
         5a:77:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:13:01 2026 by rpki-client