This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
File:                     NeXw-_PWvzoWokvseAyw_W7fMec.cer (raw, json)
Hash identifier:          H+mSNmSoPFTlWQN+acvBHpDjjcrMrEBp7Hc18Q89t1U=
Subject key identifier:   35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E3812476062C2876F5865E770AB942B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:19:22 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 195.85.241.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:12:47:60:62:c2:87:6f:58:65:e7:70:ab:94:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:19:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:06:63:bf:28:b5:0b:67:48:5c:32:72:0b:
                    32:58:8a:06:1a:1a:02:ab:0c:52:70:1d:4c:4e:2b:
                    32:33:8f:55:e2:dc:34:f6:6b:f2:7e:06:2f:b3:b9:
                    09:b2:a1:8c:cd:d4:cb:2f:5e:99:35:39:66:0c:ad:
                    c8:14:58:b7:36:10:83:78:37:18:b8:5b:8f:77:1d:
                    07:56:5a:8a:fd:9e:52:31:5f:62:ae:34:8d:ad:30:
                    53:4f:7f:6d:65:82:23:ba:8d:34:01:4c:4d:be:2b:
                    b4:47:40:23:8e:1b:0c:48:b0:79:09:b5:a7:12:7c:
                    80:99:4e:3e:46:fa:0b:97:83:8a:3a:81:7f:69:de:
                    ae:9d:a4:05:be:11:a8:ff:d1:df:74:21:1e:f8:53:
                    93:b9:51:5c:30:33:7c:ae:d7:49:43:01:2a:ec:e2:
                    d9:b4:a8:0e:0a:de:6c:0f:e9:77:ce:a8:68:50:72:
                    02:59:b8:35:1a:e3:15:6f:3d:03:69:ce:80:c3:d5:
                    ca:ae:14:0b:21:60:39:0c:cc:49:fd:37:d1:22:f1:
                    cf:44:ca:ad:23:8e:c1:3e:80:40:39:e7:26:12:09:
                    2f:40:d7:be:29:91:6c:f3:a2:1a:15:aa:14:d6:bf:
                    b4:7f:6f:51:ca:d7:ac:94:60:c4:f1:7b:d2:2c:b3:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:72:c4:aa:f4:ee:f8:33:b9:c4:96:7a:b7:e4:53:a2:fc:f9:
         2a:a1:4d:ab:c7:4d:b6:d1:99:46:82:97:eb:4e:53:95:dd:79:
         32:38:5b:1a:b5:09:bd:5c:8c:bf:98:38:ce:0c:e6:d8:b9:ab:
         41:ab:28:91:ea:b8:8f:a5:3c:98:c7:b4:1f:ad:74:d0:3a:35:
         76:5d:64:8f:39:15:70:81:e8:ff:9d:71:e5:f9:ee:4f:fc:33:
         21:4b:f4:47:ae:f6:4a:56:08:52:1d:13:9a:bf:b6:31:93:7d:
         26:31:39:9c:a7:36:d8:58:69:7a:94:b4:87:ad:2b:70:50:76:
         24:82:4a:32:d9:11:11:db:86:3e:42:4d:1f:d7:d5:11:ee:e7:
         b8:f5:a0:0c:28:9d:6d:f1:60:15:27:71:24:10:78:26:43:8b:
         5d:43:87:4c:08:db:34:f4:80:33:7b:a7:49:0c:4e:79:4e:cd:
         10:5d:45:6a:3f:e5:7d:32:00:87:44:40:9a:98:3d:09:01:77:
         1a:b7:8f:bc:2f:eb:1c:36:9a:83:a7:fc:4a:15:4a:96:cb:00:
         83:29:c5:0b:85:37:a7:12:83:e3:35:cb:69:18:f9:52:b9:0a:
         de:f2:44:c9:84:83:58:fc:db:ae:81:94:14:36:e7:39:33:d5:
         27:cc:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----