This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.cer (raw, json)
Hash identifier:          BMibges29VIsCeJ5adpT45o9JKFT7a1sdsL9LKEzyRc=
Subject key identifier:   3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7EA64DA78323798C0E97CB7598E232E9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 12:19:46 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 24990
                          AS: 44729
                          AS: 59997
                          IP: 185.3.24.0/22
                          IP: 195.42.144.0/23
                          IP: 217.69.16.0/20
                          IP: 2001:7f8:43::/48
                          IP: 2a03:6c80::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:4d:a7:83:23:79:8c:0e:97:cb:75:98:e2:32:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:19:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:e3:ed:d0:4d:cb:d2:3b:42:ce:55:08:97:
                    39:74:64:dc:f7:29:4b:08:c0:79:ec:17:6d:06:04:
                    cf:cd:f9:ed:f3:b8:42:b0:c3:00:50:a7:55:63:55:
                    86:df:b8:2b:57:b3:51:4c:95:40:5f:27:93:2a:d2:
                    1c:a7:7c:bf:05:c3:47:b8:cd:33:27:2a:13:48:29:
                    ee:86:6a:c0:8b:19:e2:a3:7b:09:49:a2:bd:8b:96:
                    5e:37:8e:29:ac:5b:2a:90:44:89:a6:fb:5c:ad:4e:
                    1d:95:c8:a6:9d:42:5b:39:45:11:8c:2f:37:f5:62:
                    1b:f6:7d:d9:a4:2d:72:70:fe:f1:e5:31:54:5e:2a:
                    ab:22:36:fa:d7:89:f5:c1:ee:0e:0d:b1:ce:02:d7:
                    7a:e5:9f:7d:e0:8f:c0:ee:d2:dd:c2:24:85:2b:63:
                    dc:21:42:6e:d9:28:4c:71:7d:ff:f4:65:e6:55:92:
                    6e:1e:77:05:2d:f3:72:51:1a:b9:0f:ee:3a:11:9e:
                    d5:5c:9a:a7:8a:9f:12:db:72:6c:62:d6:97:d3:66:
                    eb:b3:a7:5a:44:fe:38:1d:7a:c9:ab:dd:6b:55:55:
                    2b:3b:b1:4d:e5:29:46:b1:7a:f3:3e:85:aa:0b:02:
                    34:07:8e:b4:6e:68:a8:4e:6a:17:04:94:5f:95:82:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.3.24.0/22
                  195.42.144.0/23
                  217.69.16.0/20
                IPv6:
                  2001:7f8:43::/48
                  2a03:6c80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24990
                  44729
                  59997

    Signature Algorithm: sha256WithRSAEncryption
         6c:52:bf:b7:a9:6b:6a:03:1b:8e:60:0f:05:58:cc:78:fe:ea:
         8f:17:c0:ff:4a:76:43:50:2c:82:6c:48:4b:d3:b8:e2:4e:2f:
         91:ce:be:35:80:61:72:9c:59:fd:dd:63:bc:9d:9c:31:d2:c6:
         47:86:e2:11:d1:17:e1:ef:3f:9f:c1:b7:6b:29:54:c4:9a:2c:
         34:5c:8c:16:53:ba:e7:d8:5e:7c:f0:da:b0:92:34:6d:28:be:
         d3:97:83:8a:e2:62:ad:00:35:4d:2b:f2:ab:79:97:a0:5e:19:
         04:c4:ef:a7:6f:35:f6:ce:83:40:d1:6f:14:61:cb:b0:03:ad:
         1c:72:8c:fe:e9:ed:cb:05:cc:b2:2c:17:bc:7a:91:a2:54:00:
         fe:54:ac:cb:e5:df:0a:04:86:0c:71:ae:e3:84:d4:5e:6a:52:
         ba:f2:52:1a:bb:09:85:f1:a1:66:a1:c7:ae:35:cb:78:51:70:
         d5:1f:8f:22:48:06:e3:f8:34:6d:56:52:2d:15:ab:48:2e:86:
         ee:eb:62:2e:32:d6:c9:75:ab:56:24:d1:a7:5d:6d:24:4c:cc:
         e1:72:a3:8b:28:6a:d2:30:98:13:e7:ed:ad:15:54:21:51:86:
         88:d9:c7:c3:86:e3:51:06:9b:ae:44:e3:b8:b7:ed:a8:95:99:
         72:0a:bd:c9
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAZt+pk2ngyN5jA6Xy3WY4jLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzM1MGJhODJmM2ZlYjVhZWUyODkzOGZiZjFiMDljMWUyZmQxOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Xj7dBNy9I7Qs5VCJc5dGTc9ylL
CMB57BdtBgTPzfnt87hCsMMAUKdVY1WG37grV7NRTJVAXyeTKtIcp3y/BcNHuM0z
JyoTSCnuhmrAixnio3sJSaK9i5ZeN44prFsqkESJpvtcrU4dlcimnUJbOUURjC83
9WIb9n3ZpC1ycP7x5TFUXiqrIjb614n1we4ODbHOAtd65Z994I/A7tLdwiSFK2Pc
IUJu2ShMcX3/9GXmVZJuHncFLfNyURq5D+46EZ7VXJqnip8S23JsYtaX02brs6da
RP44HXrJq91rVVUrO7FN5SlGsXrzPoWqCwI0B460bmioTmoXBJRflYLhowIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFDw1C6gvP+ta7iiTj78bCcHi/Rm0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzY0ZDdh
OS1jYWMzLTQ1NDktYTdhYS02MWI3OTAyZWUyMDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNjRkN2E5
LWNhYzMtNDU0OS1hN2FhLTYxYjc5MDJlZTIwNC8xL1BEVUxxQzhfNjFydUtKT1B2
eHNKd2VMOUdiUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAYBAIAATASAwQCuQMYAwQBwyqQAwQE2UUQMBYEAgACMBADBwAg
AQf4AEMDBQMqA2yAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAmGeAgMArrkCAwDq
XTANBgkqhkiG9w0BAQsFAAOCAQEAbFK/t6lragMbjmAPBVjMeP7qjxfA/0p2Q1As
gmxIS9O44k4vkc6+NYBhcpxZ/d1jvJ2cMdLGR4biEdEX4e8/n8G3aylUxJosNFyM
FlO659hefPDasJI0bSi+05eDiuJirQA1TSvyq3mXoF4ZBMTvp2819s6DQNFvFGHL
sAOtHHKM/untywXMsiwXvHqRolQA/lSsy+XfCgSGDHGu44TUXmpSuvJSGrsJhfGh
ZqHHrjXLeFFw1R+PIkgG4/g0bVZSLRWrSC6G7utiLjLWyXWrViTRp11tJEzM4XKj
iyhq0jCYE+ftrRVUIVGGiNnHw4bjUQabrkTjuLftqJWZcgq9yQ==
-----END CERTIFICATE-----