This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
File:                     QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer (raw, json)
Hash identifier:          KjIoPd+N7eccbWNc1NWd3Hq/lzsVgox9kGNQ/ruB7YY=
Subject key identifier:   41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7E3875CBFB25D37A80CB31667145136B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 10:19:48 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 195.137.175.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:75:cb:fb:25:d3:7a:80:cb:31:66:71:45:13:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:19:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=414915cdd322bfe39472536955464a5ff67117c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7b:70:93:e1:c5:87:ea:61:e7:03:73:f4:42:
                    ec:12:a6:e1:1a:e6:b0:11:38:61:f6:b6:3e:d6:d9:
                    31:fa:ec:7e:de:c7:19:b4:3c:f2:87:16:fe:e2:a6:
                    ed:dc:7a:1b:1a:9c:8d:24:92:78:0f:bf:63:5c:56:
                    02:e9:bd:42:e0:be:c4:57:27:62:ae:7b:9f:3c:74:
                    5a:aa:79:ae:04:0e:0b:79:37:7f:7e:28:60:f3:43:
                    9d:7e:c6:5e:d2:1c:52:87:07:b9:0b:23:20:4a:55:
                    96:d2:5b:49:a6:67:db:8c:09:2c:6d:10:34:10:ef:
                    18:18:42:2c:40:02:99:44:a8:b6:d2:0b:40:41:99:
                    68:d2:f3:0a:f3:22:a5:b5:e8:75:47:34:ef:19:c3:
                    b7:76:eb:47:f8:40:ed:9f:0b:69:c0:55:a3:b4:94:
                    32:99:ea:d8:a5:61:e3:81:44:90:6c:ed:5d:98:9c:
                    89:8e:45:db:78:48:45:71:ed:a6:05:89:0e:90:f4:
                    b4:e3:7f:64:0a:bf:9e:22:41:5f:7e:28:b9:12:fe:
                    0a:39:94:29:db:00:8d:76:18:30:3d:53:b2:3e:03:
                    8d:0e:5d:2e:72:10:2f:09:aa:b7:08:d0:75:cd:3b:
                    21:e9:27:c8:56:5d:06:aa:19:08:d5:6c:8d:96:ad:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.137.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:50:06:ea:5f:1f:45:82:6a:25:e8:36:39:37:a0:19:cd:
         fc:db:1d:f3:62:2a:5c:41:89:a6:d3:08:c4:cb:86:c2:34:73:
         fe:8d:88:2e:31:de:d4:5b:f4:be:2e:bb:6f:9e:86:c7:f4:35:
         3c:bd:fb:87:88:a3:a9:f6:a6:28:10:ac:0d:5d:52:24:69:a0:
         fe:8e:d9:f7:62:4f:73:14:d9:02:6d:fb:d4:56:58:71:20:96:
         22:13:f4:37:19:1a:be:7d:8c:65:15:59:1a:36:7f:81:5c:2c:
         60:75:50:13:09:96:7c:b3:bc:1e:1c:d6:2d:c2:cf:c2:2c:38:
         c7:dd:09:3e:08:cb:dc:ec:74:6a:bf:28:c2:69:3c:c4:2d:0c:
         a0:e4:c3:86:77:1f:17:a7:c8:dc:8a:5f:a7:90:71:51:eb:05:
         f5:b3:35:47:76:d6:53:f9:14:83:35:25:11:41:2b:13:f1:46:
         f1:a2:5e:63:e3:8e:36:b2:51:70:30:a5:6c:98:46:b8:c8:83:
         db:c8:69:21:26:29:8b:a0:9e:da:ec:44:b2:28:4c:f8:90:f4:
         b4:9e:fe:7b:94:d4:d5:e5:f0:d7:69:4d:9e:3b:c2:fa:a8:63:
         09:50:6a:8c:81:b4:cd:59:b8:81:26:59:ed:07:91:84:6e:8d:
         df:be:1c:66
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZt+OHXL+yXTeoDLMWZxRRNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTQ5MTVjZGQzMjJiZmUzOTQ3MjUzNjk1NTQ2NGE1ZmY2NzExN2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Htwk+HFh+ph5wNz9ELsEqbhGuaw
EThh9rY+1tkx+ux+3scZtDzyhxb+4qbt3HobGpyNJJJ4D79jXFYC6b1C4L7EVydi
rnufPHRaqnmuBA4LeTd/fihg80OdfsZe0hxShwe5CyMgSlWW0ltJpmfbjAksbRA0
EO8YGEIsQAKZRKi20gtAQZlo0vMK8yKlteh1RzTvGcO3dutH+EDtnwtpwFWjtJQy
merYpWHjgUSQbO1dmJyJjkXbeEhFce2mBYkOkPS0439kCr+eIkFffii5Ev4KOZQp
2wCNdhgwPVOyPgONDl0uchAvCaq3CNB1zTsh6SfIVl0GqhkI1WyNlq3joQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEFJFc3TIr/jlHJTaVVGSl/2cRfDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzI4MzIz
NC1hNTJhLTQ1NTYtYjNjYi1mMWQ1Y2E5NmE3ZDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvMjgzMjM0
LWE1MmEtNDU1Ni1iM2NiLWYxZDVjYTk2YTdkNi8xL1FVa1Z6ZE1pdi1PVWNsTnBW
VVpLWF9aeEY4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw4mvMA0GCSqGSIb3DQEBCwUAA4IBAQABsFAG
6l8fRYJqJeg2OTegGc382x3zYipcQYmm0wjEy4bCNHP+jYguMd7UW/S+LrtvnobH
9DU8vfuHiKOp9qYoEKwNXVIkaaD+jtn3Yk9zFNkCbfvUVlhxIJYiE/Q3GRq+fYxl
FVkaNn+BXCxgdVATCZZ8s7weHNYtws/CLDjH3Qk+CMvc7HRqvyjCaTzELQyg5MOG
dx8Xp8jcil+nkHFR6wX1szVHdtZT+RSDNSURQSsT8Ubxol5j4442slFwMKVsmEa4
yIPbyGkhJimLoJ7a7ESyKEz4kPS0nv57lNTV5fDXaU2eO8L6qGMJUGqMgbTNWbiB
JlntB5GEbo3fvhxm
-----END CERTIFICATE-----