This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
File:                     3EtKGKfhUaN9peTM2qnn29iOnZM.cer (raw, json)
Hash identifier:          rAmzAsvaGyW5BBRJj/nYsCy/6vXiugIvbIhknUesUFg=
Subject key identifier:   DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79EC4EEBE7AE67DC0EE793330E27A652
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:18:08 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.5.50.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:4e:eb:e7:ae:67:dc:0e:e7:93:33:0e:27:a6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:92:8f:f4:8f:d9:b3:a0:b0:ba:fe:4e:6e:
                    78:8d:e8:94:79:ae:cc:b9:cc:71:5c:53:44:58:0b:
                    1c:3f:c0:93:e1:13:14:07:9c:0d:56:00:7c:3f:46:
                    fb:0f:c6:6c:46:6d:0e:a5:91:0b:fb:f2:84:dd:0c:
                    5a:ad:05:c1:da:a4:d0:1c:61:ff:b4:da:64:db:b5:
                    65:62:ba:dd:f5:68:5c:25:7e:37:12:89:28:df:f6:
                    a0:d2:b9:d2:f4:01:fe:5e:70:8a:5d:1e:5d:06:92:
                    1a:6e:ec:29:5e:90:a3:bc:6c:8c:55:2b:14:b2:24:
                    ca:c2:b4:10:a5:bc:25:22:21:70:70:d5:4e:90:57:
                    23:fa:8d:d9:b5:52:bf:09:12:79:3a:41:dc:2d:f9:
                    cc:10:56:17:db:02:69:99:27:50:b5:12:ba:d8:6b:
                    91:cc:30:98:38:20:38:e7:a3:2e:c0:4e:86:55:30:
                    08:8e:08:15:b5:0f:64:6f:dd:f8:04:2a:15:00:17:
                    2e:de:5c:52:1b:3b:ab:fd:d1:ab:c2:bb:d1:e8:c2:
                    2c:a0:70:d2:1d:16:13:3f:1f:2d:b6:b2:22:bc:65:
                    d6:47:50:27:fb:d5:b9:c8:e7:76:65:76:04:b1:7d:
                    70:7d:ca:e0:1d:1c:88:dd:4b:db:c0:96:4b:59:a0:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ca:6f:65:a4:d7:9f:4e:dc:fa:5b:1c:35:2d:59:20:da:bb:
         fa:36:a7:ff:ce:de:2c:ac:e2:e8:7d:76:be:c7:d5:92:e4:58:
         5c:19:90:ef:2e:35:2e:ce:ab:59:26:66:aa:6b:a8:13:b2:25:
         00:e6:4f:3b:f3:39:6a:1a:db:d0:a1:8a:5e:c6:39:60:62:6c:
         9e:51:b0:2a:78:2d:5a:90:89:17:32:50:c2:5a:0c:86:ed:bc:
         76:b6:18:1c:6e:01:c2:5d:aa:d2:57:00:e9:0a:c8:a3:93:e7:
         75:d6:82:e0:6a:3f:19:ec:7a:26:d1:1d:4b:6c:da:20:f5:7d:
         9f:8c:d9:08:a0:e9:59:0c:f2:bd:4e:a2:15:13:e4:a2:79:f1:
         3e:00:09:1b:2e:2e:88:b9:39:8b:6f:50:54:20:47:7c:a8:ff:
         88:43:f1:64:1b:9c:28:51:09:f4:46:57:29:5e:08:23:e0:cf:
         ff:cb:fb:ec:39:cf:0b:af:60:23:2d:e9:8e:ee:a1:4b:9e:6c:
         e6:45:8a:d1:a2:75:a2:91:c1:6f:77:72:83:13:ca:eb:0f:a9:
         62:4b:38:62:fc:dc:e6:b5:83:0f:24:36:00:20:7a:35:9e:b6:
         ba:c5:61:b2:22:77:66:6c:40:96:ae:99:50:f2:e9:65:66:9e:
         88:38:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----