This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
File:                     zpTDHhXfS3pg5dQN86rBhS6Np0s.cer (raw, json)
Hash identifier:          95ehS6qcCq/Fz9P3UuvWkELW0PPVB5y6Hp5YVRc91KE=
Subject key identifier:   CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F82B8D3615BD8897A617F9895373E39
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:20:32 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.178.156.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:b8:d3:61:5b:d8:89:7a:61:7f:98:95:37:3e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:20:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:ca:c0:d4:4a:0a:08:63:ec:93:f8:ed:10:
                    ab:d3:83:f5:16:74:13:88:39:45:a8:9d:b9:86:f1:
                    3b:3f:5d:4d:36:b1:48:eb:aa:e1:a5:11:b1:36:3a:
                    0b:ed:1c:51:0f:10:1b:13:b0:4b:ab:3b:48:1b:45:
                    9c:82:42:7e:fe:04:50:c0:6c:05:9c:49:ca:47:35:
                    81:a8:f4:58:f8:89:84:bf:19:aa:b3:e7:0b:af:c5:
                    f5:97:f6:97:29:93:a3:19:0e:d4:3c:e2:53:af:0d:
                    e3:00:81:8a:00:36:d8:bf:45:b8:6a:a3:a3:e7:e0:
                    fb:6b:e9:28:39:51:ff:5f:3d:43:87:84:46:ad:f1:
                    01:bc:fb:d1:d4:74:e0:05:da:fa:a6:c2:67:2d:3a:
                    d1:17:11:9d:ea:0f:c0:d8:0b:93:13:41:aa:1d:db:
                    4b:3e:95:85:78:0f:b2:6d:98:9e:93:61:ca:e1:e0:
                    cd:8b:cb:d9:d5:cc:23:69:bf:35:e8:5a:6f:d8:37:
                    7c:bf:b9:9d:aa:e2:61:4c:5f:de:74:56:35:31:1a:
                    e6:a9:13:9f:d5:87:a7:3a:c1:d5:c7:ca:1b:6d:34:
                    23:af:09:c2:18:d0:74:8c:b0:9a:cd:8f:68:63:3e:
                    a2:4f:da:2f:0d:46:99:a6:6d:8e:2a:34:3c:f9:cf:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:12:d8:65:40:43:3c:c3:3f:65:44:2d:c3:fa:36:70:0b:eb:
         4c:d7:db:07:09:cc:3e:45:5e:4c:08:58:2b:42:19:2f:d8:64:
         35:f5:53:0d:1b:46:1c:ac:7d:78:33:f3:97:cd:dd:7c:eb:e8:
         e7:8d:c6:0b:0e:99:9d:b2:43:64:8b:fb:2a:33:04:1c:0b:a5:
         7c:ff:40:ec:d6:cb:84:17:72:80:ae:d2:39:b8:78:3b:0a:5d:
         79:d9:6f:b3:1c:e9:eb:ea:d5:69:41:65:2e:e8:b6:37:32:24:
         c5:13:b7:12:44:95:1f:89:30:6e:98:7e:ce:8b:4c:be:2c:85:
         18:5c:14:b0:96:e9:5e:ec:13:e9:7a:71:2f:b0:a3:2d:25:25:
         b4:fb:bf:93:d3:ac:1f:9a:0d:a7:c3:c2:5c:b0:19:6a:f3:eb:
         2a:54:71:0a:3e:a1:25:d5:03:32:95:0d:e0:3d:16:47:d2:42:
         ea:e7:aa:7f:5c:bf:05:99:07:7e:51:a5:bc:9a:05:c9:b8:29:
         0c:2f:27:14:52:d0:6e:9b:2e:d6:8b:a7:17:3e:91:93:09:63:
         73:1e:80:7e:f2:5c:1a:25:80:9a:43:3c:3d:15:f1:8d:04:5c:
         9b:8d:d8:44:51:f8:87:e4:25:df:8e:c8:67:f3:d8:f6:3b:ba:
         a8:ba:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----