This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.cer (raw, json)
Hash identifier:          Eifk10+Pbw3kvvl4P5BMe+KwMJdlrKHpyQ52WjRBNCA=
Subject key identifier:   C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7DCA7353F66EEF8578D57CB7D0B9D109
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 08:19:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 212576
                          IP: 185.196.62.0/24
                          IP: 2a10:74c0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:73:53:f6:6e:ef:85:78:d5:7c:b7:d0:b9:d1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:59:43:f5:de:98:54:ee:19:30:fc:7e:aa:54:
                    58:19:2b:c3:60:79:17:58:91:eb:17:7e:c4:7d:3b:
                    78:40:45:b2:36:0c:ca:28:16:bc:e9:9a:ea:71:20:
                    22:39:77:c7:dd:42:e0:ab:8d:b7:22:f9:a0:f7:f7:
                    92:59:d4:8e:34:d3:bb:2c:67:5b:0a:96:93:f0:33:
                    9c:93:ec:78:0f:80:f4:28:28:3f:d1:1c:cf:3a:08:
                    e1:55:94:fa:28:e3:35:3e:e3:86:28:08:a4:0f:28:
                    98:68:a1:62:a6:ad:30:51:44:3d:f2:42:1f:d6:7f:
                    e2:46:a6:23:02:50:ce:74:cb:d7:fc:99:bd:95:b9:
                    1f:7d:96:92:49:4b:fb:9e:11:ae:bb:49:8f:2c:78:
                    38:c0:e0:92:24:23:d4:18:dc:2d:96:25:bb:86:44:
                    d5:4e:95:f7:0c:58:6d:a8:96:8a:ee:bc:a0:66:3a:
                    f3:8e:30:7f:c6:d0:64:29:47:c9:19:17:e7:26:59:
                    b0:ae:0a:3b:ee:2c:2b:a4:24:bd:cc:bc:fb:1e:c5:
                    ad:d8:84:83:19:d6:8b:63:55:80:dc:47:68:26:46:
                    b5:57:43:eb:ed:2d:0d:07:16:33:0c:4b:ec:95:33:
                    65:cb:75:6e:fb:de:e5:e7:92:5d:36:1a:14:9d:e5:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.62.0/24
                IPv6:
                  2a10:74c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212576

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:86:dc:44:b3:a3:e0:60:7b:cd:f4:fb:c3:85:8c:54:f9:
         e7:66:4c:cf:e7:08:e0:f7:f9:5e:68:51:85:af:c3:fb:bd:ec:
         f7:c7:66:7f:0d:15:e6:9e:da:7a:bc:c2:d4:b1:4d:a8:c2:66:
         16:f4:6a:85:a5:08:07:66:74:69:33:4a:48:7c:2e:11:68:b6:
         b6:d8:62:ea:e2:a6:e4:89:31:0e:91:46:a0:de:f1:db:28:c7:
         ac:9b:7d:96:ef:aa:98:cd:fd:d6:e8:92:27:1b:e9:af:0e:b0:
         32:56:58:cc:91:85:1d:f8:2c:ca:51:1e:3c:1e:10:52:1f:f0:
         d8:73:6b:10:60:c1:52:55:0e:24:1d:e6:38:9a:dc:89:d2:1d:
         4f:e2:8d:e5:17:20:cd:f1:0f:20:0f:40:7c:4b:be:48:ff:17:
         71:6a:e0:62:74:c6:86:de:94:71:be:1f:82:11:3f:4e:7e:a2:
         7c:5a:c6:2b:69:6b:02:71:16:c9:b0:05:c3:b1:f3:02:78:17:
         28:dc:7c:fa:04:43:d9:c7:08:da:8e:b1:0f:e1:5d:18:35:58:
         88:54:5a:04:59:ca:21:28:6f:eb:de:99:bf:c8:a3:74:b8:a7:
         75:2c:34:6a:43:5b:90:b9:8d:30:37:ea:e9:90:e5:53:35:89:
         74:1a:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----