This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
File:                     zjfKOryl4UrBG8fzwVYqZNY5HSI.cer (raw, json)
Hash identifier:          i3RoWmxGqt+PwFLgezxPbqLDqxRkPkzpjqbcLgCWnCs=
Subject key identifier:   CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7DCA2FF3F963E3EDDA7EB08F8DF938A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 08:19:21 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 208411
                          IP: 45.137.252.0/22
                          IP: 2a0e:b2c0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:2f:f3:f9:63:e3:ed:da:7e:b0:8f:8d:f9:38:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:19:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:82:80:dc:77:47:59:97:e1:4a:c0:dc:25:
                    3a:a2:0e:c6:da:a8:fe:95:6a:ff:a1:85:6b:a2:b9:
                    ae:dc:59:a8:8a:f5:9a:93:5f:dd:9c:aa:27:b7:1b:
                    ef:7b:72:13:6f:f8:97:87:09:b0:9f:f2:12:99:c5:
                    c6:ff:25:5b:cd:5b:5c:05:67:d4:f0:54:cc:f9:61:
                    e6:c4:98:43:6b:ee:0a:7d:91:e0:4e:fb:06:4e:a9:
                    1e:a7:15:df:0a:09:fe:22:c9:41:5a:eb:33:48:b9:
                    00:1e:e1:67:d6:c0:66:1a:b1:77:d6:53:d1:19:ba:
                    b6:b2:14:c4:c9:94:c0:29:bd:41:43:bd:db:4c:72:
                    63:c0:2e:bd:e4:02:cf:8b:52:0f:a7:b1:b3:80:f6:
                    b1:3f:e8:dc:cd:1d:73:b3:29:21:d4:2d:37:c1:ef:
                    7e:9f:24:e6:2b:c7:6c:ee:44:32:b9:c4:58:0c:90:
                    66:57:c1:b2:d9:3c:25:0c:1c:92:f8:8e:ba:36:5c:
                    6f:2a:fb:44:72:6f:30:03:6e:0a:ea:73:27:49:23:
                    b5:81:c4:73:c8:15:52:f8:de:c9:51:d7:84:ab:85:
                    66:07:06:1a:27:ad:09:28:c6:3a:a4:36:22:35:c6:
                    d3:b9:90:47:2b:11:8c:c8:d3:ff:d3:d6:0f:9f:d7:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.252.0/22
                IPv6:
                  2a0e:b2c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208411

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:a0:23:ca:e9:c2:5f:bc:f4:9e:3c:ae:11:c2:11:95:b5:
         82:b8:de:c2:fb:0a:d9:33:4f:84:46:25:64:a4:03:f3:bd:b1:
         53:e6:f6:7b:33:40:36:11:71:aa:46:d2:24:45:88:9d:74:1b:
         0e:28:2e:61:10:52:83:25:15:52:c6:b6:bf:35:86:70:c0:9e:
         a6:49:53:6f:ba:95:dc:3b:01:d5:de:6d:54:a2:9b:bc:fc:62:
         ed:10:72:30:37:ad:5f:f6:3a:09:c6:d9:6e:28:92:81:2d:13:
         0c:f9:5f:1e:80:5f:22:cc:c5:a0:5b:3e:c6:22:a5:9c:0e:45:
         b6:4a:c0:d6:c9:95:ba:7b:ff:e7:0c:b5:f0:fd:54:dc:b4:24:
         5a:61:c8:13:6d:c8:85:dc:82:4c:d8:70:77:7d:d6:18:46:f0:
         34:ae:36:a1:d7:41:18:7d:74:40:d1:99:f0:a6:54:f1:6d:42:
         7b:53:f5:84:56:40:3a:48:d1:fe:c8:0f:b2:90:1a:7c:c2:4e:
         7b:05:94:29:21:f2:9e:93:d0:47:d0:c1:32:8d:db:9c:1e:fa:
         44:aa:e6:1b:3e:c3:8e:70:20:30:4b:9b:73:88:47:74:6f:b6:
         b3:26:73:72:1c:bf:06:3b:99:f1:96:36:d8:9e:68:13:f0:5a:
         b6:00:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----