This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
File:                     xorAnHI17TE4Ph_ThzkY3RgzNCo.cer (raw, json)
Hash identifier:          uezbCrWyedG1JovKMZyD2u3TRpXm0bb2NuxeaeKP5Y8=
Subject key identifier:   C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77587A6DBDDE7FC98FCAB0903BDC9F0B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:17:25 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209515
                          IP: 91.132.16.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:7a:6d:bd:de:7f:c9:8f:ca:b0:90:3b:dc:9f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:17:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:d7:59:2b:7c:30:33:a1:09:54:a8:ac:32:
                    be:15:70:88:26:87:c4:2b:b0:49:62:8f:46:1d:78:
                    40:70:6c:cf:31:2f:b9:4f:4c:2f:30:af:da:ff:85:
                    07:b1:42:bb:2d:f4:93:be:5b:32:00:0d:99:b7:ef:
                    f6:ed:82:9b:5a:87:8b:1c:f2:4f:6b:2a:08:10:49:
                    ce:0b:b5:96:9c:71:ae:c0:f2:73:e0:b5:66:7c:1c:
                    57:e1:04:30:ee:3b:90:6e:98:3f:d5:68:13:af:5c:
                    df:3a:c6:59:6e:88:23:11:32:23:71:84:b9:4c:b2:
                    20:ae:fc:83:fe:8c:c1:7e:1a:9b:94:a9:c0:95:53:
                    72:63:16:65:4a:28:9b:dc:93:0b:1b:40:48:3a:cf:
                    89:9b:27:cb:b6:89:3f:ba:d7:f0:7c:b5:c6:62:b6:
                    be:20:70:fb:7e:fd:6d:67:8f:a6:2f:ae:23:c2:9b:
                    31:13:02:61:15:bc:9b:43:fb:6e:07:c5:bf:3c:db:
                    21:82:5d:a0:0d:6b:f0:2b:7e:90:10:82:da:14:28:
                    6e:21:f9:26:f7:1c:56:05:4c:13:f7:db:41:2b:6b:
                    41:8c:fe:bc:40:d0:b5:39:be:65:6e:ba:5c:c6:9c:
                    ab:87:d5:7e:b3:e3:86:56:90:22:91:47:48:ea:07:
                    f9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.132.16.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209515

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:35:4f:a0:5b:7c:30:b8:ee:fe:8c:1e:09:56:25:e2:c7:
         38:5f:06:b8:15:6b:93:c2:36:a5:c9:30:06:7a:b6:88:e5:0c:
         7e:c8:ea:7e:17:32:8f:88:49:fa:37:2b:b8:02:86:cc:c5:e2:
         cd:00:97:7d:7f:fe:bf:fb:6e:58:8e:e7:6d:49:14:37:2a:f5:
         ea:67:64:49:68:a4:a8:23:83:f4:18:04:bd:7b:ac:45:0d:eb:
         4d:32:12:7c:89:a8:29:e0:e3:0d:08:69:e6:bd:df:22:b1:ae:
         93:0a:27:3e:1e:93:5e:69:1f:10:9a:07:77:9c:d0:c9:ea:6d:
         f2:5e:75:0f:38:b3:b3:52:bd:0e:b4:b1:89:cb:6b:b4:ff:12:
         20:fb:59:e5:0e:48:ad:d6:50:7a:52:45:9a:e4:5a:d0:c3:61:
         ad:3c:27:e3:c6:cc:ee:b5:b1:d3:ae:e2:32:e1:49:aa:85:ee:
         95:3a:f0:e3:c3:ba:3b:c1:62:60:97:58:0d:55:9b:9d:78:d4:
         3d:66:99:a8:e6:e6:c5:11:7d:ac:b9:0e:b7:e2:5f:fc:a0:f2:
         fd:5e:84:fb:a5:44:01:cd:a4:bb:b5:d4:30:f2:ed:65:57:0d:
         22:f8:58:22:6b:5c:4d:47:97:64:36:1e:aa:3a:5d:65:9b:1e:
         aa:7d:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:44 2026 by rpki-client