This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
File:                     MY2rcPRKfrixz8E3Qz_NTXigOwU.cer (raw, json)
Hash identifier:          fCSlVQy7JSWZfWsnNOYuaPkowZjuB3XzJ+FI7ZXt7yg=
Subject key identifier:   31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5B176C3CB7E97FDC7911A9D2EFCA9E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:19:08 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209870
                          IP: 79.140.195.0/24
                          IP: 2a0e:5140::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:17:6c:3c:b7:e9:7f:dc:79:11:a9:d2:ef:ca:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:2e:bd:75:0b:c7:76:64:3f:03:1e:86:69:
                    e1:e3:4b:b4:c9:7f:22:a1:f8:3e:d1:3b:5e:ad:3a:
                    4d:e2:93:e5:65:75:8d:c2:51:a5:d8:83:2b:07:4f:
                    a3:c8:e3:2c:a3:8d:30:9c:ec:04:df:87:80:97:e0:
                    d2:2f:36:10:04:9c:43:33:22:97:b4:26:0b:28:f9:
                    a5:bb:1c:72:20:c0:b3:9d:ad:91:3e:04:53:f0:b3:
                    98:0d:af:5d:02:ae:e7:29:27:38:af:b4:ec:3f:01:
                    7b:7f:26:3d:52:74:16:35:c8:42:46:74:cd:4a:81:
                    87:f4:3e:78:72:4e:59:eb:55:88:ef:23:d7:3b:de:
                    b5:c1:ef:a8:5b:dc:3f:cd:92:a6:d7:12:4b:f9:c2:
                    1d:c4:5f:37:e3:75:46:34:0a:1c:a2:b2:82:83:bd:
                    d7:1e:86:e4:cc:c1:ab:49:da:d9:30:78:ed:0d:9c:
                    59:3d:4a:10:d3:87:7e:ed:94:11:1e:17:76:77:5d:
                    63:90:98:07:4e:a5:ef:fc:4a:1a:f2:d6:70:44:23:
                    ea:58:75:35:59:59:b9:f2:08:bd:78:c4:e2:7a:a2:
                    bc:d7:90:0e:be:2a:7d:ea:56:f9:94:aa:b0:d1:86:
                    02:64:9c:7f:20:56:5a:d5:90:52:e3:e5:7e:94:b1:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.140.195.0/24
                IPv6:
                  2a0e:5140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209870

    Signature Algorithm: sha256WithRSAEncryption
         5e:e2:48:f6:8f:30:b5:83:f2:80:c3:50:30:10:b3:20:19:81:
         33:31:57:5a:04:d2:93:b8:1a:be:46:6c:8c:48:59:3c:9d:df:
         2a:f9:26:1e:cf:ce:fa:9d:61:da:a4:e0:dd:44:dc:04:6e:46:
         b9:6c:b8:bd:34:2e:52:0a:3b:f0:9b:8a:74:97:35:68:07:11:
         af:22:16:8a:8e:a0:97:8e:a3:e5:2a:86:7d:96:07:38:27:76:
         15:73:8d:cb:ed:4c:cc:ba:8d:e8:6b:ad:54:cf:43:d3:3b:4e:
         24:10:20:60:76:bf:86:72:c4:23:cf:45:48:b6:34:57:32:2a:
         59:03:76:c5:89:d4:95:b8:4c:d1:a1:9e:f9:1b:2f:5a:ff:e9:
         2b:4e:b8:c7:d7:35:0e:e9:5a:50:53:ad:e5:b8:c8:9a:a0:f7:
         9c:00:59:84:b9:cc:4b:34:c7:1d:50:7e:fe:c1:ed:53:00:87:
         fc:70:27:0c:db:f5:ea:ee:2c:30:01:11:8b:8c:14:ba:f4:42:
         49:02:11:d3:8b:61:44:7e:03:59:59:a0:90:a3:c7:51:bd:b8:
         d9:d9:cd:38:70:16:fa:7d:0c:00:9a:26:f1:e3:0b:32:2c:dd:
         9c:f6:1d:b3:72:33:ad:91:90:05:54:72:75:54:d7:0e:65:6a:
         b2:35:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----