This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
File:                     E7T2uQFntxvWY_oDkeA4oBVbuTk.cer (raw, json)
Hash identifier:          8JVraih8ccQn/QmOaK2RPaDBGp2sEbJ5Wt6fNWDrzSs=
Subject key identifier:   13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F13A722444B175C94207D813BB49658
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:19:13 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 210095
                          IP: 85.31.40.0/22
                          IP: 2a0d:da40::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:a7:22:44:4b:17:5c:94:20:7d:81:3b:b4:96:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:83:45:3f:90:2c:43:97:c4:31:a5:9e:f7:
                    da:a5:bc:76:f4:89:ee:92:d8:a6:ed:97:f2:e7:ef:
                    a4:00:68:48:08:12:53:d1:a9:bd:3c:f3:b2:70:75:
                    4f:1f:eb:d7:d4:b9:03:48:4e:61:c0:71:0d:a1:db:
                    cc:bf:fc:09:e8:50:20:2d:5b:44:e7:e4:2a:e6:44:
                    13:f5:d3:72:ef:40:04:d4:9e:12:79:87:06:1e:df:
                    34:18:74:93:bb:c7:6a:a4:c6:a2:1e:01:fa:53:b1:
                    fd:44:2a:2a:4e:83:f3:7b:75:93:1e:58:ac:f4:2e:
                    a5:95:45:cb:ca:30:46:84:1a:51:9c:7d:10:e5:e5:
                    0c:3a:a8:db:03:29:9c:a3:8f:98:73:d4:c0:54:45:
                    f3:e3:c3:af:d5:4e:7e:0f:bf:d5:8a:fc:e8:55:6a:
                    5b:30:3d:4a:f4:80:ca:b8:cb:68:0e:74:d5:40:67:
                    d1:b3:9f:48:00:30:29:7e:0e:97:64:22:c6:7f:8d:
                    04:11:cd:cc:89:89:85:2c:31:e2:8d:b0:32:c2:db:
                    43:c4:80:cd:25:f2:6c:64:44:56:c8:82:50:68:19:
                    c7:96:56:f2:f7:c9:7e:ae:f5:a1:2f:d3:57:62:9d:
                    dc:f0:57:00:1d:91:44:9f:77:09:e7:12:6d:c2:6d:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.31.40.0/22
                IPv6:
                  2a0d:da40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210095

    Signature Algorithm: sha256WithRSAEncryption
         a0:84:a8:09:82:2c:41:e9:13:f5:d2:bd:27:04:65:31:57:ce:
         5b:db:f9:37:44:43:10:4e:2f:6d:ad:a0:b1:44:bf:63:4e:22:
         34:54:ae:1b:49:9a:b8:fc:5a:8b:ea:3a:16:ff:27:2c:f1:a3:
         8b:cd:a5:ab:32:35:38:a0:f6:d3:03:1a:bb:7d:56:2a:1f:0a:
         e5:3e:5f:33:eb:e2:e7:5f:a8:87:d1:f5:4f:75:2c:02:22:98:
         86:b5:27:fa:cc:36:b2:a1:e6:30:02:d4:93:36:fd:f0:a7:5e:
         0d:35:4f:dc:a7:42:35:3e:89:5b:34:26:d9:ba:fc:96:52:1d:
         a9:e0:48:8d:24:69:5a:49:85:fc:55:64:00:63:4e:6d:fa:11:
         68:f3:5e:89:73:7f:b8:4f:de:b9:4b:71:da:82:02:b6:4a:40:
         cc:48:29:37:a6:78:29:44:e0:d3:8c:65:4b:59:f6:eb:52:69:
         6d:59:9c:ca:a2:00:e3:3b:7c:7b:7b:3b:27:63:36:55:0f:50:
         92:cf:42:40:00:b0:12:f5:a4:81:28:ef:af:da:dc:03:09:ea:
         d4:d7:ff:40:aa:da:ca:e0:0f:44:2e:f7:ce:3d:46:e8:96:72:
         01:b0:2d:4f:0b:af:7a:75:43:56:dc:9d:3a:74:1f:41:bf:9e:
         17:d8:52:0b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt/E6ciREsXXJQgfYE7tJZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2I0ZjZiOTAxNjdiNzFiZDY2M2ZhMDM5MWUwMzhhMDE1NWJiOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV2DRT+QLEOXxDGlnvfapbx29Inu
ktim7Zfy5++kAGhICBJT0am9PPOycHVPH+vX1LkDSE5hwHENodvMv/wJ6FAgLVtE
5+Qq5kQT9dNy70AE1J4SeYcGHt80GHSTu8dqpMaiHgH6U7H9RCoqToPze3WTHlis
9C6llUXLyjBGhBpRnH0Q5eUMOqjbAymco4+Yc9TAVEXz48Ov1U5+D7/VivzoVWpb
MD1K9IDKuMtoDnTVQGfRs59IADApfg6XZCLGf40EEc3MiYmFLDHijbAywttDxIDN
JfJsZERWyIJQaBnHllby98l+rvWhL9NXYp3c8FcAHZFEn3cJ5xJtwm34YwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBO09rkBZ7cb1mP6A5HgOKAVW7k5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzllODg0
ZS0xN2U0LTQyNzEtYWM4OS1jYjNmYTQwN2UwZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvOWU4ODRl
LTE3ZTQtNDI3MS1hYzg5LWNiM2ZhNDA3ZTBmNC8xL0U3VDJ1UUZudHh2V1lfb0Rr
ZUE0b0JWYnVUay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCVR8oMA0EAgACMAcDBQMqDdpAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM0rzANBgkqhkiG9w0BAQsFAAOCAQEAoISoCYIsQekT
9dK9JwRlMVfOW9v5N0RDEE4vba2gsUS/Y04iNFSuG0mauPxai+o6Fv8nLPGji82l
qzI1OKD20wMau31WKh8K5T5fM+vi51+oh9H1T3UsAiKYhrUn+sw2sqHmMALUkzb9
8KdeDTVP3KdCNT6JWzQm2br8llIdqeBIjSRpWkmF/FVkAGNObfoRaPNeiXN/uE/e
uUtx2oICtkpAzEgpN6Z4KUTg04xlS1n261JpbVmcyqIA4zt8e3s7J2M2VQ9Qks9C
QACwEvWkgSjvr9rcAwnq1Nf/QKrayuAPRC73zj1G6JZyAbAtTwuvenVDVtydOnQf
Qb+eF9hSCw==
-----END CERTIFICATE-----