This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
File:                     Oe6oRlUcbkGblH4NoQfuywBwQZo.cer (raw, json)
Hash identifier:          laDL7RRwd3qv1T2X4jXXV4Sc1PxajXyTukrVfIKq9V0=
Subject key identifier:   39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79108F458CE35844FD48E6C230F5EECE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 10:18:07 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 91.229.80.0/22
                          IP: 2a0c:76c0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:8f:45:8c:e3:58:44:fd:48:e6:c2:30:f5:ee:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=39eea846551c6e419b947e0da107eecb0070419a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:2e:34:64:77:c2:c2:46:9a:d8:39:50:8c:
                    ce:4b:bc:2b:24:b1:53:2a:22:79:4a:0b:1e:d8:fa:
                    c4:3e:ab:43:d7:79:3f:f6:49:fd:32:9e:42:05:a2:
                    bb:10:42:e2:22:06:e6:05:b0:a4:74:aa:b1:fe:be:
                    cd:96:00:51:c1:57:d3:9c:b7:39:87:0c:43:3e:b5:
                    bf:a5:6d:0f:dc:46:1d:27:af:87:46:7f:d3:47:98:
                    a3:e0:1f:d0:62:63:2b:3c:61:8a:0e:f9:59:70:6e:
                    a9:ac:7d:75:5c:f1:3f:e1:3a:ea:92:41:4c:dd:f2:
                    c5:e5:4f:1f:63:91:1e:f4:a0:de:5c:50:c5:6a:27:
                    c3:5d:17:ea:50:2c:35:39:f4:56:7c:c3:ab:d5:89:
                    a1:04:af:d6:da:8e:de:c6:b8:69:b1:9e:78:d0:72:
                    0a:77:21:c5:7b:47:4e:af:b1:35:58:82:b0:61:2f:
                    21:82:d1:2f:ef:db:7b:94:90:f8:94:93:61:9a:fa:
                    a5:0d:78:47:5d:f9:ee:a6:ff:4a:3a:bc:bf:a5:cf:
                    0d:61:d3:fe:97:fa:e8:34:f7:c9:f9:50:bb:6b:cb:
                    5a:f6:79:ee:8c:70:67:95:d3:36:dc:a0:f8:45:33:
                    91:ba:d1:75:a6:54:c6:ea:95:dd:98:6d:5c:8c:53:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.80.0/22
                IPv6:
                  2a0c:76c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:ae:b8:7b:47:ff:45:95:c0:5f:43:b1:1b:df:37:22:5c:
         2b:4b:49:1a:e6:d0:62:90:94:f7:b2:4f:50:2e:63:57:ca:26:
         f5:2c:92:34:40:4b:6c:c1:0d:36:f4:90:fe:2b:00:60:ed:90:
         b7:ed:78:71:1d:8c:0c:67:23:c0:1b:05:b6:4b:39:43:4b:c1:
         69:2c:03:71:37:70:d9:0d:38:99:30:96:a7:3d:c6:70:e1:8f:
         a3:18:b5:fe:43:ae:b8:54:21:0a:dd:79:a5:cc:cb:c5:2a:7f:
         c1:5c:0c:de:14:5b:8a:f0:a5:c0:e4:8d:8a:ac:b7:ad:fb:e0:
         df:cc:46:44:4c:6f:30:fd:f6:97:05:2e:e3:4e:d8:52:99:d1:
         b6:3f:8a:de:49:d6:35:9d:24:2d:2f:21:55:3a:7b:ea:f8:5a:
         67:f0:e7:b5:16:3c:89:07:c9:9d:49:4a:37:24:47:f9:e0:92:
         a1:97:cd:2a:9c:65:b2:9a:65:89:b8:21:7e:c2:6b:87:61:a3:
         08:c5:b6:4b:4b:a1:15:28:8e:c1:1a:7e:fb:92:ec:84:0c:7f:
         26:c6:f1:ce:12:65:3f:00:72:ae:d9:ea:fc:c6:8a:f9:1e:d0:
         48:f8:a0:c6:a6:78:d7:23:3e:c3:71:3f:9c:7c:20:72:bb:11:
         1b:c5:c8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:39:53 2026 by rpki-client