This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
File:                     voR-uyRJqE-_ayVcYEAo0UIgLJU.cer (raw, json)
Hash identifier:          PHId3aNL4w7fUdlwbCM+DdTl8rce3z0rjnfiv9N0lnk=
Subject key identifier:   BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A376B41C00301769FCA030C438FE2A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:18:57 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 42216
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:76:b4:1c:00:30:17:69:fc:a0:30:c4:38:fe:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=be847ebb2449a84fbf6b255c604028d142202c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:82:ff:56:05:20:5d:b6:9c:1a:7b:a2:41:
                    ee:7c:07:47:a1:91:cb:eb:3e:64:a7:dd:d6:7e:37:
                    27:46:63:3a:6e:6b:d8:cb:b7:65:a4:b5:2e:7e:c4:
                    90:47:72:31:47:a3:06:a1:58:a4:54:d2:8d:f8:e4:
                    f6:8d:88:4a:ff:e9:9d:1e:0c:34:c3:98:d9:e8:ea:
                    5e:ec:fc:44:65:4e:9f:9a:d9:d2:a1:dd:69:b0:d6:
                    4f:38:7f:a9:24:46:71:da:e4:6a:7e:c0:86:37:51:
                    ce:e5:01:87:bd:9b:80:34:89:27:6f:71:be:8e:11:
                    bb:d8:4f:aa:1a:53:b5:97:c0:8f:10:ba:72:b8:56:
                    89:71:49:41:1d:c3:b7:a8:77:84:57:88:ca:ac:7f:
                    f0:99:13:b5:3e:b8:a2:fd:e3:74:ac:eb:c3:90:68:
                    58:6a:00:8a:d3:3c:47:90:ae:68:48:a4:28:cf:14:
                    d0:a7:5f:80:b0:1f:1e:d0:d8:1b:93:e7:36:2d:1d:
                    39:a1:16:4c:cc:46:8e:2a:ac:89:df:81:ef:de:f5:
                    de:24:31:10:be:ac:f8:68:75:91:07:d9:bb:da:58:
                    68:35:d4:4c:7f:1d:1d:09:fc:56:7a:45:2a:41:0b:
                    ee:f8:45:9a:47:17:00:23:b0:62:e7:5e:48:db:8b:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42216

    Signature Algorithm: sha256WithRSAEncryption
         01:6d:ba:59:fb:bc:cc:d9:fa:21:f9:97:9e:de:9a:97:6a:a3:
         dd:8d:cc:89:fe:a7:6e:05:b0:28:0b:59:c0:85:2b:cb:88:87:
         98:e5:7e:7d:1c:c1:17:91:dc:9f:8a:f7:97:e1:3c:1c:4f:f6:
         95:3d:62:e8:5a:de:0b:ba:a2:32:df:82:c9:ca:04:c1:17:1b:
         54:d6:a3:52:db:b7:1a:12:d6:12:be:68:03:51:68:72:4f:11:
         e3:25:29:bb:86:eb:64:91:fd:67:3e:19:aa:a5:af:2e:21:70:
         2f:64:15:ef:91:68:a7:e2:64:52:60:55:2f:7c:ce:9e:7f:e8:
         d6:cc:e4:43:d1:31:ca:c1:ae:d4:ac:38:bd:0f:ec:be:bd:35:
         54:44:92:80:54:2c:5e:e5:bb:b6:35:91:55:0e:c5:f0:55:6a:
         da:83:37:89:1c:70:b4:75:55:e4:67:5d:90:97:0b:74:90:22:
         b3:ff:80:d0:4c:b7:b6:00:f2:36:f4:74:66:20:c7:c6:bc:67:
         05:c4:5d:00:9a:02:72:ea:ba:3e:1f:ef:b0:08:51:d6:a5:0e:
         6b:40:50:ce:e4:25:b6:01:88:df:c7:fb:fa:f6:9e:5b:ad:ec:
         f3:38:b5:19:4d:a9:80:ce:23:f5:3c:42:3c:5d:3c:e7:42:ea:
         c6:ce:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----