This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
File:                     PBnm8n2SgJXlYN52ePKONFnVWUc.cer (raw, json)
Hash identifier:          dPuBWjj+quXw1JUHhO3wsNaMFcwWI/g/exaf/1Cf0nY=
Subject key identifier:   3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B76EB949D55A98C5EF2C6570DB8AA44D9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:18:29 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.36.186.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:94:9d:55:a9:8c:5e:f2:c6:57:0d:b8:aa:44:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3c19e6f27d928095e560de7678f28e3459d55947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:83:c0:a2:e7:0f:1d:08:2c:8f:b8:8e:c8:
                    64:ab:c8:c5:02:ca:6b:6d:bc:db:e3:d6:c5:cd:e9:
                    78:c6:90:07:0a:ba:ff:57:ff:a6:80:0f:7b:39:90:
                    39:db:50:9e:28:99:81:a2:cf:98:97:18:18:39:58:
                    96:aa:e1:a5:30:32:55:51:fd:32:18:b0:f5:7f:53:
                    36:5b:76:12:b3:83:56:64:43:38:95:a6:25:83:3e:
                    10:e0:ba:65:52:03:c9:5d:e5:5c:d4:d7:5c:e4:51:
                    95:7e:d7:01:41:30:15:12:89:3b:af:ec:f7:26:54:
                    a2:29:dd:bc:71:80:d6:83:d0:09:51:fe:95:b2:05:
                    18:4a:21:46:1e:cc:fc:10:d7:9f:ee:fc:be:db:07:
                    10:84:32:81:2d:92:11:c9:7c:cf:17:d5:6b:d7:2f:
                    2b:08:79:04:23:f5:b3:cb:ea:83:a2:b5:58:2b:0b:
                    59:73:11:bf:fd:f6:e0:4c:ea:e1:03:c2:eb:bf:69:
                    f4:af:13:81:3a:ef:1c:1c:ff:6b:32:9c:46:79:86:
                    65:50:5f:21:af:8f:51:17:3d:73:a1:d8:db:ba:29:
                    63:49:aa:7c:df:76:f0:84:93:90:83:6d:e0:28:95:
                    13:74:0a:8c:38:e3:33:0f:49:a6:0f:26:48:8b:24:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a5:71:cd:fd:a7:9f:69:6c:17:48:56:a1:c5:5c:00:17:7c:
         5f:46:aa:53:6d:a5:fb:73:9d:b5:d9:bc:a8:4c:04:5b:44:00:
         3c:ef:ce:80:be:f5:19:c3:70:65:2e:82:d1:ff:a2:33:da:8f:
         f1:9d:d8:c6:cd:79:a7:4a:e5:45:1a:06:75:aa:b8:7c:33:f5:
         f6:0f:a8:a4:f4:73:c0:96:e1:52:47:c0:79:00:97:e2:67:f2:
         7f:d2:5b:55:cd:c9:1c:a1:51:97:fe:82:66:b4:a4:17:fd:cd:
         52:b2:e2:0e:ab:a5:a6:f0:0a:24:8b:38:b4:f7:d7:25:6b:e7:
         94:03:41:aa:6d:c0:41:eb:17:44:d7:2a:1f:60:48:c3:40:e7:
         f1:e4:7e:04:72:f0:6f:70:6b:0b:1d:3f:35:bc:80:6b:d9:b8:
         cc:e0:66:37:69:b4:30:3f:de:f9:32:d3:4a:90:fb:4c:59:dc:
         45:73:23:d5:7e:7b:f4:8f:eb:7f:41:fe:73:a6:79:c6:4d:fd:
         6e:7b:cf:49:eb:22:85:a0:74:83:1a:12:d7:69:4a:62:28:32:
         a1:f2:ed:6b:a3:98:e3:b0:41:79:53:92:60:bf:f1:10:66:9f:
         2d:65:49:95:ba:4a:f6:16:96:d5:17:50:79:6e:0e:2a:5b:d1:
         c5:ce:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----