This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
File:                     6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer (raw, json)
Hash identifier:          LLCtxQ4m7URovLW/Ak73Sd4osoncviReuXasp5pHMWA=
Subject key identifier:   E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7B356E7B7FCB2CA005C03884463D32A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 20:17:37 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 176.120.17.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:6e:7b:7f:cb:2c:a0:05:c0:38:84:46:3d:32:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:5f:25:85:e7:e0:a7:61:f4:59:a1:cf:6e:
                    d2:74:87:f8:a8:67:d7:14:d4:8c:80:67:00:c7:f7:
                    73:eb:9d:ff:d4:83:40:f2:eb:46:c5:86:50:25:d8:
                    7f:79:15:c5:49:e3:df:fb:cf:53:17:98:2b:9e:db:
                    91:00:e9:c2:d9:ed:1b:2b:af:84:73:32:b0:e9:4c:
                    ea:8d:5f:eb:e7:19:d9:51:60:61:fd:bd:c4:65:7f:
                    b1:41:08:07:54:0a:94:9a:7c:0d:d3:21:21:44:44:
                    80:7a:47:cd:81:85:0b:0c:c5:b9:7d:89:26:e7:8b:
                    0f:a9:53:99:02:e7:31:09:f0:c7:58:c3:6c:95:c2:
                    4b:ea:85:b3:41:a7:24:87:de:4e:49:2d:48:3b:62:
                    56:55:78:d8:0c:c7:49:29:98:94:d9:8e:21:8c:8b:
                    3b:57:8b:dc:e0:a8:7f:9c:bf:c1:10:39:f1:2b:d3:
                    69:bf:66:ea:f0:91:92:0d:10:74:be:c4:3c:33:4b:
                    9c:dd:8b:4a:da:a0:1b:49:69:f0:5b:4b:59:c4:6b:
                    64:df:62:2f:91:b9:68:5f:6a:0f:a7:3f:cb:69:3b:
                    96:c3:ce:b3:b1:41:2e:c6:7e:ae:0c:c3:2a:ae:c3:
                    0c:9f:eb:a3:33:33:4e:57:56:c4:96:13:2f:45:75:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.120.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:6d:d5:1c:80:44:85:ce:23:c4:3e:eb:bd:0d:47:3b:36:bb:
         83:42:df:fb:b9:da:e9:43:44:12:8b:99:93:45:cd:00:e5:f8:
         39:7e:5c:cf:53:f9:3c:36:db:53:bd:e9:cd:4b:f5:54:8f:1d:
         35:19:ff:4d:1f:ee:de:2c:8d:15:b8:c7:14:5b:f9:42:42:48:
         61:27:34:e0:51:2f:4e:e6:1e:bb:58:ee:1e:70:00:1a:16:df:
         99:39:a4:6a:2a:f4:11:7b:10:10:95:cc:3f:e0:5b:00:43:a0:
         de:2c:8a:7c:05:cc:9f:25:95:46:f6:7c:2b:e4:6c:79:9a:93:
         4d:1e:8f:08:f8:27:b5:94:01:1d:eb:3c:fc:c8:a5:17:69:7a:
         91:85:c7:c0:a8:18:37:e4:3e:16:b8:bc:7a:f9:b3:f2:2e:2c:
         34:64:ad:40:c7:a9:ca:de:3f:7d:f3:2f:f9:b1:68:e3:a5:c1:
         d3:af:74:93:6c:a4:b0:a1:f5:ed:b1:f3:b3:49:45:9e:15:e5:
         60:5f:6e:6a:5c:d3:c6:be:b2:7d:6e:d7:eb:4d:dd:62:f1:6e:
         e4:62:33:a2:5e:19:a4:be:a9:ad:20:25:24:d1:7d:fb:c3:ed:
         62:3f:72:5c:b8:c5:93:39:9e:b9:1b:d4:7f:9b:76:47:fe:62:
         4e:82:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----