This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
File:                     wwOJmXRU-gA-H_yM0ui35l2T9OI.cer (raw, json)
Hash identifier:          NDpkiFDA/z45vbjaJpgEAE3YFvIgMc4HDf4eyphKez8=
Subject key identifier:   C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E389F63863C01EC365F3612F3BC3D61
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:19:58 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 29464
                          IP: 195.149.113.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:9f:63:86:3c:01:ec:36:5f:36:12:f3:bc:3d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:29:ba:2b:6e:01:f2:b5:29:cb:a4:18:17:
                    a7:9a:07:f6:c0:3f:c2:0e:dd:44:9e:2e:f5:1d:f6:
                    0e:4b:f7:f1:dc:f2:31:d9:90:b3:49:e7:00:a0:c5:
                    9c:27:3d:41:a2:72:3e:15:a2:ee:c6:03:47:11:c1:
                    7e:40:79:01:9c:0b:fe:d5:32:c0:83:53:9e:59:8d:
                    d1:23:08:cd:65:36:21:69:c3:91:ab:32:d0:d5:3c:
                    3e:e5:f1:94:d9:8c:71:40:cb:67:6b:69:3a:1c:2c:
                    c2:07:4f:40:2e:f0:e3:63:da:a0:ce:3b:44:5b:1e:
                    f4:d0:6e:bc:bc:85:94:dd:c0:2c:b1:63:f1:dc:ce:
                    72:05:23:24:16:b9:46:33:7b:bb:08:2e:ef:23:d4:
                    60:b4:ab:7b:76:5f:38:64:ea:53:cb:06:0f:59:32:
                    a4:33:34:65:12:12:02:2a:8e:db:28:79:6c:4d:af:
                    df:d1:a2:3c:dd:dc:f2:70:a5:02:1b:d6:8f:f9:10:
                    f0:f6:20:65:d4:72:ea:5b:b3:2e:a7:9a:4d:eb:1e:
                    2b:37:ff:0b:df:67:f0:50:a9:1c:c9:6d:bf:34:37:
                    15:be:db:2d:b6:5c:94:de:df:78:a8:e9:37:be:e1:
                    82:98:03:11:5b:bb:7f:20:45:7f:6b:28:b5:02:c2:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.149.113.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29464

    Signature Algorithm: sha256WithRSAEncryption
         7c:b2:44:dc:26:bf:31:fa:c8:3d:85:b8:bc:a0:e8:16:8a:22:
         f6:c8:e7:2c:dc:ed:3b:d9:46:e6:0c:88:bd:36:43:db:e8:cc:
         d6:ba:7b:8c:6e:5e:6d:53:41:f0:9b:e3:d1:c8:49:62:8e:42:
         ef:a2:45:01:4f:52:7a:e3:5c:e2:a5:97:87:d3:b3:0b:d7:14:
         4c:17:e8:25:fe:9c:74:9a:9d:9b:53:b4:33:77:08:c3:39:64:
         8e:9a:6c:4f:95:c0:7a:bf:40:56:db:b8:61:32:4f:25:91:11:
         d3:24:00:3d:0d:2c:37:00:4f:af:0e:5d:3f:a0:ea:e7:91:5d:
         6c:0a:82:6f:20:9c:a0:24:50:79:9a:52:23:13:17:fb:5d:6f:
         7a:1d:10:98:92:d7:f5:0d:d7:14:8c:e0:00:f5:4c:a7:31:af:
         3c:6d:1b:89:10:33:70:6f:01:4e:8d:2d:43:15:4e:f2:13:53:
         ec:30:86:ca:45:a9:e5:b7:45:c7:2f:c7:43:37:a5:49:65:0c:
         b2:99:db:7a:3b:55:d8:95:53:7a:aa:1a:3c:6a:db:3c:b5:f7:
         2a:14:3f:5f:2a:06:1a:cf:95:58:77:e9:32:18:13:07:66:23:
         4b:fb:f3:87:8f:0f:0b:a5:13:ba:9a:fa:42:a0:37:5a:8c:df:
         5c:bd:e5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:14:19 2026 by rpki-client