This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
File:                     uzYogf_jYlMUAGCLYyi7Et-hYIE.cer (raw, json)
Hash identifier:          II3BWroVr+jZUK9auk+nAX18UeIwPer6TbLEWTXUB0U=
Subject key identifier:   BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E3786A81227F31554E632336132EF5E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:18:46 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 44547
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:86:a8:12:27:f3:15:54:e6:32:33:61:32:ef:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb362881ffe362531400608b6328bb12dfa16081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:d4:fb:92:5d:d5:c7:a4:1c:0d:53:06:d6:
                    c9:79:08:64:10:83:92:65:54:59:60:76:ac:cb:2d:
                    a5:2f:a9:78:c7:24:3c:5e:70:f6:fe:5b:ae:da:04:
                    87:fc:3c:da:71:9e:3a:61:3c:16:00:de:b6:c8:f7:
                    65:27:48:d0:44:e5:af:49:d5:65:78:2b:3e:22:c8:
                    6d:50:9d:49:ad:46:42:49:1b:53:03:c6:f6:9a:aa:
                    0c:53:e5:1e:b8:da:d3:ff:76:bf:20:54:f5:8e:b9:
                    a7:81:4d:dc:ab:ac:99:73:f4:78:f4:69:89:a0:ce:
                    d3:20:c5:fb:f6:5b:5c:c0:b8:87:c4:43:20:63:77:
                    e9:e3:73:c2:f9:38:ba:ad:00:2e:4e:9e:13:f6:07:
                    ca:b6:2f:1e:18:2c:8a:95:f2:bd:72:a6:be:62:b0:
                    5f:4a:c7:63:c5:97:f8:fc:15:82:8b:10:ce:79:35:
                    a6:5f:69:c4:2c:75:da:c1:b9:10:79:18:55:a3:58:
                    38:e4:31:44:f4:b1:f8:60:e2:42:61:5a:69:5f:49:
                    ed:60:fd:28:b4:06:72:12:f5:15:87:f2:88:0f:fc:
                    5d:fd:d9:bc:f0:97:86:37:24:4d:93:44:19:40:67:
                    c8:c9:81:6e:aa:b0:48:1e:9e:25:09:43:f3:ef:97:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44547

    Signature Algorithm: sha256WithRSAEncryption
         88:76:70:16:fd:0c:65:b2:49:4d:c9:2e:fe:9c:43:14:84:04:
         98:c5:65:6f:da:07:f8:49:28:fc:7e:b1:40:85:b7:92:c0:d3:
         8e:3a:ac:69:d9:6f:39:7a:17:30:3f:76:f9:e2:06:ce:b8:ba:
         15:11:39:95:08:c7:2b:02:0c:39:15:f3:82:bb:d8:79:62:68:
         bc:55:83:5a:7a:f6:93:ee:e1:d8:76:9e:bc:a6:b3:66:35:03:
         5b:81:bc:4b:e1:56:8e:09:f0:57:eb:ea:79:2e:0c:82:8b:3f:
         e8:85:f8:09:8b:2c:d5:52:a6:46:24:f6:e7:09:32:d8:a9:6d:
         02:39:ae:c4:72:84:da:45:75:b6:be:6b:09:6a:ae:77:a1:1a:
         70:29:0c:95:69:5a:ce:9d:3d:6b:f3:4c:ba:71:f7:7b:fc:c4:
         38:31:00:05:08:b9:11:46:ed:48:4f:07:27:85:21:13:98:5b:
         be:c1:91:77:52:98:02:c9:64:b0:51:92:c3:25:ba:ed:df:37:
         22:29:ec:12:83:86:3d:5f:e5:f3:69:c3:df:37:fc:ea:f4:fe:
         e6:1a:19:13:c0:da:84:b5:af:21:11:1b:c3:10:28:03:bc:01:
         12:60:46:0d:b4:c9:aa:e7:91:80:8c:7c:e8:bb:8e:ad:05:ab:
         3e:39:38:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----