This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
File:                     Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer (raw, json)
Hash identifier:          VGE/0s0cB8+u0Uhny61IdnT0XTCN5oPauNiM/Id5Byk=
Subject key identifier:   2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5C49E3C698284A4D94DBB725120A4E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:19:18 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.194.122.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:49:e3:c6:98:28:4a:4d:94:db:b7:25:12:0a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:0c:22:7a:8d:6f:4e:00:0d:63:54:fa:2a:
                    39:e1:76:52:66:5a:4d:e4:12:30:2b:fa:33:e4:48:
                    ac:c0:56:5c:6d:64:72:2a:35:de:97:50:cf:ae:cb:
                    e7:f6:d6:09:56:c2:24:3e:26:e2:30:d3:ed:39:8a:
                    0a:a9:18:f9:94:de:09:85:44:e3:70:f5:a5:19:2b:
                    fd:41:2b:cf:a3:d4:24:d8:96:e3:01:cb:88:fb:33:
                    03:5a:68:ad:3c:73:b1:af:5b:26:95:17:08:6b:d0:
                    af:2f:c0:ff:ca:9d:c7:35:57:7f:f5:ff:08:da:33:
                    6b:af:84:6a:a9:3d:0b:52:f3:24:6c:1f:41:aa:54:
                    7a:b6:e5:75:12:27:a3:e6:d3:42:fc:b8:c5:cf:bc:
                    f3:70:ab:48:97:38:94:54:7f:02:2e:bd:19:19:73:
                    4f:da:31:9d:cf:26:0b:51:ac:fc:4e:ac:01:35:43:
                    eb:9f:3b:e7:be:b0:3b:1e:b9:ff:89:eb:5d:ad:a7:
                    86:72:7a:d2:0a:ab:d1:40:aa:bb:be:42:da:47:c2:
                    fd:64:10:a7:01:3e:0c:04:f7:f2:b2:30:9b:dc:3c:
                    39:0b:b0:4f:55:ec:f4:a4:1d:06:c7:12:20:df:0f:
                    d5:be:95:e0:e5:78:43:82:7d:d5:3d:fa:2f:df:07:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.194.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:f1:2b:f3:0f:46:b5:58:1f:f9:0d:52:57:0a:d2:64:66:
         98:9b:ad:af:24:66:33:eb:41:df:45:46:84:94:8a:89:b7:ff:
         54:42:85:c9:18:34:6a:f2:a4:7a:df:34:21:11:87:48:e7:4c:
         cb:f6:c8:94:c0:68:20:47:34:32:5a:92:34:9d:d2:98:3b:ba:
         c5:2e:7f:3b:92:b5:b0:a3:75:7c:bd:04:95:29:05:02:2d:84:
         41:56:29:23:e5:47:ed:e3:2b:8c:ca:5b:52:2c:0f:3d:f6:81:
         30:db:cf:3d:de:6b:6e:41:46:b7:07:ee:f9:98:bb:13:71:29:
         cf:2e:5b:3e:42:25:57:df:51:c4:1a:d6:92:ce:bf:6e:17:00:
         13:de:2e:c0:cb:ef:b8:e4:8a:0b:b1:b4:b8:37:b4:a8:8e:18:
         34:db:f2:06:05:71:1a:5d:b0:4e:3a:65:ba:4c:d7:fb:0e:8e:
         64:51:0a:34:90:cf:31:eb:09:1f:05:54:c4:d7:54:a9:d0:a2:
         02:3c:9a:08:8b:b6:4b:48:b7:82:d7:0c:d2:eb:ee:5b:84:3d:
         10:fc:2a:2c:77:79:d9:85:1b:ee:4c:b2:4b:2d:6a:4d:71:96:
         af:52:58:37:0d:32:5e:e1:58:4c:ad:c3:94:74:3c:00:b7:bd:
         3c:95:37:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----