This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer (raw, json)
Hash identifier:          QghIT8WPnFK3LcTN2pmvjpq7dCtjzjq0LLo6TshdWZE=
Subject key identifier:   13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7AC896D896D1E444D76BED173B9C457C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 18:18:44 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 195.177.224.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:96:d8:96:d1:e4:44:d7:6b:ed:17:3b:9c:45:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:33:a2:d7:4e:10:c6:c8:80:63:0a:15:00:
                    07:62:0e:f7:0a:de:a0:46:75:c5:23:bf:31:3d:c0:
                    ea:de:81:17:6f:e5:55:8d:4a:a9:24:7b:18:8a:32:
                    b8:f2:2a:07:3c:81:2a:6c:1e:6d:38:1f:c2:73:81:
                    53:47:25:70:ce:25:e6:19:5c:55:7a:ee:e2:3d:dd:
                    a2:ef:00:f1:61:41:06:3e:a8:ad:b4:39:e4:43:87:
                    6a:60:a4:01:61:0e:5d:8d:15:d4:cb:78:4a:7b:7f:
                    80:91:0c:35:61:6e:55:1e:9a:89:54:e6:81:9e:ac:
                    33:43:f8:b4:31:7f:d1:b3:c3:a8:e1:36:f5:c0:cd:
                    9f:da:89:b0:e9:27:bd:b9:eb:7c:2f:fd:fc:45:23:
                    39:1c:b6:53:a1:ad:6d:dc:b7:52:3d:66:d0:a7:86:
                    14:3f:0a:ac:a1:4a:7f:bb:f7:f6:e7:90:06:58:3e:
                    19:87:ff:22:c8:ad:1e:a4:8b:ee:f3:87:00:67:50:
                    e2:39:c4:7c:6c:86:73:7c:94:f2:e7:63:32:f8:60:
                    fb:29:35:ec:be:5e:40:f7:8d:b2:20:82:dd:0e:1e:
                    85:73:50:99:42:26:d3:42:ed:82:76:92:68:0c:e2:
                    6b:55:67:35:0e:84:8e:43:20:3b:27:c7:c2:7f:32:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.177.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:c7:c3:d4:6d:7c:8a:7d:59:97:9d:10:61:41:57:5e:6d:
         b7:27:10:87:5c:e4:9b:4e:bd:97:ed:58:de:cb:01:72:0b:e5:
         71:cc:76:e2:ae:d4:ee:13:f5:36:1e:34:92:de:d0:d9:77:22:
         30:0b:11:5c:d1:00:94:52:19:ee:9f:b0:4b:bc:36:1d:2f:29:
         06:03:38:10:7a:cb:2f:35:2b:42:e3:fe:69:d8:46:29:85:2a:
         b2:6f:78:b3:e3:e7:ef:32:b6:27:aa:d4:4b:58:aa:9c:fd:8b:
         fe:3d:34:2a:f9:93:5d:f3:85:b8:9f:75:0a:96:7a:08:db:cb:
         73:d1:d1:8f:53:a8:d9:6d:71:ae:28:59:1f:fe:7b:1f:c3:33:
         29:fc:7f:a8:db:53:dd:65:b3:a1:79:a9:4e:66:a5:fd:5b:68:
         82:a2:d2:78:df:31:a3:67:b8:05:93:1f:ac:7a:02:af:4c:52:
         35:76:9f:66:51:e0:61:3e:90:e3:88:1f:d3:5f:f6:32:5a:f4:
         d0:07:4c:d6:7b:c3:40:72:dc:4c:dc:01:bd:80:de:12:e0:5b:
         31:67:1c:15:da:cd:e2:03:19:02:d8:5e:e7:3e:08:b4:61:fe:
         15:a9:7f:b3:6c:8c:ce:49:ea:12:29:e3:69:a5:27:41:a5:24:
         ff:9c:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----