This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
File:                     vIPChDwWSbAFTJEST-4DEUCV4WM.cer (raw, json)
Hash identifier:          1N4iw7T+1AUflhqSJ1HVrae+9lIrUWIxMvk5Kglp6oc=
Subject key identifier:   BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C6EEE40C1279DC773FAF92E5B79EBE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:04 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.240.184.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:ee:e4:0c:12:79:dc:77:3f:af:92:e5:b7:9e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc83c2843c1649b0054c91124fee03114095e163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:c8:65:39:e2:91:90:b2:ae:36:c7:1f:13:
                    59:38:43:c3:7d:be:3f:b1:d3:ea:7c:71:06:06:3e:
                    7a:9e:5d:ac:5c:6c:8e:fd:cf:c4:b4:74:cc:e2:71:
                    1c:78:b2:09:0f:18:96:16:a5:7c:f5:20:40:c7:34:
                    52:a6:da:da:e6:2d:26:a6:13:7c:ac:48:c8:60:81:
                    9b:4b:83:23:ba:49:83:3f:d8:5f:f0:ae:9a:f1:de:
                    8e:5c:70:e0:13:93:b5:d2:34:ac:89:e5:25:c2:e4:
                    42:db:6f:a8:c9:9b:b2:5f:5a:45:27:64:19:c2:c9:
                    cd:fa:92:b2:89:d3:e6:28:7f:fb:97:2c:89:a8:75:
                    db:00:aa:52:c3:ae:95:b2:f0:86:2a:aa:ad:05:bf:
                    05:50:87:0a:45:4e:30:40:75:00:a6:7a:27:12:22:
                    b3:72:07:e1:8d:95:38:fc:9d:94:d1:51:12:82:d9:
                    b6:de:f1:18:1d:68:47:93:5d:a4:65:77:52:15:50:
                    9e:dd:cf:17:86:c7:80:d4:30:1a:ff:29:c5:25:95:
                    e9:19:30:e7:c7:13:c1:61:97:9f:27:bd:2d:69:15:
                    7a:96:1a:1c:35:48:ca:9c:89:f0:c8:23:92:ac:b1:
                    22:d2:9c:9a:79:cd:14:79:e9:3c:e1:61:ab:be:56:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:6f:54:bd:38:03:ac:49:a2:4e:b8:18:69:ca:f4:63:46:
         67:48:f7:e5:ad:a5:71:25:37:90:53:17:4a:31:b7:93:8c:97:
         2a:b2:25:02:c8:3d:ac:cb:5e:80:05:4a:f3:ea:c6:9c:48:9f:
         d4:a2:a4:8b:1b:c5:b3:29:20:97:cc:3f:ae:f3:53:4c:30:d5:
         d3:01:28:21:e2:de:08:70:d6:2c:89:cc:2a:5a:53:62:f3:d7:
         3c:c3:25:ce:37:b9:ee:b0:99:74:75:c6:53:e7:83:99:d6:72:
         6b:d3:bf:22:e0:e8:e0:6b:32:f6:03:42:71:cc:4e:c3:eb:38:
         1d:ec:54:61:ef:ff:b6:96:7a:78:cf:da:23:89:2f:14:72:c0:
         f7:96:52:20:9a:f0:a1:84:bf:ab:85:73:7f:37:5a:13:41:0b:
         4b:50:e6:5c:c2:e7:19:3e:71:75:be:b3:4a:bb:2a:2f:0f:05:
         3a:49:a9:07:a2:bd:07:60:58:7b:89:f6:4b:4b:13:60:c4:e2:
         4d:a3:f9:6c:27:02:35:16:15:4f:dd:40:14:43:6c:95:9b:4d:
         e1:68:59:73:62:80:d4:2e:71:53:5a:83:b6:d1:cc:23:27:e9:
         02:91:26:de:bc:43:c1:ee:16:aa:16:fb:22:43:26:75:10:65:
         4f:2a:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----