This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
File:                     GPijrw2MDVHeLd0mWtVNq5e95s4.cer (raw, json)
Hash identifier:          mU2lJaiceLaMAYdQMn4JShvxQ1OM6hmePi4Mll0p9KY=
Subject key identifier:   18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019AD9E112F1749BAB335F55C2A0C736D66C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Dec 2025 12:26:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198837
                          IP: 2001:67c:728::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d9:e1:12:f1:74:9b:ab:33:5f:55:c2:a0:c7:36:d6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  1 12:26:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:65:58:b9:73:5e:60:ef:e3:fa:80:65:a6:
                    7f:23:3c:7e:b7:05:eb:6d:38:85:cc:03:2b:b6:d1:
                    73:38:71:48:fd:47:fc:c0:7f:be:97:d8:b2:e9:52:
                    71:f6:f7:49:2a:4e:ef:0c:ed:0b:47:65:64:b1:e8:
                    31:9e:d8:71:40:85:66:25:eb:c0:88:8e:70:54:da:
                    45:00:ec:c2:8a:c8:3a:3d:4a:c5:dc:09:f7:a7:cf:
                    75:1f:65:56:d7:9f:75:a1:ed:f7:fc:85:ba:df:14:
                    77:45:f8:28:93:02:2a:d4:d4:f0:6e:87:b7:34:7c:
                    d5:5e:5b:2a:d3:3c:0e:4a:94:68:f1:e3:fa:b1:5c:
                    bc:cd:bf:8c:98:1b:5b:f8:3d:6d:11:ca:bd:76:46:
                    f8:b5:e4:d5:c6:18:f8:60:7b:a6:be:c0:3d:80:bc:
                    91:fd:ee:89:d1:20:7e:54:a5:ca:03:0b:8b:f9:ae:
                    c7:ed:64:60:05:fd:3f:50:e3:71:70:72:d9:54:60:
                    06:8d:0b:b7:d8:1c:16:88:66:fa:a7:1f:74:be:b8:
                    06:a5:0e:b1:5c:1f:29:d6:b0:c5:ca:82:13:92:12:
                    03:e2:8e:91:13:d0:e8:f1:c4:d4:0d:51:be:01:a9:
                    54:b0:fd:cf:3f:7d:2e:76:2f:21:97:89:e4:84:82:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:728::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198837

    Signature Algorithm: sha256WithRSAEncryption
         66:3a:17:17:db:b6:26:69:f3:cb:6a:6f:2d:c4:91:97:2c:f0:
         33:c2:f3:16:33:4f:85:ca:0b:02:f6:09:cb:95:31:dd:75:d4:
         6a:f5:53:a5:91:5f:0b:33:91:bb:a1:0e:3d:55:da:74:69:f5:
         7a:a1:69:f0:18:39:9e:d2:57:09:73:a4:c0:51:10:ae:51:01:
         46:e8:d2:d2:c0:5b:3c:96:da:69:f6:a8:f6:26:e6:6f:26:ed:
         3d:90:3d:65:23:61:0a:7a:81:cf:c5:47:d5:04:8d:5d:93:14:
         d9:54:78:1e:c9:78:4b:25:40:38:fe:f2:b7:7f:46:c0:3f:70:
         c7:33:e3:c7:24:4c:2a:15:c4:42:8d:41:85:3f:82:4b:47:eb:
         f4:42:c9:18:47:6a:e6:2c:d3:b3:69:ef:b2:dd:a9:60:6f:29:
         89:fe:e3:50:ad:e9:46:63:ba:14:2b:d6:bd:b8:01:d4:44:77:
         b6:cf:c1:cb:39:e5:b2:94:20:c0:eb:f8:dc:af:bf:98:26:10:
         95:b4:fb:de:f6:d2:4a:ae:ad:25:19:31:af:86:b7:2c:3d:26:
         62:1f:00:39:f3:72:a2:5d:37:89:ae:81:6f:fc:cc:c0:5f:31:
         d0:9d:10:dc:b0:9b:3e:34:55:0d:f9:47:a4:dc:a5:93:89:8e:
         49:0d:20:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----