This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
File:                     JR54cf048t-RgkLdocb8NWiEI8o.cer (raw, json)
Hash identifier:          s4SNeuBCEa3Xt2W3TH+2QCSaR89SwR6CUEANRWnE+6s=
Subject key identifier:   25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7EA45FCBF85E50184778232C2763EC01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 12:17:40 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 2001:678:c50::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:5f:cb:f8:5e:50:18:47:78:23:2c:27:63:ec:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=251e7871fd38f2df918242dda1c6fc35688423ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:2a:b1:46:79:93:be:54:2f:ec:7c:32:67:
                    a3:94:86:4f:00:6e:08:73:8c:10:10:61:73:0f:78:
                    0b:c7:bf:22:18:65:f5:d5:13:2b:04:f9:4d:cf:af:
                    42:7c:95:c4:52:46:0c:cf:50:ca:cf:a2:1e:3d:76:
                    ed:da:24:e9:3b:07:4e:f9:c6:f8:21:fa:08:f9:5a:
                    00:73:09:72:83:26:4b:45:f7:50:cd:25:97:84:5b:
                    ac:56:a9:f2:3a:70:36:8f:a5:c5:fd:65:24:c7:e0:
                    f6:70:bf:59:d0:01:21:24:cb:91:7b:6a:68:09:28:
                    c8:c6:5e:b9:8c:54:20:77:46:ac:c3:de:16:20:67:
                    3f:a6:90:77:bc:ab:89:f8:31:8e:d9:a0:5b:d2:c0:
                    b4:2b:70:fc:f1:c0:55:e8:e1:ca:58:85:c7:78:39:
                    b8:7c:e8:6a:c9:83:66:08:9f:85:af:14:5e:ed:da:
                    f7:65:07:32:21:e1:97:45:25:7c:13:0f:39:62:73:
                    47:dd:92:08:51:95:4d:9b:65:9c:f2:03:8a:3d:3e:
                    d0:02:8c:ba:ee:5e:62:40:ae:e0:4f:78:ba:91:15:
                    09:b1:1e:29:69:ee:17:2f:c2:ba:e3:f3:25:c5:dd:
                    2f:f5:ae:44:75:71:be:a7:84:35:4f:93:9e:e2:c3:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c50::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:c4:fd:46:54:8f:f1:15:15:5b:8b:46:fb:d4:0d:fc:8f:ea:
         35:f6:81:d7:ae:47:5f:a2:2b:4f:e0:51:78:6e:25:ac:3e:69:
         10:0b:0a:40:04:85:41:0f:7a:be:3c:07:56:9d:c9:e2:c4:36:
         8e:8a:c6:f3:39:34:3a:74:49:c8:25:b5:8e:cb:df:fa:2b:5f:
         0e:a5:52:2d:c8:5e:ef:de:c7:18:77:6a:94:39:7a:54:8d:a0:
         81:2a:73:90:df:ed:9b:58:90:7a:be:d2:1c:83:03:98:a3:1b:
         28:90:50:73:a0:2e:56:10:7e:89:50:2f:09:b9:ca:c4:de:c0:
         1b:d1:c1:a8:2e:c3:24:bb:b7:98:53:a2:2b:d2:46:b0:0f:1b:
         ad:df:b2:16:e2:6d:77:4d:81:02:77:e0:43:0c:d4:23:bf:38:
         81:eb:17:4d:a8:e2:14:12:96:5f:14:3d:0c:ac:94:61:ea:f4:
         46:19:bc:8a:3e:2a:a8:6d:64:07:d5:4f:df:c4:64:cd:3c:24:
         67:02:b3:81:80:d6:8c:7f:ea:67:95:ce:a4:51:f8:83:37:a6:
         3e:c1:31:22:ad:93:ce:a6:e9:88:dc:86:e7:5f:39:83:95:a6:
         f6:86:6b:bb:de:84:6f:62:2f:60:25:0f:9d:3e:c1:9a:82:96:
         7d:df:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----