This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
File:                     B94YU-WWYfkI4iaVDL3FK5f2IRM.cer (raw, json)
Hash identifier:          D1JjIj3cvgWUsoxLxFjImS2yc2uQUQkpg6RLpLk2BMU=
Subject key identifier:   07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E390F235B90EB396345AC1CA908B312
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:20:27 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 212.115.120.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:0f:23:5b:90:eb:39:63:45:ac:1c:a9:08:b3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:20:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07de1853e59661f908e226950cbdc52b97f62113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:01:01:e3:f8:ab:c1:e8:03:5b:be:05:30:73:
                    1b:3c:14:86:d0:c9:c1:52:e1:13:90:25:28:86:7b:
                    9f:c4:00:c6:9e:35:97:4e:52:95:ba:a9:ba:b4:59:
                    b5:b1:fc:7e:5f:c4:59:78:8e:fc:0c:51:32:77:a3:
                    26:de:0e:1a:02:4c:de:0a:dc:60:28:ec:9a:2d:2d:
                    b9:0e:5a:9b:81:27:47:d3:75:08:05:74:65:ea:03:
                    28:3c:14:14:70:05:b5:e0:35:56:c1:80:53:e4:1e:
                    e6:fa:59:cc:36:63:f8:85:cf:8a:96:8e:2c:45:39:
                    91:3b:78:9c:af:6d:7f:24:46:ac:07:db:13:4b:1d:
                    21:97:98:3a:1b:11:b5:ca:57:f7:4c:90:ac:8a:f7:
                    43:9c:33:0a:45:cd:e2:0e:4f:59:75:ff:ff:40:82:
                    7e:1f:36:86:e5:e9:c8:78:9c:d7:83:8f:d6:c7:e9:
                    d5:59:06:aa:fe:dd:f3:e9:d4:1c:8e:df:cc:62:dc:
                    87:44:ca:85:4f:83:e6:cf:5a:03:16:77:4c:a2:86:
                    9d:f9:69:49:3e:5b:2c:bf:13:8d:62:88:78:19:7a:
                    a0:03:30:6b:22:73:06:39:e9:d0:e6:cb:ff:fa:20:
                    04:ad:72:53:dc:e8:39:26:bd:d7:25:8d:ff:62:cf:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:10:21:f9:01:b2:1e:55:94:84:b5:07:86:57:f8:b3:db:ee:
         e2:29:3c:01:5c:2f:d1:6e:76:11:f5:bf:10:ef:0b:e1:36:1a:
         12:80:b3:5e:bc:88:5b:d1:04:ea:63:1e:30:1d:fd:13:2a:f3:
         e0:d8:cd:23:c4:d5:57:9e:a6:43:74:64:17:e3:f8:e0:83:08:
         2b:0d:44:44:53:29:b0:40:85:c7:96:5b:4a:5c:6e:25:15:73:
         ff:88:bf:71:ca:9d:0e:6b:a7:2e:73:45:9c:98:8c:9c:b1:84:
         dd:d8:8f:71:69:44:e7:21:8f:80:2a:ad:cd:ca:9e:ac:a5:dc:
         d9:83:4e:f9:1e:80:3f:0f:13:b5:ef:2f:55:57:2b:82:63:89:
         ab:33:6c:cf:6b:f4:bf:16:02:ac:ed:c1:21:f8:03:4d:a3:83:
         b4:a9:16:1c:f5:53:ff:b2:4c:5b:3e:b6:7b:97:6e:c5:c2:83:
         ec:05:c6:3c:e1:a2:d3:d3:2c:ee:27:56:7b:e1:65:0b:32:6b:
         ed:44:50:9d:c7:d4:3b:84:c2:64:25:74:29:43:c5:ee:b9:9e:
         62:3f:59:c8:b4:13:50:bc:0f:93:b3:94:7b:d7:08:7d:ad:eb:
         4c:47:c2:c0:be:78:a8:58:c7:ae:bc:bd:3f:be:fc:45:d8:61:
         f7:3c:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----