This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
File:                     yex331ntcqVFfezmpT0F7QrmAKo.cer (raw, json)
Hash identifier:          NgsvWwD9jkgjKvF4L7k2Ur1sx0+7T52+7IU3MXARDlI=
Subject key identifier:   C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7DCAA8BA00476B82DD96BEADD846B8B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 08:19:52 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 44447
                          IP: 93.92.0.0/21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:a8:ba:00:47:6b:82:dd:96:be:ad:d8:46:b8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:19:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:a3:45:a5:83:e7:ec:b0:46:e1:f3:e5:ec:
                    77:0a:a7:de:e1:19:a8:df:1c:11:d8:84:62:c2:47:
                    d6:fb:9b:56:b9:b6:78:f2:d0:19:d4:0e:5c:5c:4f:
                    9d:e6:ef:05:d4:08:78:81:ba:9d:4f:bf:0c:f5:af:
                    6a:7a:b3:85:1b:0b:e9:e2:99:82:55:b9:f6:5d:dc:
                    f1:6a:25:b0:fe:44:f1:66:7f:fe:26:46:60:86:6b:
                    6a:50:93:15:b1:1c:0b:d9:e0:4d:17:eb:eb:a6:83:
                    dc:cc:cc:49:f7:c2:63:ec:40:92:72:4f:33:7c:3e:
                    de:fe:cc:b3:a2:c3:07:c8:9a:6c:1d:5c:b4:ee:51:
                    96:e6:2a:28:c1:dd:70:dc:fb:dc:5a:69:7f:a3:f1:
                    c3:fd:6f:9f:2e:f9:ae:b5:56:b6:1f:58:71:93:99:
                    e2:07:78:86:7f:2b:a3:4b:ce:ad:22:bd:b9:01:6c:
                    02:15:fe:47:36:a0:24:ba:5a:18:ed:67:cf:7d:c2:
                    99:cd:8a:88:a2:ff:02:b6:84:8c:f7:37:d7:fb:cc:
                    90:de:23:0e:95:ed:14:82:e2:35:32:61:24:53:1e:
                    8d:95:c2:1d:76:8e:58:ac:86:0d:f3:9f:e2:9a:4a:
                    32:9e:07:38:8c:2d:56:5d:c7:36:d2:f5:a7:f0:02:
                    40:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.0.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44447

    Signature Algorithm: sha256WithRSAEncryption
         06:68:16:7f:b2:32:fc:50:34:e1:0e:76:90:e6:71:53:22:ed:
         f2:f0:62:ed:37:74:cb:e2:84:6b:b0:74:d2:b1:39:55:17:8a:
         c0:82:34:52:6d:08:4b:af:12:b1:fe:84:9d:36:dd:b1:b4:dd:
         6d:53:a9:6b:20:bc:9e:7f:e1:ac:33:9a:ec:5e:fa:ed:ff:ef:
         97:ee:d7:b4:e5:c4:d6:1c:60:5a:47:fa:f9:65:7d:fb:1e:d1:
         ab:10:c4:29:3a:d9:fd:0e:68:d2:67:da:8b:64:ff:44:c4:79:
         2b:75:3d:d7:a7:5c:95:23:0c:a5:86:2a:fc:e2:f3:09:e3:92:
         d8:4a:ac:dc:25:4b:57:1b:ca:64:c5:cf:e3:c0:a8:d7:74:ff:
         83:0e:82:2a:bf:d8:b0:67:01:b0:20:64:53:29:34:ef:c2:74:
         02:53:f1:06:c0:8f:34:16:0a:7e:35:61:c6:5a:42:68:15:cc:
         f9:72:6a:80:0a:d8:ae:5a:d0:73:0a:36:9f:ac:45:21:73:fa:
         a9:dc:a3:cc:f0:d8:80:d2:5e:f3:00:e7:0f:06:a5:a3:d5:47:
         98:7d:d8:65:d3:56:95:aa:9e:aa:89:b9:b8:9b:87:46:5b:72:
         fb:f0:75:4d:3b:57:b9:e2:65:8c:62:4a:5e:25:30:d8:3d:6e:
         f5:fd:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:24:13 2026 by rpki-client