This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
File:                     977TP_AejgncT-3NAROcDneFSq4.cer (raw, json)
Hash identifier:          YZp4K7vCSPXiv7TWt83qxo4bbr2Bfw3UUz8gfqtcJN4=
Subject key identifier:   F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E3764D86FC559EDCE60587AE77CC496
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:18:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.70.84.0/22
                          IP: 2a03:3520::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:64:d8:6f:c5:59:ed:ce:60:58:7a:e7:7c:c4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:44:9d:56:c7:cf:73:2f:d9:25:fd:30:38:
                    6c:93:df:f3:ad:7d:63:3f:af:95:18:e5:cc:08:f5:
                    eb:21:98:15:62:7a:8e:bc:86:12:46:03:f3:1c:8e:
                    1d:bd:a4:c4:08:9e:a0:c0:77:d2:6f:a2:a6:2f:fb:
                    0c:d2:8e:36:88:59:72:dc:cd:bd:32:6b:68:74:55:
                    e1:7c:ae:24:d7:7f:11:6d:81:e1:f3:c8:9c:20:ec:
                    5a:70:3b:b1:cc:a0:bf:6d:a8:43:5a:4d:d9:5b:9b:
                    aa:21:64:4e:be:e5:1b:c6:39:3e:8e:0f:dc:79:5e:
                    64:2f:a8:14:95:52:4d:90:b5:52:2d:6f:1c:5d:67:
                    92:a1:75:da:77:b1:9f:95:ff:53:c6:5e:2c:47:ea:
                    8d:21:81:82:46:a5:d5:22:20:5e:96:cf:3b:0f:77:
                    f4:c2:17:fe:d2:6c:8c:b3:05:af:9e:17:9d:4c:18:
                    39:10:fe:3c:a1:b4:95:e0:c7:d8:7a:89:e9:18:4c:
                    f1:35:ca:f4:cc:52:0c:7b:d7:6b:d7:50:a3:ef:96:
                    2f:3f:9e:4c:c9:ff:d8:73:20:3a:13:ed:19:04:31:
                    41:e3:f4:9f:6c:71:7a:ab:a3:c0:2b:62:ff:5e:89:
                    23:81:d3:c9:e6:3b:45:79:1d:e6:84:7b:ed:09:c6:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.70.84.0/22
                IPv6:
                  2a03:3520::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:6d:4b:aa:ff:2c:63:51:06:59:2d:f5:f4:c4:26:30:f7:ac:
         26:74:5c:dc:e7:c6:7e:be:69:fd:b1:87:86:d7:36:c3:26:6e:
         69:15:84:b0:39:2c:f1:48:e8:b9:e5:18:f7:3e:8e:45:cf:2f:
         b0:f9:08:ad:c5:07:bd:70:be:1f:0f:14:02:0b:b5:18:61:7f:
         00:a5:94:d0:48:95:23:e3:82:b3:08:18:79:71:a8:22:bb:19:
         4e:bc:5a:37:cf:22:30:3f:c4:30:78:4a:d1:19:41:c5:23:92:
         69:aa:ae:5c:c2:83:c7:18:18:15:02:55:c1:57:fa:dd:c3:3b:
         71:e1:3c:80:f7:45:41:b2:bd:f3:50:42:da:a0:bb:84:95:71:
         c5:2a:e9:f4:22:6b:33:89:83:d8:b1:d0:a8:af:d9:72:4a:f3:
         6d:7d:e4:3f:d0:4d:e4:27:e4:8f:6f:d0:84:8f:70:74:bc:a9:
         a1:17:43:13:5b:81:3e:e9:77:dc:83:00:09:99:1a:51:2e:73:
         cf:94:3a:cb:d1:f3:4a:71:53:21:e1:20:9c:b5:4c:9a:8a:1b:
         c3:db:5a:ca:3c:86:22:6d:30:fe:5d:f2:49:3b:e8:a6:cf:49:
         15:94:7e:42:ed:95:eb:c1:f1:a4:8a:ba:d2:e8:65:05:e5:8c:
         de:5d:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----