This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
File:                     woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer (raw, json)
Hash identifier:          SbwnX6sTYkrnm6lmqwE739rva8X5T1xK38B4CV42u1Y=
Subject key identifier:   C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B775969EC68B81B9C3D5C2060DDE9AC0E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:18:27 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.59.10.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:69:ec:68:b8:1b:9c:3d:5c:20:60:dd:e9:ac:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:0b:3c:99:b7:6f:fe:48:58:44:e6:c8:9f:
                    6d:b1:4a:d9:3d:71:66:69:1c:01:8b:54:1c:ba:70:
                    ae:dd:25:9e:d7:c1:53:3f:50:16:31:af:45:cd:c5:
                    56:1f:59:ed:3a:bc:a0:28:ac:5d:f4:74:a9:d0:85:
                    08:f4:23:67:16:84:27:75:43:7f:20:3d:cb:ea:95:
                    33:d4:8c:c0:fc:af:3f:e0:83:0f:50:21:12:69:4c:
                    88:4c:b4:ff:2d:62:0e:55:d1:a7:99:f9:2d:ed:1b:
                    99:0f:df:2c:da:c6:44:e2:10:52:b4:82:f7:a6:b1:
                    9b:c2:92:ba:80:6a:ec:62:23:b1:c4:0f:65:9f:12:
                    7c:bd:6c:f4:ec:66:8e:6d:9b:c6:e3:cc:f0:49:c6:
                    fd:b8:f5:79:44:17:04:52:ba:64:58:6a:8b:b7:86:
                    2d:7a:49:6d:47:83:c9:f9:ad:1a:65:48:bf:d7:95:
                    29:f8:2e:7a:ac:46:d0:32:55:32:41:ed:e1:ec:92:
                    0c:1c:52:5d:c1:e7:b2:54:fe:83:38:df:cd:4d:70:
                    d9:58:da:52:ab:9b:d8:2e:9e:27:9d:cf:14:96:42:
                    c4:a9:b7:12:03:85:af:0b:78:df:b7:0c:87:ef:12:
                    61:f5:e1:17:da:4c:62:f7:6c:3a:3d:a5:c0:2a:95:
                    d0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:83:04:21:6d:79:48:28:f0:b9:33:d2:4f:07:f8:6e:36:
         ba:5e:55:92:cd:41:66:47:e7:08:d6:68:4d:a9:dc:ff:b1:31:
         80:ad:e9:9b:80:1a:02:2d:4e:a6:b7:cc:e9:8f:a1:cb:3e:83:
         1f:7b:01:e3:c3:69:a1:d8:f3:46:3d:3a:50:63:9e:20:0c:46:
         3e:33:67:48:2f:a0:5a:92:ab:8a:76:ae:ca:76:47:06:08:ec:
         5a:ce:54:6b:a5:c3:b7:ac:f4:29:cd:66:fe:65:50:45:a7:54:
         a1:df:41:3e:62:e7:ae:ef:f5:a4:39:e7:2a:bb:0b:d6:fc:39:
         56:28:5d:4d:bb:be:88:53:a3:64:42:c7:ca:6e:59:98:e5:1d:
         b5:32:ee:b3:ce:f6:e0:18:b9:0b:81:79:d7:c5:cb:51:40:d5:
         1f:90:f0:a3:ec:78:a6:64:99:f3:4b:a9:a6:83:01:4f:cb:aa:
         56:18:47:ae:98:c8:91:96:8f:ef:d1:06:ea:cb:b3:1a:84:2c:
         cb:07:dd:03:07:74:1f:ef:55:85:c7:29:d9:d3:91:95:d2:59:
         dd:af:5a:99:f0:0b:c4:06:00:03:bb:6b:e9:5d:4b:8d:07:24:
         78:46:fc:84:b9:5c:ed:4b:56:b0:11:77:b4:2b:77:7f:88:a1:
         b1:a7:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----