This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
File:                     wv0sdK1vri3dD26cOf3oMYk65vk.cer (raw, json)
Hash identifier:          WIdB7coJ29OKn0jFblwYuvnH1iW3SZJN1f1/nYQEV/c=
Subject key identifier:   C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B797F24DB237BC9CC0D45B4E44A58D6F7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 12:18:54 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.110.64.0/22
                          IP: 193.42.143.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 15:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:24:db:23:7b:c9:cc:0d:45:b4:e4:4a:58:d6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:18:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:7b:9b:7a:40:ba:b0:f7:5a:99:c5:c3:64:
                    16:be:40:5e:92:5f:8f:19:f3:23:27:24:8c:83:10:
                    42:cc:91:a9:bf:2b:c6:5c:08:db:99:5e:84:63:43:
                    29:a9:09:a9:7f:1a:85:a3:a6:e1:c5:6e:d0:cb:33:
                    d1:23:98:e1:ce:df:cd:d0:cb:e3:cd:bd:c9:62:f7:
                    0a:77:4d:e1:df:fd:d4:0f:5e:d7:94:3c:7d:b4:b8:
                    cd:02:af:44:7a:be:6a:ed:56:63:f5:12:58:64:1e:
                    71:91:a7:2a:2a:4a:58:1a:5c:2a:ab:2b:d5:3d:5e:
                    43:b5:68:41:5b:3b:6e:45:19:13:86:ea:04:de:17:
                    97:5a:0d:02:67:ec:41:08:07:b4:7a:43:2d:ef:29:
                    03:76:52:b3:70:82:21:d3:a2:e3:3f:e1:f2:24:2e:
                    b7:f5:81:68:ca:b8:7f:a8:3e:04:a6:13:76:d2:d2:
                    51:8d:df:fe:45:c8:4b:cb:78:42:ab:a8:b0:f3:9d:
                    40:63:d2:5c:3e:d1:df:05:f3:eb:ca:cb:22:d8:0a:
                    11:ea:6d:af:5d:39:81:ee:ef:9c:d7:c4:75:e4:d1:
                    32:14:85:e1:57:4c:85:63:61:84:fa:d6:d5:47:54:
                    da:14:4f:51:57:8a:4c:83:45:0e:be:ba:d0:62:b7:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.64.0/22
                  193.42.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:31:f5:5b:0a:4f:03:e9:d6:00:e5:eb:10:49:67:b4:7f:54:
         a5:bb:31:4b:ad:da:90:75:6d:75:e0:88:e7:74:f0:33:ab:7f:
         1f:89:bd:18:4e:34:ad:ea:81:86:9f:b3:78:b5:d1:7f:b2:d7:
         74:d4:09:21:8c:5f:55:f4:f4:35:92:5b:aa:9b:01:fe:ab:59:
         0d:30:51:4a:52:80:c2:4f:aa:90:9e:89:f9:23:b8:a0:ca:62:
         1e:ae:dc:56:c0:0e:bb:27:e9:ab:cc:42:cb:8a:6e:5f:86:90:
         73:0d:db:18:1a:58:da:3d:da:55:93:d6:e0:c5:63:ab:fb:69:
         aa:10:55:e5:8d:40:5b:84:0d:bc:f6:bf:7c:6c:01:40:52:62:
         9d:4c:17:54:45:67:7a:f9:86:0e:34:a3:d0:1c:ec:3c:d0:14:
         7c:e1:15:d5:d5:9e:82:3f:7e:75:aa:7e:5d:74:b4:e0:4d:d6:
         a9:67:60:bb:c5:85:34:c7:95:74:0f:5a:a1:7c:2f:df:42:10:
         17:ce:4e:10:aa:a5:e4:37:d3:54:40:c1:36:86:c0:f6:6a:02:
         be:e7:fc:44:da:f9:8a:2d:60:4b:a8:4c:49:c3:12:fb:46:bc:
         50:09:8f:18:41:cc:5b:08:c3:3a:e4:c8:96:f3:c8:38:a0:c2:
         3c:ba:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:34:58 2026 by rpki-client