This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
File:                     F7UEL8INm6sWduCa9_8bpb-trnU.cer (raw, json)
Hash identifier:          ZygdJN8neL6UyaTv+DMppB/Rpby/RyZzgu+kKBofIKI=
Subject key identifier:   17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E38D15D8A2368F9F1A5B8B6A53AC809
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:20:11 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213823
                          IP: 5.180.179.0/24
                          IP: 31.217.248.0/24
                          IP: 46.254.108.0/24
                          IP: 62.68.66.0/24
                          IP: 84.54.35.0/24
                          IP: 87.236.148.0/24
                          IP: 91.198.200.0/24
                          IP: 91.205.223.0/24
                          IP: 91.242.242.0/24
                          IP: 94.247.138.0/24
                          IP: 146.19.7.0/24
                          IP: 146.19.155.0/24
                          IP: 178.212.142.0/24
                          IP: 178.212.224.0/24
                          IP: 185.65.70.0/24
                          IP: 185.137.164.0/24
                          IP: 185.184.219.0/24
                          IP: 185.249.53.0/24
                          IP: 193.3.175.0/24
                          IP: 193.35.228.0/24
                          IP: 193.163.200.0/24
                          IP: 194.9.181.0/24
                          IP: 194.62.162.0/24
                          IP: 212.23.198.0/24
                          IP: 217.119.143.0/24
                          IP: 2a03:cc40::/29
                          IP: 2a0c:e500::/29
                          IP: 2a10:1d80::/29
                          IP: 2a11:1300::/29
                          IP: 2a11:1ac0::/29
                          IP: 2a11:3140::/29
                          IP: 2a11:3c80::/29
                          IP: 2a11:5340::/29
                          IP: 2a11:53c0::/29
                          IP: 2a11:5440::/29
                          IP: 2a11:5500::/29
                          IP: 2a11:7a00::/29
                          IP: 2a11:7dc0::/29
                          IP: 2a11:8380::/29
                          IP: 2a11:ac00::/29
                          IP: 2a11:b040::/29
                          IP: 2a11:b300::/29
                          IP: 2a11:c000::/29
                          IP: 2a11:ec80::/29
                          IP: 2a12:600::/29
                          IP: 2a12:2580::/29
                          IP: 2a12:2900::/29
                          IP: 2a12:5000::/29
                          IP: 2a12:b880::/29
                          IP: 2a12:d300::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:d1:5d:8a:23:68:f9:f1:a5:b8:b6:a5:3a:c8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:20:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:b6:a7:95:3b:8d:2b:70:6d:30:bc:b3:c7:
                    93:c2:ef:be:ad:8b:da:63:eb:f8:fe:d7:bd:fe:a0:
                    ca:97:e0:61:bd:cd:04:a9:f8:6b:0a:85:e6:ff:2d:
                    4b:4b:9f:5d:ce:47:37:38:91:88:b3:d0:7a:1e:17:
                    70:a8:eb:54:41:34:7c:73:40:6c:b7:f6:1d:64:fd:
                    27:06:1e:7a:18:eb:1f:e6:67:fb:73:51:28:ea:23:
                    e2:6d:c5:2f:4f:c1:fb:74:d9:2f:ea:80:46:dc:c0:
                    33:42:f4:54:e9:4a:ed:71:a2:43:5b:4c:95:46:30:
                    4d:0f:64:ae:a8:a8:02:04:aa:b1:74:9e:9a:f9:86:
                    ad:39:08:e3:8c:4c:53:e7:e0:b2:69:1b:b0:1e:bf:
                    4b:35:1e:a1:f1:fc:db:13:2a:16:c2:a1:1d:94:cd:
                    5a:e5:0a:ee:de:9a:3f:d7:7f:40:5c:3c:59:3a:86:
                    9d:5b:c0:dd:0f:c8:27:a8:61:6d:53:8a:f6:67:bd:
                    c8:7a:7c:e3:82:f4:d9:a2:b1:a5:7b:cf:f3:09:9e:
                    72:bc:00:f5:cf:20:eb:71:9f:cc:77:a5:0c:2a:42:
                    7d:06:27:63:c0:fc:a3:f8:5c:32:b4:12:a6:52:51:
                    87:7a:25:b1:b4:34:8d:73:ef:cd:c3:eb:39:f3:2e:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.179.0/24
                  31.217.248.0/24
                  46.254.108.0/24
                  62.68.66.0/24
                  84.54.35.0/24
                  87.236.148.0/24
                  91.198.200.0/24
                  91.205.223.0/24
                  91.242.242.0/24
                  94.247.138.0/24
                  146.19.7.0/24
                  146.19.155.0/24
                  178.212.142.0/24
                  178.212.224.0/24
                  185.65.70.0/24
                  185.137.164.0/24
                  185.184.219.0/24
                  185.249.53.0/24
                  193.3.175.0/24
                  193.35.228.0/24
                  193.163.200.0/24
                  194.9.181.0/24
                  194.62.162.0/24
                  212.23.198.0/24
                  217.119.143.0/24
                IPv6:
                  2a03:cc40::/29
                  2a0c:e500::/29
                  2a10:1d80::/29
                  2a11:1300::/29
                  2a11:1ac0::/29
                  2a11:3140::/29
                  2a11:3c80::/29
                  2a11:5340::/29
                  2a11:53c0::/29
                  2a11:5440::/29
                  2a11:5500::/29
                  2a11:7a00::/29
                  2a11:7dc0::/29
                  2a11:8380::/29
                  2a11:ac00::/29
                  2a11:b040::/29
                  2a11:b300::/29
                  2a11:c000::/29
                  2a11:ec80::/29
                  2a12:600::/29
                  2a12:2580::/29
                  2a12:2900::/29
                  2a12:5000::/29
                  2a12:b880::/29
                  2a12:d300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213823

    Signature Algorithm: sha256WithRSAEncryption
         7b:d8:73:a9:60:da:0a:10:d9:a4:a4:f6:46:70:6e:b2:59:6b:
         a3:1b:4d:fa:60:e4:11:d1:70:20:d6:56:b1:d5:9a:da:d8:d9:
         52:94:b3:3e:1e:2d:aa:94:bf:3b:5b:8d:32:66:e0:f7:c3:de:
         01:af:3e:1a:c0:e0:59:64:d9:fb:7e:f3:89:da:43:92:75:37:
         9d:3f:24:9f:49:27:d7:ac:d1:76:38:7c:3c:cd:fa:20:9e:ee:
         92:f1:65:9e:8a:e5:bc:62:98:ea:4d:8f:23:12:68:fd:09:5b:
         e8:0c:70:44:0e:f4:03:ad:32:7f:37:76:27:0c:54:6c:7e:cc:
         46:33:43:20:e5:24:4c:69:db:56:9f:d9:74:52:a3:46:74:3a:
         5f:05:0a:4a:38:4d:30:15:68:e6:b0:c3:a8:13:e7:89:96:f8:
         71:db:4e:a0:9e:7e:af:6e:18:18:f0:cf:c4:1c:49:8d:49:c9:
         14:3d:d6:5b:f4:0c:33:9e:13:66:86:2c:4e:fe:56:0d:06:8a:
         9a:e8:3d:e9:46:95:af:2e:75:7e:85:b0:91:a2:47:5a:5b:af:
         04:84:05:68:16:60:4a:ad:30:b7:72:65:7b:4c:9c:ea:28:80:
         5d:eb:d1:09:eb:5d:e9:87:da:7a:5f:e5:57:62:4f:27:f1:d1:
         60:5f:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----