This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
File:                     x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer (raw, json)
Hash identifier:          6a2pwkWDzIe0X8c+qpOsy8/KXr/535OBps/KToUBRvc=
Subject key identifier:   C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F1533D4A8EDF6E73D2A802662A407F7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:20:54 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209256
                          IP: 217.20.96.0/20
                          IP: 2a0a:34c0::/30
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:33:d4:a8:ed:f6:e7:3d:2a:80:26:62:a4:07:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:20:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c77549551405d9948c662dfe4de24de055daff5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:15:5e:25:ed:a1:e8:b0:fb:08:ed:ff:b9:
                    b6:68:16:11:cf:48:74:bf:89:a6:65:f7:e7:45:a5:
                    58:48:d9:33:84:a8:7f:d1:e4:8b:4f:1f:9b:c9:09:
                    d4:fe:7c:87:5d:65:23:0c:66:d3:55:de:37:c5:11:
                    30:96:74:12:7c:ee:98:1a:24:34:22:c1:46:85:c1:
                    20:fa:73:1e:6b:b1:76:c2:ce:7b:94:8b:8d:82:f3:
                    a7:d8:8b:5d:02:e2:70:f6:84:80:88:b8:33:aa:e6:
                    b7:23:36:59:17:ed:b6:83:16:61:c9:79:9d:8f:97:
                    ea:ef:70:d1:0a:47:a1:e7:e4:53:c4:96:96:74:fc:
                    94:42:e8:ef:73:b1:8e:cb:93:07:b2:6d:6f:79:e5:
                    2f:76:c3:af:1d:96:0a:e1:02:4f:97:e6:3c:5a:56:
                    57:84:b9:d9:9d:e4:c1:34:fa:2d:31:78:79:c2:aa:
                    44:47:91:21:4c:3e:d8:4b:4a:65:20:5e:25:3e:38:
                    d7:5c:99:f6:d8:f0:89:4a:40:1d:5d:32:f2:20:2a:
                    c7:ee:df:b3:1e:59:c4:dd:04:a8:fb:93:b2:0f:2c:
                    23:f9:2d:c8:d1:23:7a:48:f7:89:ed:23:3b:75:d5:
                    fc:44:4c:76:6b:fc:34:78:e6:c5:d5:f9:fb:ab:79:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.20.96.0/20
                IPv6:
                  2a0a:34c0::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209256

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:df:75:9f:de:b9:be:37:03:c8:6c:a2:8c:6f:0f:55:67:
         1a:3b:2c:29:00:3f:cd:1c:b6:7e:ad:c0:08:bb:6b:e7:0f:f0:
         b7:f9:46:d5:67:e9:75:b8:38:88:01:bb:1d:c8:2a:fc:5a:be:
         0a:61:e3:51:d5:e0:8e:d8:ee:37:5b:55:75:90:c8:5f:f0:04:
         7a:03:ba:5b:44:74:d6:1a:95:d0:9d:23:3a:40:f3:89:87:70:
         e4:e2:48:98:e7:3d:e7:74:ad:f7:8e:ed:fd:e8:d3:4d:42:23:
         79:66:1e:ee:30:29:76:ef:8e:36:eb:3e:38:f2:c6:21:f1:54:
         88:18:11:6d:5b:ea:09:5e:43:c5:a7:9e:0d:64:ab:f0:ca:05:
         42:df:96:f4:87:5b:be:12:ac:84:66:13:5e:d8:e7:d6:47:fa:
         c5:38:02:52:5e:ab:42:22:d9:f1:13:5e:51:1b:f0:9f:a8:cc:
         00:84:9f:95:17:f8:93:ea:79:36:50:33:bc:41:4a:45:f1:b3:
         87:8b:bb:6c:73:ea:b0:40:4a:f9:15:7a:6a:e0:3b:bc:9e:c3:
         3a:d7:de:1a:6a:a8:61:20:6c:17:2b:ce:63:83:6f:94:ef:37:
         12:1d:43:d9:8b:9e:13:12:34:ba:f7:2d:fc:28:37:35:d5:cc:
         cc:91:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----