This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
File:                     9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer (raw, json)
Hash identifier:          7TRu6Cxnwae5SYCYgvgcYRieCOUcm+/Cf2l8sr3e2CE=
Subject key identifier:   F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E3877713240E3272CE4F9B3D0B907C9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:19:48 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.235.104.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:77:71:32:40:e3:27:2c:e4:f9:b3:d0:b9:07:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:19:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:20:f7:0d:48:02:53:82:be:32:b9:e7:3d:
                    a3:69:25:c9:76:5c:d5:4b:81:d7:e5:47:17:fe:96:
                    74:fb:b6:70:a5:7f:4e:10:38:40:af:e3:3e:94:07:
                    95:64:02:e3:f8:38:d2:c5:1f:65:94:f3:7d:ec:3e:
                    bf:a9:ca:20:42:a2:0e:ce:5e:05:08:cf:48:e0:04:
                    f8:e3:9c:28:40:49:36:b2:c0:ab:1f:5d:2a:6a:1c:
                    cd:fb:d0:b0:f2:01:f4:ab:30:fe:04:ed:a2:79:bf:
                    2f:85:da:e4:a1:2d:bb:8c:f6:3d:45:51:18:ba:16:
                    15:c1:de:35:13:3e:9f:e1:9b:64:0d:16:8f:3e:5d:
                    30:1e:84:b4:f5:c7:f8:2a:91:26:f4:11:3f:e3:f2:
                    26:ae:b5:4d:0f:24:b2:97:ab:06:ec:35:2c:9f:e4:
                    4d:6b:e0:36:27:c1:44:6c:32:39:04:ea:86:aa:ee:
                    77:db:98:49:04:46:75:1f:ef:ec:f2:39:ed:3f:70:
                    d7:56:07:d1:bd:ee:ea:94:0c:6e:26:d9:23:8c:2e:
                    20:83:10:91:79:cb:92:8f:67:0e:44:50:6a:67:9b:
                    7c:31:de:d8:63:2c:c1:d2:84:05:93:7e:d3:ee:6a:
                    f4:07:9f:97:73:fa:d3:ef:49:3a:3c:ad:32:d2:1f:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:00:86:c7:00:a8:48:55:a5:4e:ca:b6:f0:69:af:e4:97:0e:
         ef:d8:15:b3:72:a8:14:0a:71:aa:3f:35:fb:8c:95:fe:fb:9c:
         05:ec:14:2d:b1:12:80:c5:b2:c8:46:fb:b0:3d:cb:88:d0:79:
         6e:7b:35:72:96:2e:f1:35:51:35:fa:b8:87:0a:40:9a:2d:38:
         e2:3f:1c:e8:f5:c0:90:0e:4f:c9:a2:a2:49:2a:6d:a7:7d:7b:
         52:76:a7:83:0d:60:66:f4:6a:27:f6:3a:82:36:a4:b5:d7:cc:
         cb:45:bd:c8:8e:3f:48:a2:86:f0:aa:e9:37:60:32:16:11:0b:
         c1:e5:d2:f1:51:ed:15:53:d4:a2:ab:1d:33:92:02:00:8e:c1:
         ca:fc:48:5d:88:9d:f8:42:ae:aa:e1:3e:98:16:b1:8c:8e:c5:
         20:83:87:ed:2a:a8:9c:01:3f:39:f0:72:3a:53:78:c0:a4:62:
         8e:7d:3d:9f:47:4e:60:0b:53:ae:51:e4:ed:89:13:2b:e4:8f:
         ed:3b:c4:95:9d:9b:58:da:84:c1:34:dc:cd:55:79:bc:c3:17:
         9a:b5:ef:5f:2d:12:2f:5c:c1:af:60:d9:86:26:17:e6:2e:4f:
         3d:a9:ec:fd:63:66:11:28:9e:15:df:10:8d:fb:e3:e6:ea:12:
         ae:19:f0:81
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZt+OHdxMkDjJyzk+bPQuQfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjk1MjdhMDZhMDM1Y2JjYWVjZjAwZGFjYTJmZDg4Mzk5Y2Y5ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSgg9w1IAlOCvjK55z2jaSXJdlzV
S4HX5UcX/pZ0+7ZwpX9OEDhAr+M+lAeVZALj+DjSxR9llPN97D6/qcogQqIOzl4F
CM9I4AT445woQEk2ssCrH10qahzN+9Cw8gH0qzD+BO2ieb8vhdrkoS27jPY9RVEY
uhYVwd41Ez6f4ZtkDRaPPl0wHoS09cf4KpEm9BE/4/ImrrVNDySyl6sG7DUsn+RN
a+A2J8FEbDI5BOqGqu5325hJBEZ1H+/s8jntP3DXVgfRve7qlAxuJtkjjC4ggxCR
ecuSj2cORFBqZ5t8Md7YYyzB0oQFk37T7mr0B5+Xc/rT70k6PK0y0h9GcQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPaVJ6BqA1y8rs8A2sov2IOZz50SMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2Q0NTUz
MS1kNmM4LTRkY2UtYjYwNi04NWM4NTUyMjdiMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZDQ1NTMx
LWQ2YzgtNGRjZS1iNjA2LTg1Yzg1NTIyN2IyMy8xLzlwVW5vR29EWEx5dXp3RGF5
aV9ZZzVuUG5SSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuetoMA0GCSqGSIb3DQEBCwUAA4IBAQA5AIbH
AKhIVaVOyrbwaa/klw7v2BWzcqgUCnGqPzX7jJX++5wF7BQtsRKAxbLIRvuwPcuI
0HluezVyli7xNVE1+riHCkCaLTjiPxzo9cCQDk/JoqJJKm2nfXtSdqeDDWBm9Gon
9jqCNqS118zLRb3Ijj9Ioobwquk3YDIWEQvB5dLxUe0VU9Siqx0zkgIAjsHK/Ehd
iJ34Qq6q4T6YFrGMjsUgg4ftKqicAT858HI6U3jApGKOfT2fR05gC1OuUeTtiRMr
5I/tO8SVnZtY2oTBNNzNVXm8wxeate9fLRIvXMGvYNmGJhfmLk89qez9Y2YRKJ4V
3xCN++Pm6hKuGfCB
-----END CERTIFICATE-----