This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
File:                     Pv3irXEjs6hgCAWIBbsQFva3P7A.cer (raw, json)
Hash identifier:          Sbh1bt+IZ8prjBRVqNyJNKj9Et7ghaFcAsHJXjL9kHc=
Subject key identifier:   3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019AEE7053626DDF4C1879A48B2A1C1894AC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 05 Dec 2025 12:15:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 25279
                          IP: 217.68.0.0/20
                          IP: 2a02:328::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ee:70:53:62:6d:df:4c:18:79:a4:8b:2a:1c:18:94:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  5 12:15:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e1:f3:da:ec:d6:b0:fc:9b:43:7e:50:14:36:
                    ba:b3:8b:4a:e9:b2:b6:58:70:10:05:8d:b0:cf:ba:
                    a3:f9:88:03:b0:49:c8:c3:39:a2:b6:dc:67:e1:bd:
                    cd:09:5b:8d:9f:42:e5:68:b6:83:9b:51:9d:86:63:
                    77:22:4d:b1:76:e0:19:f4:0f:8e:10:1e:be:f8:68:
                    85:9e:96:8b:eb:f4:e5:fe:e5:e9:af:6b:e8:bd:cf:
                    f8:7d:5f:df:af:22:84:e5:df:e4:97:53:43:50:af:
                    dc:38:e0:e9:93:ed:64:08:b9:c6:2b:9e:0b:3c:89:
                    32:d2:cb:54:dc:84:0a:4b:e2:8e:10:1e:22:07:f8:
                    4d:77:de:60:c6:3c:e8:72:b2:2e:af:b5:65:9e:7c:
                    aa:06:3f:1c:b2:b4:05:c7:07:e7:98:ae:ec:b6:0e:
                    74:66:53:3a:f4:f4:e1:16:75:53:36:b3:dd:2f:6a:
                    ec:02:2f:e5:79:c7:e8:8d:66:20:4c:0f:b8:ed:73:
                    a8:1f:76:de:63:c1:bb:20:a9:44:84:b0:7c:16:06:
                    53:9d:0e:ae:cf:0a:74:25:bc:08:c1:87:fc:c8:5c:
                    db:42:b3:13:62:4a:b3:cb:ab:a6:55:44:67:66:3f:
                    b5:98:74:25:57:89:e9:eb:58:d6:b7:72:dc:74:e8:
                    2a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.68.0.0/20
                IPv6:
                  2a02:328::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25279

    Signature Algorithm: sha256WithRSAEncryption
         6b:23:44:f4:23:4d:30:6d:19:f8:9d:ec:63:73:05:53:e1:a2:
         e6:c5:a3:09:79:bc:a9:f0:ad:dc:c4:0d:00:0f:b9:62:7f:b3:
         9d:27:3a:a8:40:fa:7b:10:c5:48:19:d3:9f:27:bb:f0:9e:70:
         d3:2e:d0:c1:76:f8:d2:01:71:d8:d6:ec:66:d7:6d:c7:f7:41:
         d4:ff:73:08:1d:0f:fc:eb:60:dd:07:90:43:12:42:7c:92:af:
         3d:7a:85:2c:e8:cd:38:70:20:dc:a9:38:52:69:83:9b:d4:5b:
         d9:ff:9b:7a:a9:c0:fd:97:82:55:4b:7e:48:a1:f7:c0:92:e4:
         5f:23:59:2d:2f:e3:46:cd:81:d2:52:1f:13:30:4e:cb:f6:4d:
         5f:32:62:c8:af:15:f5:91:d4:7c:04:1f:a1:ce:7c:d3:f4:65:
         7c:05:37:96:5b:50:39:25:f5:01:ed:ed:91:71:87:08:58:97:
         2a:e0:ec:5f:38:e7:2e:44:59:50:51:92:e1:35:e9:c7:41:99:
         e7:51:28:64:0a:d7:8e:ea:f0:86:a7:e9:cc:3e:a7:ac:0f:26:
         d7:fe:3e:45:7c:11:5f:13:37:00:ee:c0:90:48:1b:db:e0:f6:
         2d:5e:2b:3d:d2:00:8c:87:96:b5:4b:98:88:e1:8b:bf:dd:d5:
         73:3d:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----