This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
File:                     w4Me3AugfH40q6cBw1c9jnKvGP4.cer (raw, json)
Hash identifier:          v81IZBqlXrdj+Psrm4vEqQ26ZKnwkZ1N/NdaHd8mvmU=
Subject key identifier:   C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CED61B37A93F2BD84A2B1569618D0E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:18:10 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 208569
                          IP: 45.128.8.0/22
                          IP: 81.172.119.0/24
                          IP: 89.45.241.0/24
                          IP: 2a0e:3b40::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:61:b3:7a:93:f2:bd:84:a2:b1:56:96:18:d0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:18:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:52:98:a4:16:71:f7:b6:3b:da:fb:1b:74:
                    f2:e4:06:ca:3c:94:67:5b:28:69:bb:a5:04:be:6c:
                    c5:d9:78:c7:ef:ce:db:c6:72:70:a5:f6:e8:aa:84:
                    78:24:db:39:1f:e6:3d:5f:62:3e:c6:3a:6d:65:93:
                    bf:2c:fb:b3:38:8c:a4:9f:78:47:c1:86:8f:ec:44:
                    cc:19:8c:d4:66:cf:0c:e9:1c:a3:19:57:77:85:52:
                    26:31:87:2c:11:c1:96:ea:c8:66:7d:9e:91:cd:81:
                    c3:a9:b2:76:59:9d:8e:8b:f5:fe:20:5a:71:b5:f8:
                    17:4d:84:b0:66:55:71:f9:1a:4b:72:2c:d3:63:f1:
                    c5:4e:35:c1:e6:17:ad:64:d2:86:db:48:3c:db:29:
                    26:8f:4c:e8:3c:fe:ad:11:c3:98:eb:cc:b2:de:79:
                    17:50:38:0b:d4:47:40:e2:40:6d:62:14:4a:f6:d4:
                    f6:e5:f0:d5:2d:36:c2:dc:79:fd:4f:8b:f2:e7:30:
                    61:54:32:1a:b9:98:5d:0d:68:a0:be:43:11:5b:6c:
                    e3:b5:85:1b:09:d1:e9:16:df:0f:54:4b:3a:ee:69:
                    f5:2f:49:f9:b5:cf:ed:9c:92:7d:87:7e:85:f7:2e:
                    56:1c:f5:2e:30:b5:b2:6e:c3:2f:3e:70:ad:b5:bc:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.8.0/22
                  81.172.119.0/24
                  89.45.241.0/24
                IPv6:
                  2a0e:3b40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208569

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:e3:6f:75:8d:e0:43:82:cc:4b:11:52:9c:34:31:6e:d0:
         d5:56:e1:fa:02:70:3d:4d:46:d0:fc:8c:78:96:3b:4d:da:f0:
         03:73:cc:87:d7:ec:15:65:47:dc:ec:95:9d:e6:70:a5:25:90:
         66:e9:a4:89:f8:4a:3c:32:36:5a:ba:8f:11:2d:71:43:d8:15:
         bd:05:d1:d3:02:a9:86:21:25:2b:dc:c5:3b:ae:38:72:a4:2c:
         9a:40:c3:b2:5f:00:83:98:d9:ee:94:d0:f2:83:1d:e1:1d:ea:
         34:28:ad:c7:1f:68:48:9b:90:3c:96:da:10:eb:68:c3:53:2d:
         95:8e:c4:e9:ba:45:ff:47:78:15:8f:35:4f:07:92:79:4d:94:
         56:c6:7e:de:fa:e2:71:8c:fe:75:99:ef:e6:33:7c:e4:d9:69:
         50:91:43:18:6f:44:7d:76:20:01:ac:08:ff:c8:4b:e7:56:c9:
         16:b2:3a:52:dc:fc:6a:62:21:4a:ee:40:6d:b5:66:84:43:14:
         e1:0b:d9:73:e4:e3:02:22:cb:45:81:0a:d2:7f:6b:cf:a1:89:
         40:99:f1:6c:39:7f:f0:88:36:e2:af:03:6e:f7:86:15:86:f1:
         a6:80:ba:26:9b:d3:18:6c:9c:5b:2f:59:f9:c6:90:cb:8d:62:
         9c:ac:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:24:39 2026 by rpki-client