This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer (raw, json)
Hash identifier:          pTnikBt9+MKC2bLwmr0XAoYKsiwmvigPnq1coU2TgjM=
Subject key identifier:   DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C806BEA511D8F62BFD1D673231F0CF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 02:19:09 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 206313
                          IP: 45.154.108.0/22
                          IP: 2a0f:b500::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:6b:ea:51:1d:8f:62:bf:d1:d6:73:23:1f:0c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:46:d7:df:36:fa:09:0a:0f:33:03:a2:d9:
                    1d:fe:4f:76:8f:1d:64:b3:85:a5:05:2f:7b:e9:be:
                    35:d1:a6:e9:f7:19:c0:c4:ef:f3:65:53:da:84:4f:
                    15:72:fa:26:7d:2d:f4:bd:dc:a3:f1:01:63:de:80:
                    6b:18:1c:ec:e8:58:72:61:39:79:5b:10:b1:e8:19:
                    f1:d3:3e:24:f3:1a:93:d1:59:da:ff:6c:ca:a5:77:
                    67:02:32:ca:8b:4c:8c:bf:9e:18:91:24:6f:a5:38:
                    9f:0d:ec:93:c9:6f:be:69:1b:0a:2e:55:cc:f5:e0:
                    20:0b:a2:f1:a5:88:00:e1:da:bc:5c:76:51:78:fb:
                    e6:f9:7d:e4:87:6b:d4:57:16:31:a0:23:ce:86:ca:
                    87:b3:37:72:03:36:a8:24:7e:7c:c2:cf:ea:60:22:
                    29:de:9d:36:f1:df:6d:ab:c7:cf:33:82:d8:23:f0:
                    86:bd:1f:e2:b9:7e:1b:84:79:f3:2e:b2:7b:89:56:
                    bb:5e:38:9f:98:1c:3b:d1:74:c8:c6:4a:17:be:cc:
                    45:f4:31:aa:56:ca:72:97:74:47:a0:71:da:97:53:
                    a0:d0:d4:75:18:e9:d2:51:67:88:a5:35:7a:65:2e:
                    b9:24:dc:b1:db:89:2b:31:68:39:07:89:da:ca:a9:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.108.0/22
                IPv6:
                  2a0f:b500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206313

    Signature Algorithm: sha256WithRSAEncryption
         70:26:c1:86:67:c0:23:fd:29:f3:18:b2:5f:24:47:bc:63:bc:
         1c:82:22:69:b1:69:1b:f9:13:c9:fe:c5:2e:cb:0e:69:95:5f:
         8a:4f:6a:3b:04:6c:4e:3a:ad:81:d1:db:0a:1e:c0:43:c0:77:
         63:0e:3e:3a:d8:23:83:a3:ad:eb:a7:9e:6b:47:bf:c1:0d:ec:
         79:26:e5:09:af:61:a9:86:b6:3d:1f:90:2a:f2:a5:cd:a5:4f:
         91:8b:74:6f:45:2d:66:36:a8:0a:f2:e2:f2:32:a6:82:50:1a:
         a8:7b:53:7c:c2:46:aa:93:02:20:48:f2:9b:1d:56:98:bb:c6:
         ed:af:12:0e:f5:26:af:3a:a1:1f:a0:67:df:21:43:30:6f:16:
         57:4a:2f:1b:4b:88:05:27:da:61:50:47:38:82:03:52:61:95:
         75:62:d5:6f:b6:23:78:cc:ec:c8:d1:e4:16:a2:fe:85:9b:3d:
         b5:61:7b:d6:36:7d:8a:c6:33:ef:c6:e5:b1:68:8c:6b:70:c6:
         7d:86:e0:81:0b:6f:9f:67:82:09:aa:ce:75:fe:02:36:6e:29:
         d8:bd:bd:6c:83:c4:16:d0:d0:ba:2f:f9:d3:7a:bf:7e:61:fd:
         a8:9a:ea:e6:a8:c3:85:2c:e9:19:5a:80:ee:96:56:12:49:af:
         9a:22:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----