This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
File:                     HQrO6hf1PecI-ac6vAyHFk0gfQg.cer (raw, json)
Hash identifier:          Rm1TS5jmaGmpHqcu5MWJTzO0EOJhhTMVKH1xIbN/Q7I=
Subject key identifier:   1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5B0342BEAA164B1300EB7E3E3E250B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:19:03 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 45.132.32.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:03:42:be:aa:16:4b:13:00:eb:7e:3e:3e:25:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:8e:e1:5b:55:b8:12:95:97:c9:6f:a3:87:
                    48:1c:33:ff:c0:4c:36:84:f3:9d:b7:ae:e1:8a:2d:
                    5d:98:4c:ba:61:cb:ec:9c:52:ab:38:d5:5a:9a:94:
                    c4:7c:63:f8:e6:78:25:56:a2:cb:1e:97:7d:b7:8d:
                    34:00:07:03:dd:99:66:86:e3:fc:11:76:40:78:c4:
                    b9:a0:d2:99:99:ab:33:11:79:e0:f2:08:40:ff:15:
                    17:59:6c:7d:fb:96:b7:24:b9:3e:6f:a7:3d:09:03:
                    00:07:a4:48:05:b5:71:fc:bf:30:1d:ab:fc:e9:a3:
                    6c:87:1b:f2:55:ee:e6:9b:18:5a:77:06:e9:b3:7b:
                    8f:ec:81:4f:e8:03:9f:15:3e:e6:a6:4a:01:58:a0:
                    e2:e3:87:f0:75:6a:98:d8:45:9a:d8:2a:c5:61:bf:
                    d7:4b:8d:a1:44:ee:84:09:d9:44:dc:eb:12:54:2d:
                    e4:c5:69:5e:5f:a1:a1:58:5a:2f:e1:fb:ca:92:98:
                    2c:9c:48:9b:38:b8:d1:3d:63:f6:06:cf:16:53:32:
                    7a:52:a5:da:fa:2d:2b:0a:08:b2:53:54:8a:0e:b3:
                    e1:48:8e:f0:95:56:2d:1c:81:b1:9c:85:b5:9e:df:
                    59:cd:a8:2d:fa:8f:c3:39:d8:ba:7c:3f:ab:6d:59:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:2d:31:58:10:f9:e7:f6:b7:3b:78:69:6f:c0:4f:a4:7a:4c:
         fd:b7:58:37:2a:0d:f8:67:b9:a8:2c:22:6c:fc:bf:4f:4a:6a:
         85:7c:5b:a1:bf:d8:d3:ca:70:ad:52:01:a0:5c:b1:f5:4d:db:
         1b:9d:81:7f:53:06:ba:ac:a3:81:3d:1b:f4:46:20:2d:cc:fb:
         d1:dc:ab:2c:cc:55:3d:21:a5:13:f5:6b:08:9b:33:3c:93:ae:
         11:9c:11:d2:a3:10:18:b8:02:41:cc:02:31:ad:2a:f6:9b:1e:
         f3:fa:c5:1c:c4:d4:63:67:b7:63:aa:d4:8e:6c:8f:89:9c:1e:
         76:1b:98:87:35:2f:73:93:12:73:9c:1a:0b:6d:d8:60:93:09:
         1e:d4:9d:3d:97:c7:9f:8c:a3:3e:23:d7:a4:3b:31:51:d2:40:
         32:c4:49:e3:ff:7e:5c:b5:0c:a2:e0:32:cf:2f:bf:89:22:e8:
         d7:59:c3:bd:d3:38:75:6e:1c:50:c1:d6:ea:db:25:28:48:02:
         b5:b8:46:a6:5b:d2:01:d8:d8:d9:a7:23:7f:01:29:48:81:58:
         cc:0d:3a:dc:89:88:99:6d:66:af:12:62:4f:f6:a5:ca:f4:4d:
         c7:7c:9c:86:1d:d3:f2:4f:5e:c7:9d:e8:50:cf:3e:a6:60:ab:
         37:4c:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----