This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
File:                     NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer (raw, json)
Hash identifier:          uHznJ5bMgW5SUWX4oGICFofcHvqZShzchVz6e1sr2Ew=
Subject key identifier:   34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C7FF4E58AC0413399D83F4F6804B29C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 02:18:39 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 91.237.72.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:f4:e5:8a:c0:41:33:99:d8:3f:4f:68:04:b2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=345eecab9570cf0affa81be748e9128f55e416c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:58:bd:16:55:d9:81:2b:85:8f:84:d9:64:
                    7a:2a:cc:24:ab:b3:bd:3f:d1:c8:5d:f5:b5:28:a7:
                    dd:45:57:24:60:48:d3:db:a8:d8:8e:1d:74:d2:30:
                    9b:1b:73:0f:f0:a2:ce:6a:a8:ed:f6:90:5b:62:b2:
                    6d:dc:9e:27:c1:8e:9c:46:5e:9b:24:4d:b9:94:74:
                    24:2d:2d:28:fc:83:65:28:33:bc:24:8b:42:80:9b:
                    84:31:d0:dc:64:12:0d:85:de:aa:95:a0:f9:e1:65:
                    d5:c5:70:fb:3d:e5:32:e6:dd:8a:ab:1b:5c:db:a8:
                    66:57:c8:5b:dc:c3:18:c9:bf:93:42:d6:19:ca:3f:
                    25:95:25:e7:3a:71:5b:f7:dd:ba:a4:13:97:34:1e:
                    4e:ff:fd:7b:a7:bf:2d:54:5c:72:2f:9c:47:5d:29:
                    07:3c:11:a7:87:e7:a2:a4:3f:7a:9d:e7:16:aa:2a:
                    33:a9:07:af:f2:ea:fc:1d:be:98:47:4d:8c:10:57:
                    b9:c9:19:8d:47:16:0a:bf:3c:ba:31:f4:27:d3:e8:
                    46:34:54:dd:a2:b3:b6:1e:16:1f:f5:11:b1:b9:aa:
                    e6:85:49:dc:80:20:09:ab:52:9a:ba:26:f4:6e:bf:
                    c7:fe:b3:70:31:e9:09:48:11:80:5a:fb:04:15:84:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:22:bd:ce:3b:fd:a2:34:44:1d:c0:b8:ee:34:ed:16:f3:
         b9:ea:74:4d:d4:74:c9:7c:5a:40:9e:06:4e:0e:69:0a:af:74:
         59:f6:9f:e1:e6:00:33:f6:0c:7c:ad:42:5d:cf:9f:8f:3c:96:
         fe:e5:e4:25:76:aa:67:01:06:d7:93:92:16:a2:66:2a:64:92:
         7a:0a:c7:24:34:00:da:13:15:18:ab:6b:2f:70:50:99:d5:eb:
         33:30:b1:74:a7:50:87:8f:ce:33:f5:a4:43:36:35:f9:fa:c3:
         e7:d3:d2:1e:92:bb:b0:aa:5b:fc:ef:99:82:4d:a7:2a:44:51:
         1d:36:f6:4c:3e:3f:d3:3f:ea:2c:72:1e:be:8f:53:e1:80:73:
         c7:a4:71:37:a2:56:c9:a5:83:52:d8:05:bc:54:75:7d:28:3b:
         99:2d:16:62:c6:61:42:cd:9b:fb:42:67:92:78:b8:c9:60:0a:
         2d:a4:de:44:59:5c:e0:86:87:f0:bc:7b:89:9a:fb:80:ca:b2:
         a0:d2:af:ed:ef:ef:11:da:93:5b:53:84:ac:90:d7:9d:0c:28:
         77:9e:ec:56:cf:a8:61:18:7c:ce:2e:33:cd:61:34:e4:83:82:
         16:61:6a:8a:72:4d:4c:2f:72:6a:1c:73:b2:20:14:c8:67:7b:
         8f:33:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----