This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
File:                     ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer (raw, json)
Hash identifier:          RLGePXNuNviNhxW0ovDRZJ9voI5N/ioWNAZ+G42fM3g=
Subject key identifier:   11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7DCADC37EACA2860234E74FB99A12898
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 08:20:05 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 205113
                          IP: 185.248.204.0/22
                          IP: 2a0c:1500::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:dc:37:ea:ca:28:60:23:4e:74:fb:99:a1:28:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:20:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:ba:8d:8e:52:e8:85:37:ae:1f:2b:a3:c3:
                    85:d1:56:c6:b1:ee:b8:47:d0:98:d1:5e:d3:45:07:
                    c7:4d:07:b6:11:b3:3a:ad:ce:a5:50:50:72:3f:e0:
                    22:cd:ad:63:6e:9b:28:5b:c2:f0:c6:b8:2a:a2:f3:
                    17:b6:d5:a2:55:79:a1:00:62:f9:7d:3c:5e:33:89:
                    ba:f4:1b:d4:a3:30:19:fe:90:3d:6c:69:dd:40:b5:
                    f2:0b:b7:46:b4:95:af:da:f0:e5:50:10:82:db:74:
                    1d:59:34:75:a6:59:8d:a4:f5:76:b9:cc:ed:85:59:
                    bd:83:3d:0e:ea:59:1e:1a:c8:2e:80:2b:50:06:bf:
                    c0:dd:2b:52:ec:2d:65:a0:7d:fc:e0:c9:0b:d5:01:
                    46:8b:fb:32:73:1a:9c:72:56:90:0c:66:b4:ba:0a:
                    a9:f1:49:22:28:0e:52:b8:78:16:89:93:07:80:f0:
                    32:31:fa:59:8f:fc:3e:9a:53:4d:4c:5d:c2:1a:46:
                    87:bf:bd:6a:8d:cc:25:f4:6e:72:44:0f:27:31:55:
                    87:70:dd:90:a4:85:ea:a1:56:93:c6:31:0e:15:e8:
                    57:0d:c6:f2:e4:61:12:a2:2d:7f:fd:6c:db:34:97:
                    63:70:c3:73:9c:e7:7b:1b:48:7e:50:4e:99:5c:e5:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.204.0/22
                IPv6:
                  2a0c:1500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205113

    Signature Algorithm: sha256WithRSAEncryption
         2c:23:31:12:c6:10:ab:0d:4b:df:66:b6:8f:49:da:ca:57:77:
         09:b4:34:30:84:d3:86:7f:df:4c:70:2a:4f:fd:78:46:74:4f:
         57:c9:b2:dd:88:d7:91:e8:36:ff:d3:c3:2c:45:92:0f:c2:bc:
         b4:31:2e:1b:77:f3:b6:85:6a:85:18:43:6d:5d:51:77:ee:8f:
         57:57:60:98:99:32:c4:49:b7:bd:91:88:47:c7:5d:83:8f:2c:
         44:88:9c:29:c6:2a:c7:c4:c9:22:9d:64:c1:4a:19:28:2d:d7:
         79:b0:d8:ca:60:70:6d:3c:11:74:de:36:c0:79:88:d6:b9:ef:
         d9:c5:da:4e:bd:e4:86:da:70:46:f2:56:db:bc:b0:82:f8:68:
         da:bc:49:92:7b:a6:82:f8:5d:16:ff:aa:f9:4b:d5:17:31:44:
         43:6f:6d:7e:47:4a:84:11:02:b4:f9:db:28:36:3a:ca:53:b2:
         08:a4:c2:c4:6d:da:d0:04:96:e2:7a:07:af:61:57:10:ba:d6:
         1a:57:32:64:b2:5a:f2:39:8c:00:98:3c:f4:f5:24:d7:28:8b:
         36:ca:3d:b4:19:70:7f:e4:03:c5:33:65:ad:f3:51:0f:42:45:
         1f:ac:a1:1b:89:f0:11:cd:0a:0e:54:30:00:1a:9c:c0:a1:09:
         08:32:e1:c4
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt9ytw36sooYCNOdPuZoSiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTEyNjE3MmJlYTViMGZkMzQ1NDA2ZWJiNGFlOTVmZjk1ZTNkNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVy6jY5S6IU3rh8ro8OF0VbGse64
R9CY0V7TRQfHTQe2EbM6rc6lUFByP+Aiza1jbpsoW8LwxrgqovMXttWiVXmhAGL5
fTxeM4m69BvUozAZ/pA9bGndQLXyC7dGtJWv2vDlUBCC23QdWTR1plmNpPV2uczt
hVm9gz0O6lkeGsgugCtQBr/A3StS7C1loH384MkL1QFGi/sycxqcclaQDGa0ugqp
8UkiKA5SuHgWiZMHgPAyMfpZj/w+mlNNTF3CGkaHv71qjcwl9G5yRA8nMVWHcN2Q
pIXqoVaTxjEOFehXDcby5GESoi1//WzbNJdjcMNznOd7G0h+UE6ZXOWlRQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBESYXK+pbD9NFQG67Sulf+V49V/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2ZkN2Y0
OC0wMGQ2LTQ3ZGYtODc5Ny04ZDkwOTRmM2Y1YTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvZmQ3ZjQ4
LTAwZDYtNDdkZi04Nzk3LThkOTA5NGYzZjVhMS8xL0VSSmhjcjZsc1AwMFZBYnJ0
SzZWXzVYajFYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCufjMMA0EAgACMAcDBQMqDBUAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMhOTANBgkqhkiG9w0BAQsFAAOCAQEALCMxEsYQqw1L
32a2j0nayld3CbQ0MITThn/fTHAqT/14RnRPV8my3YjXkeg2/9PDLEWSD8K8tDEu
G3fztoVqhRhDbV1Rd+6PV1dgmJkyxEm3vZGIR8ddg48sRIicKcYqx8TJIp1kwUoZ
KC3XebDYymBwbTwRdN42wHmI1rnv2cXaTr3khtpwRvJW27ywgvho2rxJknumgvhd
Fv+q+UvVFzFEQ29tfkdKhBECtPnbKDY6ylOyCKTCxG3a0ASW4noHr2FXELrWGlcy
ZLJa8jmMAJg89PUk1yiLNso9tBlwf+QDxTNlrfNRD0JFH6yhG4nwEc0KDlQwABqc
wKEJCDLhxA==
-----END CERTIFICATE-----