This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer
File:                     QZTZ3em51VD_NJfkNoP2iA1AMyM.cer (raw, json)
Hash identifier:          iHRp83+GssN+CMbTBcIGu2+fM+tWhe72kl2CiSLWvpo=
Subject key identifier:   41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019ADA8F87DD49B5E0901B83168B19F3837C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Dec 2025 15:37:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62218
                          IP: 185.43.92.0/22
                          IP: 2a01:6c20::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:da:8f:87:dd:49:b5:e0:90:1b:83:16:8b:19:f3:83:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  1 15:37:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4194d9dde9b9d550ff3497e43683f6880d403323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:b5:0e:10:13:57:71:c7:ef:90:9e:9e:85:
                    39:4a:a8:4c:ac:0b:3c:7c:7a:fa:eb:31:c4:f6:4d:
                    4c:12:86:e0:57:0b:08:1d:ca:21:ea:f1:4a:d8:52:
                    21:dd:4c:3d:18:8d:62:ca:a6:d9:6a:17:0b:eb:d3:
                    b9:bc:0b:81:e4:b6:2a:66:a7:3b:47:fc:39:e4:f6:
                    58:59:61:a0:14:42:10:96:b9:0d:29:24:44:4f:cb:
                    fa:61:48:85:16:35:ed:23:ef:2c:f3:b1:c3:3c:a1:
                    eb:a2:09:a7:42:e9:bd:92:dd:b8:b9:43:5d:46:5f:
                    ff:60:59:42:13:0f:35:3d:c2:b2:85:7b:1f:e5:f2:
                    30:6f:b3:66:54:dc:67:dc:c5:bb:0e:f5:33:49:94:
                    4e:52:ed:c6:2a:d8:51:0b:a4:f5:91:6d:f9:35:1b:
                    66:2f:3a:c3:af:3a:f2:8d:77:c0:d7:4a:5d:00:be:
                    41:4c:27:70:3f:d3:38:46:f5:e2:0b:6e:86:75:a9:
                    f5:78:7f:7e:c8:18:bb:a5:8c:26:11:7c:da:4c:d3:
                    e4:20:9d:ba:48:5b:99:bb:9e:14:2f:5e:00:63:b7:
                    2a:6c:76:15:94:ef:90:58:5c:3e:89:b0:45:4c:8a:
                    09:49:b3:d5:41:af:19:49:a2:fb:49:2c:dd:61:ae:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.43.92.0/22
                IPv6:
                  2a01:6c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62218

    Signature Algorithm: sha256WithRSAEncryption
         62:d9:8f:f3:fe:01:29:22:a3:8a:41:e4:8c:39:ec:c4:bd:58:
         99:b3:5c:73:2f:39:e5:48:32:63:66:7d:6f:f4:c1:52:f4:90:
         ea:01:64:00:13:29:25:1d:14:5f:ce:dc:54:98:8f:2c:60:79:
         e6:62:a3:f4:74:bd:88:e2:d2:17:84:ee:ec:43:c1:1a:ae:bc:
         56:12:e4:30:05:77:1a:e6:95:83:f7:e0:76:a0:39:43:97:93:
         20:39:2f:c7:5a:df:92:f6:07:96:6e:17:ee:bd:45:d7:bd:fd:
         14:f9:4d:d5:14:a8:09:f6:6c:e0:eb:51:ad:aa:dd:40:eb:4b:
         69:ff:84:79:1c:13:a1:b3:07:59:1f:92:57:d1:cf:68:b2:c8:
         a2:e1:63:87:98:91:16:d0:62:fc:2b:34:85:7a:fd:95:29:03:
         de:c1:cf:22:11:f2:44:3f:d2:11:3f:4a:9f:ca:a7:18:a1:02:
         8a:ec:50:f0:81:53:b1:7f:11:6f:d7:48:c7:07:fc:cc:c0:ab:
         d7:2c:16:69:7c:bc:0a:7f:23:c0:20:84:4c:0c:49:74:92:f5:
         0c:15:b7:7c:73:6f:41:69:07:0f:d6:77:92:26:85:4f:aa:15:
         2c:b8:88:ed:87:15:18:60:54:9e:69:ae:11:4c:ae:fb:17:c9:
         5f:c4:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----