This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
File:                     CPRr-iBG-8mOYn9ANIMnESO-ygo.cer (raw, json)
Hash identifier:          e1e59it4i4g0VzGqVDzit2RlAg2ZayKwHOMO6qhLh40=
Subject key identifier:   08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019A9374F2A6DFE733543C8048503A47E75E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Nov 2025 20:15:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.196.107.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:93:74:f2:a6:df:e7:33:54:3c:80:48:50:3a:47:e7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 17 20:15:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=08f46bfa2046fbc98e627f403483271123beca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:c1:ec:5b:68:f0:b3:2e:a6:4d:40:0d:4d:
                    0c:34:3a:90:c1:b9:96:90:34:e7:96:29:1a:1c:04:
                    37:9b:f6:2e:31:a9:a8:5f:c6:7e:99:81:66:aa:41:
                    4d:c8:c3:43:4c:a6:b1:5d:0d:3f:48:90:93:d5:7e:
                    38:70:24:1d:d7:97:b6:54:6d:2e:c2:c6:75:64:ba:
                    34:69:d2:b5:cc:38:0c:ad:d8:f7:11:69:f6:7a:fe:
                    c1:ed:a4:7e:05:02:a1:b2:15:94:fd:9d:e8:27:b0:
                    a5:0e:83:bb:55:47:39:26:0b:aa:5d:a2:54:19:8b:
                    fc:8b:c1:fa:03:4c:40:85:00:4a:09:f5:c9:a6:22:
                    32:36:58:1c:da:10:bf:af:a5:83:ed:51:55:e6:f8:
                    97:fe:d4:87:a3:b7:cf:f7:90:4b:c4:2a:c8:78:03:
                    f2:3d:96:d5:f1:75:d2:d4:06:a1:42:96:cc:1b:cb:
                    53:1f:07:08:e8:4c:ba:36:14:eb:10:ce:7a:dc:20:
                    dc:c6:69:65:c7:24:7e:a6:4c:18:ac:ea:b8:54:08:
                    c6:02:d3:b1:78:bb:be:e7:80:26:54:e2:da:5f:70:
                    8a:e7:e2:8c:81:57:4d:1d:ae:17:3e:5e:74:5e:09:
                    25:49:a3:96:59:ea:13:e9:18:9d:19:07:f5:c0:91:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:8e:ca:96:14:47:a9:1a:8c:89:d5:c5:5c:77:f6:8d:03:
         86:c2:e0:00:62:c6:91:dc:5f:90:e2:64:fc:10:84:1f:19:90:
         e5:21:03:39:08:d4:3b:a7:4e:21:65:ca:fe:0e:3f:06:e8:f1:
         cf:a0:42:cc:64:ec:47:a1:97:fe:dc:0e:6d:1a:67:34:d3:1d:
         e1:f2:10:0b:ae:a8:73:b4:76:01:f2:82:88:69:ce:57:15:60:
         01:90:90:bf:46:4c:14:6c:d9:ab:20:c4:1a:23:39:05:74:93:
         8a:03:0d:62:67:50:f2:b7:d1:d3:95:e3:74:03:3c:6c:d3:b6:
         83:a3:1d:22:2c:29:65:ca:05:27:16:c3:a1:a8:08:21:11:66:
         64:29:a0:76:3e:3b:d8:3d:4d:70:1f:be:0e:f9:c7:68:af:25:
         ae:b7:4f:73:f8:2f:26:be:1d:e9:b8:2c:50:e0:b5:36:aa:27:
         a1:7e:4e:4a:f1:02:f4:65:c1:a5:d5:ab:aa:8f:c0:52:02:a3:
         19:42:35:cf:67:64:80:8c:51:fb:e5:7f:08:e5:1d:8b:ae:70:
         03:1c:b4:21:99:c9:cd:61:5a:4c:75:be:f4:11:a7:f6:86:91:
         23:a3:51:4f:92:43:95:8b:4e:0f:4b:fd:c4:fb:e8:80:a2:04:
         f9:ba:45:36
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZqTdPKm3+czVDyASFA6R+deMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMTE3MjAxNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGY0NmJmYTIwNDZmYmM5OGU2MjdmNDAzNDgzMjcxMTIzYmVjYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxETB7Fto8LMupk1ADU0MNDqQwbmW
kDTnlikaHAQ3m/YuMamoX8Z+mYFmqkFNyMNDTKaxXQ0/SJCT1X44cCQd15e2VG0u
wsZ1ZLo0adK1zDgMrdj3EWn2ev7B7aR+BQKhshWU/Z3oJ7ClDoO7VUc5JguqXaJU
GYv8i8H6A0xAhQBKCfXJpiIyNlgc2hC/r6WD7VFV5viX/tSHo7fP95BLxCrIeAPy
PZbV8XXS1AahQpbMG8tTHwcI6Ey6NhTrEM563CDcxmllxyR+pkwYrOq4VAjGAtOx
eLu+54AmVOLaX3CK5+KMgVdNHa4XPl50XgklSaOWWeoT6RidGQf1wJFgmQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAj0a/ogRvvJjmJ/QDSDJxEjvsoKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzZlZTJm
NS05ZjYwLTQ3ZGMtOGNkOS1jZDUyNTU3MzMzMDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNmVlMmY1
LTlmNjAtNDdkYy04Y2Q5LWNkNTI1NTczMzMwNC8xL0NQUnItaUJHLThtT1luOUFO
SU1uRVNPLXlnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW8RrMA0GCSqGSIb3DQEBCwUAA4IBAQAon47K
lhRHqRqMidXFXHf2jQOGwuAAYsaR3F+Q4mT8EIQfGZDlIQM5CNQ7p04hZcr+Dj8G
6PHPoELMZOxHoZf+3A5tGmc00x3h8hALrqhztHYB8oKIac5XFWABkJC/RkwUbNmr
IMQaIzkFdJOKAw1iZ1Dyt9HTleN0Azxs07aDox0iLCllygUnFsOhqAghEWZkKaB2
PjvYPU1wH74O+cdoryWut09z+C8mvh3puCxQ4LU2qiehfk5K8QL0ZcGl1auqj8BS
AqMZQjXPZ2SAjFH75X8I5R2LrnADHLQhmcnNYVpMdb70Eaf2hpEjo1FPkkOVi04P
S/3E++iAogT5ukU2
-----END CERTIFICATE-----