This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
File:                     29f8UFSCh96up86SCZ5HoEpw1FE.cer (raw, json)
Hash identifier:          xuIcEhGuieXwTIVexfDykVM7SURdSVYR7yRdFGjWBTE=
Subject key identifier:   DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F15BFAD11BC92582D515DF17071A603
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:21:30 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.73.224.0/24
                          IP: 2a10:f80::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:bf:ad:11:bc:92:58:2d:51:5d:f1:70:71:a6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:21:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:0d:49:6c:fb:ec:d2:cf:de:1e:66:d3:f6:
                    f3:38:60:f8:93:43:e8:5e:ab:c9:47:77:d6:08:07:
                    23:a9:c3:f1:dc:3f:9f:7a:ae:95:70:a0:13:3b:a6:
                    da:8b:34:73:aa:f9:c2:cf:3e:07:b4:79:05:8b:68:
                    59:60:09:3b:a5:ca:81:c4:31:0c:d7:74:90:6f:57:
                    b4:74:43:b4:fe:21:d8:cc:77:51:e2:3c:8e:11:d8:
                    d8:8b:0b:57:72:83:a9:86:8c:9e:1b:10:8f:22:76:
                    3e:4f:cf:66:0a:92:ac:d6:ac:be:c7:5d:83:21:0d:
                    25:84:13:28:12:61:a2:bd:86:14:50:77:82:e9:3b:
                    7d:16:32:be:11:c7:21:86:e5:36:53:82:f4:de:ec:
                    7d:1d:ca:83:25:f4:27:f1:ac:bc:ac:fc:36:15:1d:
                    31:6e:1f:20:6f:e9:26:95:15:f3:34:e2:88:e8:a8:
                    72:ca:7b:21:3e:a3:fa:0b:23:82:e6:ba:5a:fe:00:
                    27:16:76:dc:3d:4c:81:ca:8d:28:2d:56:71:38:b7:
                    51:dd:9b:ff:79:cf:86:f4:bf:57:59:5c:c6:0c:6d:
                    c9:f3:34:be:7e:88:ae:fd:92:a7:ff:88:92:23:c9:
                    ca:04:80:a9:fb:4d:c2:56:24:0b:15:90:22:e6:38:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.224.0/24
                IPv6:
                  2a10:f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:57:2f:0f:e0:ef:fc:b5:09:01:79:46:6e:99:2b:d8:d4:9c:
         be:00:ca:ec:78:db:96:b1:fa:e0:a5:51:71:65:99:12:5b:4c:
         9d:24:1f:2a:d7:4a:18:be:f9:af:c6:0f:11:26:ce:10:32:ef:
         f9:a9:1f:7d:64:ea:c1:36:7c:ed:4f:e1:ad:10:ce:37:ea:b6:
         8a:61:35:08:8a:69:38:35:2a:e4:9b:d6:ea:30:22:2b:92:ab:
         4c:70:e5:44:09:cf:fa:f0:ba:06:5c:82:20:a2:28:0d:e4:d4:
         67:90:b4:af:69:b5:99:d5:64:d1:14:04:d9:9a:ae:59:9a:61:
         80:02:df:1f:9f:82:37:22:6f:cc:96:c3:b2:73:7c:83:48:75:
         20:1b:9a:bd:40:09:cc:48:06:bd:64:72:fa:c7:2f:9c:2d:ef:
         3f:c8:82:9c:c7:bd:e1:7d:1e:e5:f6:d0:f8:59:a0:ca:8c:fd:
         5b:34:b0:31:52:69:a5:c8:9e:03:ea:45:0a:30:ac:cd:5d:fa:
         68:fe:d4:06:d9:32:e4:8b:71:ac:d1:ba:2f:10:b4:cb:38:19:
         de:68:0c:59:44:9e:fb:14:5e:f3:55:5d:1d:34:cd:93:d0:83:
         d6:36:71:3b:35:24:57:5a:cb:2c:64:29:10:d7:71:d1:13:64:
         26:dd:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----