This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
File:                     QJvXHM6jftmnmNWgabIWnPTU5ZI.cer (raw, json)
Hash identifier:          xcmfAUo1XuL58y84AEi2FbZ0tajcXHo9Y+rtD8FZ/4w=
Subject key identifier:   40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7910A74956B163CB4910895C153A4265
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 10:18:13 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 211993
                          IP: 185.233.34.0/24
                          IP: 2a10:de80::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:a7:49:56:b1:63:cb:49:10:89:5c:15:3a:42:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ab:e8:f8:6e:05:f5:ea:f1:fd:4e:c9:a8:6f:
                    c3:6f:be:1d:f3:d0:1a:61:85:10:6b:0c:ac:81:f9:
                    69:bf:1e:2e:ed:19:b9:17:b9:82:39:f4:ff:c1:f5:
                    cb:a7:30:83:69:44:1c:23:4a:d7:c3:23:38:bf:56:
                    08:5e:c3:61:5e:57:30:c8:db:ab:e4:f6:05:5a:1f:
                    05:01:5e:24:b3:9a:85:8d:56:04:fb:0c:33:5c:d5:
                    ab:a3:e2:f4:4c:92:d2:16:7f:bc:43:43:9b:2b:b9:
                    f7:c3:0c:54:a2:02:f5:d0:3f:c7:ce:97:35:19:0f:
                    9e:bb:99:2e:1e:38:79:82:c1:a9:f4:67:9c:4f:36:
                    57:79:ac:b8:e4:8e:bd:20:6e:6d:ee:21:a7:73:46:
                    50:a9:cc:05:6e:9e:48:ea:83:9f:ac:50:1a:4a:8f:
                    7c:26:7e:b2:07:4f:64:8d:54:5a:0e:bd:7d:a0:0d:
                    b3:d9:a7:1a:9c:9f:d2:dd:e2:c0:d3:61:cf:79:34:
                    6f:e0:85:55:0a:08:20:8e:11:d2:b5:54:9e:c6:86:
                    23:22:7e:f2:4e:4b:fc:5c:17:1a:f7:28:fe:6e:1a:
                    44:97:55:be:2b:0d:89:17:d1:79:d5:1a:a6:c8:85:
                    fc:eb:61:d0:cb:63:1e:ce:4e:61:38:fd:8f:04:d4:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.34.0/24
                IPv6:
                  2a10:de80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211993

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:0f:31:5d:82:b0:56:14:66:97:a3:bf:6d:77:51:02:08:
         ed:ed:c8:3d:b7:42:97:33:b5:8b:64:ef:d8:a6:7c:a4:8e:1b:
         22:45:42:b8:bc:13:94:5d:a1:e0:7b:d3:07:c0:54:e0:79:9e:
         83:0d:b6:ec:c2:7e:27:ff:a0:8f:2d:ee:7e:78:2c:2d:7d:ae:
         bd:19:11:fd:0d:a6:27:0b:a4:c3:ff:5a:7d:c1:67:c3:80:76:
         b9:f1:ce:b9:5a:b8:5c:cf:ae:40:cf:11:2b:92:be:54:ab:6c:
         b0:72:5d:f8:6e:20:e8:0f:43:dc:0a:41:7a:63:9b:36:05:b8:
         c4:be:75:fc:ea:50:f1:cb:4d:2e:f3:58:31:3b:34:92:f0:a9:
         89:2f:ff:78:6a:e3:37:c6:cd:6f:3d:e3:5c:fb:7b:e1:35:c3:
         24:33:75:44:27:f0:80:81:f5:c3:80:55:a4:ae:4b:09:4d:fd:
         35:15:1d:d2:17:10:a8:00:56:f8:c1:e2:9d:9a:18:af:c7:87:
         1d:aa:97:13:1a:bb:b5:e9:b2:97:21:71:5d:5a:de:54:3d:ce:
         bf:f0:75:48:fb:b7:8c:63:f5:60:e4:52:78:ec:df:04:67:e0:
         50:83:14:e7:5f:1a:03:80:c1:de:ff:6c:e4:80:3c:c7:61:18:
         8d:81:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----