This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
File:                     MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer (raw, json)
Hash identifier:          wS+yiQXor7oVKhHM3aWIfFeZN2/M64o3FuPNYSlmBMc=
Subject key identifier:   30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C6BCAC122A2971F672DB8C92EAFE1B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:17:51 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 58128
                          IP: 185.155.204.0/22
                          IP: 185.186.180.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:bc:ac:12:2a:29:71:f6:72:db:8c:92:ea:fe:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:de:45:46:c0:79:b2:26:0e:5a:77:55:35:
                    b9:0c:e7:33:08:f2:d7:b3:c9:5d:59:e6:26:b9:c4:
                    5a:ce:53:7e:df:31:86:08:43:4d:a1:6a:88:c7:ca:
                    7a:08:45:aa:7f:9c:9f:3e:2d:15:53:c6:7b:a9:73:
                    4a:95:d0:c9:a7:50:8f:16:d3:90:d8:f0:a6:5b:f1:
                    61:e4:13:56:1c:66:0b:ad:1d:79:0e:f0:99:39:0e:
                    a4:ba:ca:b2:a4:70:16:2b:2a:6a:22:f1:b2:59:8e:
                    25:53:11:8e:2d:71:e3:14:c9:7e:b7:87:e4:87:a9:
                    b2:08:70:34:82:d1:46:b9:56:65:10:91:2b:09:54:
                    00:81:8c:3d:2f:60:fc:e7:24:c7:81:c4:be:f6:63:
                    87:a2:68:7d:11:fd:13:5e:eb:ff:c3:f0:e6:24:0c:
                    92:78:d4:d2:f2:67:22:66:2f:53:07:54:ac:36:7f:
                    62:cb:65:04:bc:6f:c6:6b:fb:1c:e0:78:0b:10:bd:
                    25:68:7c:5c:43:84:4e:c8:fb:48:a3:e3:f9:5e:3c:
                    49:d1:9e:e6:6b:4f:af:66:b7:b5:7f:02:36:12:18:
                    92:5d:72:04:14:0b:85:a3:c0:bf:20:91:cc:ac:eb:
                    37:b5:a7:51:b3:93:8f:62:f3:74:fa:87:cb:a5:cb:
                    1f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.204.0/22
                  185.186.180.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58128

    Signature Algorithm: sha256WithRSAEncryption
         40:89:fe:4c:61:ce:7e:ba:ce:e5:3e:bc:1d:5a:fc:3e:90:d4:
         43:f1:83:66:d6:d8:43:fc:ae:31:37:e6:4d:fa:03:7d:78:74:
         ec:63:14:41:b7:aa:cd:42:88:77:52:10:2f:cc:fe:eb:1d:ae:
         79:81:18:38:92:9e:11:a5:aa:6b:7a:3a:75:d5:c5:3e:f4:79:
         f6:3d:f4:62:b9:1d:dd:48:b5:ec:4a:4e:03:9f:c9:8c:26:fe:
         06:34:c9:f2:af:89:9f:58:4c:52:6a:37:62:ef:b7:25:26:52:
         51:84:04:b0:9c:d8:e3:af:e5:66:ba:3f:87:a2:c7:36:3c:88:
         34:94:c1:3a:52:34:0d:5b:9c:54:c2:47:17:93:7b:e5:fc:0c:
         4d:d4:2b:c0:2c:70:c9:1f:a4:2d:06:c8:46:13:3e:e4:f6:e1:
         62:c6:f6:06:c5:d1:00:75:77:29:c7:67:b8:c1:4e:50:7a:e1:
         19:58:98:ff:78:c4:e6:4d:35:58:26:db:78:81:f0:ef:68:ee:
         02:1b:31:33:47:f7:a1:fd:a2:8a:20:d1:eb:b9:ff:2f:0d:1e:
         ce:67:7b:a9:79:24:f4:7a:9d:a7:77:34:2d:de:4b:b9:53:0f:
         1c:c2:a9:02:c2:9c:04:6a:f8:ba:fc:71:3e:30:34:47:4e:57:
         73:29:87:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----