This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
File:                     HagXE4U8mxjUENT_MJmrZo5ps_U.cer (raw, json)
Hash identifier:          blTBqkRfZKjLiuUWDd2rSWsm7YQsy9/o4htiF0l4K0g=
Subject key identifier:   1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5D387E590977F35C31C1EEF2ECCB08
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:20:19 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.131.114.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:38:7e:59:09:77:f3:5c:31:c1:ee:f2:ec:cb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:20:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:27:38:5d:7c:e5:02:90:7a:7a:25:fa:1c:
                    5a:03:c4:af:8d:f8:f4:c0:09:b5:d7:22:07:ba:71:
                    55:a4:e5:ad:63:a0:dd:97:3c:fa:3b:51:9e:b5:ee:
                    9d:57:d5:74:a9:bb:ea:f3:86:5a:84:ca:74:5b:48:
                    48:da:53:ef:c5:08:6e:87:15:73:74:7a:ef:ff:08:
                    40:c6:af:64:51:a1:65:1d:04:f0:66:76:05:e7:ab:
                    22:39:b9:81:5a:13:d0:bd:80:6a:43:54:34:ef:a9:
                    b9:31:24:3e:d8:30:d2:a5:53:58:7a:8d:01:74:01:
                    42:9d:5b:93:98:36:48:45:5c:76:70:35:63:dc:c9:
                    d7:25:f0:57:b7:f2:ad:37:b4:53:3f:ed:49:89:5a:
                    fc:15:c4:ef:c4:9e:49:d1:38:ee:33:12:1e:08:fd:
                    56:17:87:90:91:b4:c5:bd:07:35:dd:91:49:f5:43:
                    b7:64:c0:d3:e9:20:2c:c3:da:2b:ac:29:a3:9c:04:
                    c1:61:f2:b6:cb:27:ef:24:bb:e5:fe:20:02:54:16:
                    65:07:cc:55:ce:7f:52:4e:48:89:75:29:01:fc:34:
                    74:e3:fb:62:7d:84:e8:e8:d3:d7:d6:15:03:ac:84:
                    b4:63:fa:d2:41:8c:cd:aa:fe:2d:66:aa:88:bc:a3:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.131.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:80:38:19:59:fc:87:be:e3:d8:86:b5:8c:69:9f:e8:7a:98:
         8d:c6:fc:69:00:4e:25:1c:89:18:60:f0:5d:e1:bf:cb:f9:18:
         ed:9d:f6:75:a7:f3:3e:bf:4d:c7:e1:95:a6:b8:e4:b3:73:82:
         5b:cf:49:fb:52:90:a2:b1:ca:2b:fe:19:ed:ca:15:7f:fe:a1:
         28:80:c3:cb:69:17:1d:ae:b1:59:49:98:7a:66:32:34:97:6a:
         33:46:86:25:8f:53:04:73:ca:37:f7:68:72:b8:56:97:83:6d:
         0d:2d:72:b4:6c:b5:63:09:98:53:37:ac:02:65:3f:6d:f6:8d:
         e6:f2:91:b9:a8:15:e9:e9:53:9b:f7:f5:26:90:f9:0d:9a:6b:
         68:ea:06:43:b8:a7:10:01:a9:69:65:8f:17:11:79:d5:b3:12:
         67:fe:95:cd:27:75:23:19:05:38:2d:fb:fa:bd:06:8a:20:8f:
         98:83:e9:26:d8:71:af:fd:6e:dd:15:d3:67:34:d9:da:99:33:
         e3:0e:8e:56:02:0c:b8:a2:45:64:a4:ff:3b:2e:88:75:7e:5b:
         fb:91:20:71:ea:14:92:87:ab:ca:95:42:c3:ff:6a:d6:72:6a:
         be:3d:18:7e:69:c0:ca:b9:88:69:83:db:66:a8:2b:91:e8:c3:
         63:66:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----