This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer
File:                     vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer (raw, json)
Hash identifier:          BAi8dbPGRGmqIj896VZFPvFXcINJ8ooan+08sPNDuqI=
Subject key identifier:   BC:40:38:04:A8:8B:D1:9D:ED:A0:4F:B9:35:41:BF:D0:D0:C6:54:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BF9FA6CE1E1A4E069E633D004B6B1963B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 26 Jan 2026 11:04:57 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.113.100.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:fa:6c:e1:e1:a4:e0:69:e6:33:d0:04:b6:b1:96:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 26 11:04:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc403804a88bd19deda04fb93541bfd0d0c65447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:a8:25:6c:fc:57:51:0e:9a:8c:de:33:8b:
                    c0:f9:f4:cf:2f:31:fa:90:a7:35:6e:74:6e:21:61:
                    ba:af:1a:d7:18:3e:4b:d4:19:ea:85:4d:2c:24:21:
                    68:56:24:34:e7:bf:13:12:21:8e:11:2a:1e:55:7e:
                    a5:d1:b8:a1:ed:f1:ad:49:3d:25:36:fb:f2:6f:9b:
                    73:5d:0c:63:e4:c6:7a:cc:0f:b8:2c:f0:5b:65:9e:
                    5c:79:a3:e4:38:33:18:91:00:e6:c0:8b:23:12:ed:
                    e7:f0:99:c9:9f:82:ef:b3:71:30:47:05:f4:93:3d:
                    7c:9d:74:60:c9:95:93:3d:62:44:1a:7d:d4:0a:ff:
                    c0:a7:83:4f:6e:d7:27:46:5f:d8:c7:a7:2a:8f:2c:
                    69:89:c8:b0:a8:02:70:ec:3b:9a:bd:77:c2:c7:de:
                    3b:2c:2e:9f:1e:ea:4e:55:61:7b:17:1f:7c:92:7c:
                    0b:24:77:a5:c8:f2:29:27:f1:ed:73:8d:bf:b0:61:
                    22:9c:b6:e8:54:25:5f:ec:d8:61:ad:b2:8b:a2:2e:
                    6f:ee:03:0c:c0:5d:95:35:f4:7e:01:91:45:a3:2f:
                    62:c2:02:3f:63:3b:bc:61:9a:22:dc:44:2f:71:94:
                    a1:1f:90:07:2d:43:0d:c0:21:b1:db:25:d0:09:a9:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:38:04:A8:8B:D1:9D:ED:A0:4F:B9:35:41:BF:D0:D0:C6:54:47
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:b6:27:12:e6:a2:97:d4:86:d5:c4:e5:03:20:01:80:15:
         74:f1:ef:4a:fb:f8:12:92:11:24:01:a0:20:ca:a9:11:de:be:
         80:8c:39:fb:ad:bd:25:b5:04:01:31:14:0f:24:86:fa:bc:14:
         3a:c7:0f:e5:e6:26:27:9d:35:2f:cb:74:08:31:af:ba:7a:c0:
         6a:30:a9:52:19:c3:a7:39:55:be:bd:ae:93:93:6a:dc:be:3d:
         55:ea:c0:c1:64:b3:1f:b6:ae:d6:76:56:d4:0b:88:bc:03:a2:
         59:68:3b:a4:a1:2c:2c:b3:a8:a9:d5:dc:38:4b:bb:55:92:2b:
         2d:ee:c3:bf:90:21:c0:6b:70:40:b5:a0:16:59:b9:25:71:15:
         b2:3e:d4:18:8f:1c:bb:db:95:86:52:07:61:53:51:ed:28:aa:
         71:eb:5f:b9:8d:5a:e6:39:d0:e7:97:8e:d1:06:18:f7:1c:83:
         ad:06:71:50:fd:99:10:96:ca:23:cf:73:7a:e3:9a:05:2b:fb:
         88:0d:ef:63:ae:96:79:d8:d8:29:cc:e0:80:5f:94:c6:5a:a2:
         10:cd:3e:35:b6:98:ca:39:24:58:eb:c3:ca:67:2f:68:b4:f0:
         9e:e6:a1:07:48:ad:65:db:74:18:4f:46:0f:9f:aa:bb:86:69:
         44:85:d2:79
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZv5+mzh4aTgaeYz0AS2sZY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTI2MTEwNDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzQwMzgwNGE4OGJkMTlkZWRhMDRmYjkzNTQxYmZkMGQwYzY1NDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpaoJWz8V1EOmozeM4vA+fTPLzH6
kKc1bnRuIWG6rxrXGD5L1BnqhU0sJCFoViQ0578TEiGOESoeVX6l0bih7fGtST0l
Nvvyb5tzXQxj5MZ6zA+4LPBbZZ5ceaPkODMYkQDmwIsjEu3n8JnJn4Lvs3EwRwX0
kz18nXRgyZWTPWJEGn3UCv/Ap4NPbtcnRl/Yx6cqjyxpiciwqAJw7DuavXfCx947
LC6fHupOVWF7Fx98knwLJHelyPIpJ/Htc42/sGEinLboVCVf7NhhrbKLoi5v7gMM
wF2VNfR+AZFFoy9iwgI/Yzu8YZoi3EQvcZShH5AHLUMNwCGx2yXQCal0iwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLxAOASoi9Gd7aBPuTVBv9DQxlRHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzhkZGJm
NS1mMDRhLTQ2MmUtYWU2OS1iNjJkNjUyMGEyMzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvOGRkYmY1
LWYwNGEtNDYyZS1hZTY5LWI2MmQ2NTIwYTIzNy8xL3ZFQTRCS2lMMFozdG9FLTVO
VUdfME5ER1ZFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwnFkMA0GCSqGSIb3DQEBCwUAA4IBAQCAfLYn
Euail9SG1cTlAyABgBV08e9K+/gSkhEkAaAgyqkR3r6AjDn7rb0ltQQBMRQPJIb6
vBQ6xw/l5iYnnTUvy3QIMa+6esBqMKlSGcOnOVW+va6Tk2rcvj1V6sDBZLMftq7W
dlbUC4i8A6JZaDukoSwss6ip1dw4S7tVkist7sO/kCHAa3BAtaAWWbklcRWyPtQY
jxy725WGUgdhU1HtKKpx61+5jVrmOdDnl47RBhj3HIOtBnFQ/ZkQlsojz3N645oF
K/uIDe9jrpZ52NgpzOCAX5TGWqIQzT41tpjKOSRY68PKZy9otPCe5qEHSK1l23QY
T0YPn6q7hmlEhdJ5
-----END CERTIFICATE-----