This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.cer (raw, json)
Hash identifier:          t8wUixAm+3ICscT6G1JKeY7Jnz+sqMgHHvwLpjJS/d0=
Subject key identifier:   E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA39BF8138E9561E2E979CC47894D43
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:17:58 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 91.232.82.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:9b:f8:13:8e:95:61:e2:e9:79:cc:47:89:4d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:b9:6b:eb:b3:e0:c2:0f:ad:71:93:56:e3:
                    60:b8:d7:45:8f:f7:75:ac:76:a8:eb:37:6d:c0:84:
                    a4:b2:6a:da:7b:14:3b:af:76:e1:95:9f:32:a5:5e:
                    be:06:42:ff:fc:df:86:fc:ec:8d:39:d7:5f:56:ac:
                    07:b0:50:29:94:d8:33:9f:a1:e4:33:c2:79:e0:a3:
                    31:a4:a8:89:d3:dd:4b:51:09:43:29:5d:36:18:71:
                    1e:59:b3:68:60:d7:74:dc:a8:23:38:80:24:6c:d4:
                    ae:2a:01:8a:60:1a:d6:b8:d0:41:db:48:57:23:10:
                    c8:b8:3b:f4:ac:2e:ea:c1:9c:80:a8:42:fc:3f:43:
                    b8:4a:df:88:d7:ea:c9:54:6b:bc:9c:96:b0:fe:96:
                    16:b4:14:3f:c8:72:ba:86:d7:ef:dc:68:7d:2a:1c:
                    2f:82:24:a8:21:a3:f7:1c:db:d6:12:d2:6a:65:29:
                    ab:07:dd:87:18:64:2d:41:ef:c3:c5:e8:1d:d5:6d:
                    31:18:a0:7e:53:c8:db:7f:ef:e1:42:5a:55:bb:71:
                    60:02:ff:ab:3b:ad:8d:8f:dd:dd:cc:ef:00:04:d5:
                    33:17:49:c7:47:03:73:36:21:26:92:b4:96:52:9d:
                    39:fd:72:7a:29:b6:d6:2e:b9:ba:92:a6:d6:12:a9:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.232.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f3:28:cc:7b:3b:89:0b:99:19:3a:03:2b:06:c5:97:82:ad:
         d7:60:9e:b0:77:06:09:27:ec:f3:95:99:96:c5:2f:6b:02:13:
         4c:20:c7:1e:57:cc:e5:d3:c5:86:02:60:5b:8f:c0:f7:e9:28:
         8e:47:f8:99:6d:be:68:fa:a1:7a:8a:1f:84:92:83:ad:78:49:
         20:f9:fc:de:e2:b9:51:f3:96:21:d8:a8:f8:6f:8f:b0:9a:65:
         a5:8a:ec:3c:27:42:78:ed:aa:00:5d:07:13:50:ea:3d:12:2d:
         2f:11:3a:16:13:45:c8:c7:d1:2c:e2:71:a8:19:59:40:05:d9:
         81:3e:80:19:d5:79:d2:bf:9d:bf:9a:55:47:fd:7b:1d:e0:a9:
         aa:d8:1b:b1:07:68:e5:25:f5:ec:ba:91:2c:0f:e2:de:2b:7e:
         8c:74:ec:57:f2:5f:19:f5:61:a4:3c:81:90:d1:cc:8c:72:94:
         b0:6b:d8:06:3c:d7:cd:8b:8f:6b:2e:af:7a:d0:f3:32:a7:6f:
         ec:1b:29:28:19:b3:97:8a:7a:45:d3:9f:33:6d:ab:92:a5:75:
         9a:36:d3:fb:d0:a1:37:d3:6c:44:5b:13:60:5f:aa:84:d3:0a:
         87:38:65:48:0a:07:91:3e:7c:f8:12:a2:8c:40:f6:76:b5:8c:
         e8:f5:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----