This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
File:                     w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer (raw, json)
Hash identifier:          cdJshNAwcWOeLnIAROT3mNZxpAMXAysapfaE0wwk06U=
Subject key identifier:   C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79EC0F9082F4D396518A2B76AE98AAC4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:17:52 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 215691
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:0f:90:82:f4:d3:96:51:8a:2b:76:ae:98:aa:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:5d:85:61:7b:67:d3:31:fb:ee:f0:00:3e:
                    cc:3c:a1:e6:34:6b:46:9c:2c:60:40:16:6b:66:85:
                    6e:da:ef:c9:62:5d:a7:ac:17:81:af:d2:50:d8:e6:
                    36:f6:ac:50:2b:68:b3:fb:97:41:f3:9f:dd:39:9a:
                    fc:fa:d1:a5:d5:d1:e3:2d:88:a3:7f:7c:2c:63:83:
                    25:eb:da:52:c7:c0:49:f5:6d:9e:f9:51:b3:af:15:
                    28:1a:58:6e:6d:3f:a2:de:cc:82:a9:81:82:49:e0:
                    43:af:08:d3:d0:24:ad:0a:4b:23:ee:16:04:b3:a2:
                    25:d2:03:e1:3e:10:90:c8:c3:59:e0:31:ab:fd:54:
                    4a:b2:e1:97:32:88:25:64:c9:74:22:5b:2d:41:08:
                    62:5d:c6:e5:2b:79:87:db:7e:6b:bc:37:08:db:a7:
                    7c:24:4f:7a:a2:2f:7a:9e:b9:a4:03:aa:e8:0a:48:
                    50:4c:c5:6e:6e:13:3e:1a:bd:6e:77:d4:1a:81:78:
                    53:c3:58:5f:4c:4e:c0:b1:8c:59:b3:0b:e6:00:e0:
                    5e:92:1f:0f:1c:eb:37:87:cb:c4:e7:6f:88:96:0c:
                    a1:7d:77:6b:75:bc:21:10:b7:71:22:ee:93:6f:09:
                    f1:b1:73:08:e2:f0:3f:2c:9c:ca:e6:62:69:60:8c:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215691

    Signature Algorithm: sha256WithRSAEncryption
         45:97:0f:a5:e3:d2:9d:98:80:36:9e:c1:c2:22:9c:c4:f8:2a:
         b0:67:ab:4c:a1:37:b3:32:b2:1c:40:9a:2f:9d:23:87:8a:1b:
         c1:4b:98:cd:c3:e1:45:4b:ca:b1:3a:bf:e5:60:9d:84:0a:2d:
         a0:70:dd:57:1e:63:ef:c7:c5:f6:bd:e6:93:ad:35:40:03:db:
         db:5d:01:8a:db:6a:24:64:cc:47:46:26:3a:1e:87:4f:e4:80:
         df:b6:29:51:ba:12:93:4f:a2:0f:01:10:03:b0:e0:33:8e:0f:
         82:e0:53:70:90:c0:ce:4d:d2:bf:4e:cb:e3:92:85:83:9f:62:
         b0:f9:0b:34:dc:87:1b:06:76:5e:90:f2:ec:e1:46:0c:12:47:
         d4:32:14:46:0c:b5:8d:61:dd:fc:e4:57:23:a4:fe:30:3c:a4:
         e0:20:90:8e:c2:4c:97:2b:32:8e:42:30:f6:1f:43:07:89:7a:
         10:9d:99:ed:7e:43:88:2b:59:73:61:c4:57:4f:d1:7b:aa:a3:
         26:f3:6b:d2:6f:78:6f:53:de:ea:51:28:09:46:96:ba:a8:e7:
         e3:11:49:51:2c:49:cb:41:10:9f:c2:1a:5e:45:47:71:75:2f:
         20:93:7c:96:57:60:a0:be:5f:79:64:b2:fc:97:94:1a:77:43:
         a2:0d:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----