This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
File:                     wa5jZUn1bYSFj_lsixYw6MuKSK8.cer (raw, json)
Hash identifier:          TbnhV5i6qpQR/zvos5UkILYnzTjzd5BB7SyFcLDmtdg=
Subject key identifier:   C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A32EA9754C72EBA58D77AF65FAA812
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:18:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 42176
                          IP: 92.42.80.0/21
                          IP: 2a10:8e40::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:2e:a9:75:4c:72:eb:a5:8d:77:af:65:fa:a8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:31:fe:65:7d:b0:fc:91:1b:8c:cc:90:00:24:
                    16:a4:a5:36:a2:2a:d9:c4:1c:8b:06:73:00:97:11:
                    64:6e:a6:b1:e4:65:21:90:3e:d9:2a:3d:a8:2f:13:
                    4b:66:99:11:da:b3:d8:da:99:44:05:e6:63:a7:83:
                    a0:53:05:5e:8e:07:60:ce:e2:64:ea:c7:db:0b:f9:
                    86:d0:8b:2d:b5:02:fe:85:4a:f8:f3:20:03:97:80:
                    78:11:24:60:30:a2:9c:fa:cd:a6:06:46:8e:a9:9f:
                    7e:15:15:e0:6f:fb:49:18:ab:c7:0a:03:f8:bd:b0:
                    ee:b8:6f:8f:71:7c:21:b6:7f:da:ad:1f:f9:ec:6a:
                    99:f5:f8:94:88:d7:a0:20:4e:29:46:d0:ba:e4:4e:
                    dd:1f:2e:56:1c:f6:1a:69:d7:ca:b3:af:49:99:d6:
                    9e:6d:88:81:8a:f5:90:6d:90:b5:5b:56:0e:3b:58:
                    64:a2:10:b4:ef:17:7d:bc:7d:d9:f7:85:b4:99:00:
                    a7:e0:09:a2:ed:9d:75:bc:c5:f7:0f:8a:6f:89:a2:
                    48:85:b8:3a:fb:87:64:53:a6:ce:3e:9d:1f:ec:02:
                    32:79:c2:11:8c:16:ba:34:fc:8c:90:01:27:3e:e8:
                    dc:7c:2a:3f:39:7c:df:47:b1:1c:23:f2:43:22:27:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.80.0/21
                IPv6:
                  2a10:8e40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42176

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:42:a3:9b:cf:af:ed:8c:63:ed:9f:eb:34:83:9e:77:8c:
         c1:8f:51:72:03:ca:79:70:bb:41:05:83:08:9a:4e:ff:96:f9:
         d5:27:0b:6a:a4:e1:46:64:8c:6b:a4:5d:44:9c:67:c4:ca:dc:
         46:8d:b5:b6:32:df:48:74:0a:72:c0:aa:22:af:b8:d0:76:5a:
         49:66:14:1f:26:82:20:1f:c8:16:99:50:fa:b2:44:4d:4b:5f:
         01:de:01:ac:50:df:49:32:80:70:5e:3f:22:6b:4c:c8:b0:2c:
         d3:76:39:c7:29:6f:48:9f:ee:c0:be:68:dc:2b:f5:93:92:55:
         0e:00:5d:d4:f5:8f:84:5d:63:01:b1:7b:4a:0a:80:1c:e1:26:
         73:86:6a:c7:8e:6c:c3:e0:40:a3:77:15:fb:4b:61:83:f7:04:
         25:c3:a4:85:22:0d:82:61:98:75:14:3d:30:11:0f:70:87:33:
         c4:32:17:68:11:58:54:0e:83:6a:99:af:7e:29:83:85:1e:bc:
         79:22:31:eb:68:dc:cd:87:26:0b:aa:b9:12:1d:2d:12:07:8f:
         22:36:f0:7d:f8:96:47:38:9a:43:5a:94:5c:fa:52:b0:4a:5e:
         8b:eb:cc:95:e3:d2:4a:fe:be:dc:22:45:d7:82:3a:8e:6a:7e:
         7f:ad:fd:2a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt4oy6pdUxy66WNd69l+qgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWFlNjM2NTQ5ZjU2ZDg0ODU4ZmY5NmM4YjE2MzBlOGNiOGE0OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DH+ZX2w/JEbjMyQACQWpKU2oirZ
xByLBnMAlxFkbqax5GUhkD7ZKj2oLxNLZpkR2rPY2plEBeZjp4OgUwVejgdgzuJk
6sfbC/mG0IsttQL+hUr48yADl4B4ESRgMKKc+s2mBkaOqZ9+FRXgb/tJGKvHCgP4
vbDuuG+PcXwhtn/arR/57GqZ9fiUiNegIE4pRtC65E7dHy5WHPYaadfKs69Jmdae
bYiBivWQbZC1W1YOO1hkohC07xd9vH3Z94W0mQCn4Ami7Z11vMX3D4pviaJIhbg6
+4dkU6bOPp0f7AIyecIRjBa6NPyMkAEnPujcfCo/OXzfR7EcI/JDIieL9QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMGuY2VJ9W2EhY/5bIsWMOjLikivMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzRiOTA4
ZC1mNDNhLTQ4ODItYTY2Zi1iMjE2ODQ0YWMxZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNGI5MDhk
LWY0M2EtNDg4Mi1hNjZmLWIyMTY4NDRhYzFlNC8xL3dhNWpaVW4xYllTRmpfbHNp
eFl3Nk11S1NLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDXCpQMA0EAgACMAcDBQMqEI5AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCkwDANBgkqhkiG9w0BAQsFAAOCAQEAPGxCo5vPr+2M
Y+2f6zSDnneMwY9RcgPKeXC7QQWDCJpO/5b51ScLaqThRmSMa6RdRJxnxMrcRo21
tjLfSHQKcsCqIq+40HZaSWYUHyaCIB/IFplQ+rJETUtfAd4BrFDfSTKAcF4/ImtM
yLAs03Y5xylvSJ/uwL5o3Cv1k5JVDgBd1PWPhF1jAbF7SgqAHOEmc4Zqx45sw+BA
o3cV+0thg/cEJcOkhSINgmGYdRQ9MBEPcIczxDIXaBFYVA6DapmvfimDhR68eSIx
62jczYcmC6q5Eh0tEgePIjbwffiWRziaQ1qUXPpSsEpei+vMlePSSv6+3CJF14I6
jmp+f639Kg==
-----END CERTIFICATE-----