This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
File:                     GeBhVfweN2UrK3nJpTbS5hRNBPc.cer (raw, json)
Hash identifier:          Bnbcgqz2vDgsObqd+3FebwNApHWKQiFvHSwIuzOCk6w=
Subject key identifier:   19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019A7770B2740C322EBB255AA4CF97E094C2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 09:41:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12617
                          AS: 16095
                          AS: 16245
                          AS: 47292
                          AS: 50021
                          AS: 59469
                          AS: 199213
                          IP: 31.31.80.0/21
                          IP: 77.66.0.0/17
                          IP: 81.7.128.0/18
                          IP: 81.19.224.0/19
                          IP: 83.221.128.0/19
                          IP: 86.48.32.0 -- 86.48.43.255
                          IP: 86.48.48.0 -- 86.48.59.255
                          IP: 86.48.64.0/22
                          IP: 86.48.72.0 -- 86.48.127.255
                          IP: 86.58.128.0 -- 86.58.199.255
                          IP: 86.58.204.0/22
                          IP: 86.58.224.0/19
                          IP: 86.106.96.0/24
                          IP: 89.186.160.0/19
                          IP: 89.188.80.0/20
                          IP: 91.102.88.0/21
                          IP: 91.193.136.0/22
                          IP: 91.215.160.0/22
                          IP: 93.180.80.0/21
                          IP: 94.126.176.0/21
                          IP: 109.238.48.0/20
                          IP: 185.4.136.0/22
                          IP: 185.27.112.0/22
                          IP: 185.45.48.0/22
                          IP: 185.127.88.0/22
                          IP: 195.47.222.0/24
                          IP: 195.190.153.0/24
                          IP: 195.211.176.0/22
                          IP: 212.97.128.0/22
                          IP: 217.30.32.0/20
                          IP: 217.116.224.0/19
                          IP: 217.145.48.0/20
                          IP: 2001:67c:23cc::/48
                          IP: 2001:1448::/32
                          IP: 2a00:49c0::/32
                          IP: 2a00:cf80::/32
                          IP: 2a01:6200::/32
                          IP: 2a01:7920::/29
                          IP: 2a02:9d0::/32
                          IP: 2a03:a480::/32
                          IP: 2a06:b280::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:77:70:b2:74:0c:32:2e:bb:25:5a:a4:cf:97:e0:94:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 12 09:41:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:ec:d5:7c:15:bd:d9:07:5b:56:71:2d:39:
                    1f:7c:fa:d6:da:fc:4a:e4:36:23:81:31:dd:d8:8c:
                    68:97:5f:a2:f8:47:27:c2:ed:82:d6:90:50:aa:ba:
                    e2:54:fe:83:f3:40:51:ac:e3:04:5f:90:26:dc:0f:
                    44:70:0e:88:00:81:1e:51:3c:0e:19:ae:0c:22:8e:
                    a3:55:85:68:69:79:a0:bf:18:8c:89:b1:1a:87:68:
                    b1:8d:38:95:5a:ee:da:d3:39:7f:d6:bb:cb:71:09:
                    b0:e6:f6:21:73:52:e2:76:e8:9a:5e:13:7b:18:ba:
                    68:46:c9:39:47:95:ef:e1:a7:d6:1b:d7:bd:7b:19:
                    45:1c:30:ef:2f:08:e0:a0:29:a3:cc:b2:6d:bd:af:
                    74:4b:18:98:a3:19:34:f8:f6:1f:10:1c:78:c3:41:
                    ac:2c:16:5a:35:44:41:f7:9c:1a:15:8b:69:33:a1:
                    91:80:3f:64:71:f0:7c:cf:7b:b2:97:6b:bd:ac:97:
                    f3:51:3d:6f:46:e6:69:41:f2:b1:52:4a:95:60:3b:
                    ed:b9:c3:34:16:99:ca:f9:77:38:d9:35:5c:57:44:
                    c2:e1:1d:bd:1a:79:b7:1a:0b:1d:aa:84:33:ec:2e:
                    12:aa:00:5d:69:59:7e:d8:36:99:90:f6:34:bc:19:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.31.80.0/21
                  77.66.0.0/17
                  81.7.128.0/18
                  81.19.224.0/19
                  83.221.128.0/19
                  86.48.32.0-86.48.43.255
                  86.48.48.0-86.48.59.255
                  86.48.64.0/22
                  86.48.72.0-86.48.127.255
                  86.58.128.0-86.58.199.255
                  86.58.204.0/22
                  86.58.224.0/19
                  86.106.96.0/24
                  89.186.160.0/19
                  89.188.80.0/20
                  91.102.88.0/21
                  91.193.136.0/22
                  91.215.160.0/22
                  93.180.80.0/21
                  94.126.176.0/21
                  109.238.48.0/20
                  185.4.136.0/22
                  185.27.112.0/22
                  185.45.48.0/22
                  185.127.88.0/22
                  195.47.222.0/24
                  195.190.153.0/24
                  195.211.176.0/22
                  212.97.128.0/22
                  217.30.32.0/20
                  217.116.224.0/19
                  217.145.48.0/20
                IPv6:
                  2001:67c:23cc::/48
                  2001:1448::/32
                  2a00:49c0::/32
                  2a00:cf80::/32
                  2a01:6200::/32
                  2a01:7920::/29
                  2a02:9d0::/32
                  2a03:a480::/32
                  2a06:b280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12617
                  16095
                  16245
                  47292
                  50021
                  59469
                  199213

    Signature Algorithm: sha256WithRSAEncryption
         32:27:57:e1:49:9d:d1:d7:57:95:87:d0:93:8c:5e:45:f6:89:
         34:4e:26:06:b8:90:ee:56:b0:40:fa:89:8d:82:89:d9:ff:83:
         ae:1f:cd:14:bf:91:ba:d3:b5:e9:b2:d3:6a:50:9b:7e:20:d9:
         07:f1:04:ab:61:fb:c3:c2:55:cd:6f:0a:49:fc:bc:77:25:82:
         66:1d:77:b8:70:04:7e:2c:b3:36:9f:79:af:ad:b6:64:ba:ee:
         8a:aa:28:dc:eb:a7:d4:20:93:df:1d:eb:d3:29:55:23:d7:b3:
         b0:9c:41:38:20:51:e6:97:8a:82:5c:06:73:ef:85:ef:17:cc:
         31:c5:18:7e:2d:f0:91:3a:53:14:bb:0c:5a:5b:e6:20:10:91:
         aa:dc:99:f5:fd:c9:c6:38:89:b9:88:d5:fd:9d:07:c8:b8:73:
         1a:d9:81:e6:74:02:fa:b0:3c:46:95:bb:7e:a7:e1:f2:9b:bc:
         9a:3e:6c:82:d3:3f:c0:79:c5:7c:a3:df:cd:cc:dc:ae:b2:af:
         02:f0:bd:11:bb:2e:9b:81:20:d4:a0:50:0f:6d:bb:80:19:f0:
         f8:73:29:ba:ba:46:9f:01:33:26:3e:b6:b6:79:ae:cf:99:01:
         4a:34:bf:29:80:e6:ad:ba:42:6f:ea:96:34:a8:09:a6:ae:53:
         1e:15:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----