This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
File:                     QoWCG7eoRF779DPUwZiQp_qUn6g.cer (raw, json)
Hash identifier:          zqIiHBGFvGvnZL/Tz/b3D/t7P3yEAk2MqsP48N4Faj0=
Subject key identifier:   42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F82D2C6D8436C23BD12DA4E2D338D5F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:20:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209383
                          IP: 139.28.192.0/22
                          IP: 2a09:1b40::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:d2:c6:d8:43:6c:23:bd:12:da:4e:2d:33:8d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:20:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:81:88:7b:26:59:49:68:ff:bb:fa:18:62:
                    f3:01:c5:df:8e:c8:9e:ae:81:e9:c2:e9:12:be:2d:
                    2f:b6:78:f5:b4:fc:f7:66:4b:57:63:8d:31:97:e5:
                    92:d0:ad:74:fe:47:ec:05:11:b2:90:be:81:fd:46:
                    07:8b:65:ae:9f:e7:58:52:47:d8:fa:3b:e5:5d:97:
                    74:86:8a:84:32:99:85:bc:05:6d:2c:07:d3:0a:65:
                    d7:cf:8f:a2:b7:52:8e:92:07:97:56:79:91:2c:73:
                    1f:f6:a5:b0:d7:9a:69:0d:5a:5c:92:37:c1:07:d2:
                    56:4b:2e:d8:9c:39:d8:b1:d6:06:4e:3c:6a:ba:53:
                    88:35:db:95:9b:6f:4b:21:69:30:8f:9b:a8:b2:d6:
                    b9:00:23:f0:89:2e:af:e8:27:f4:5e:b5:80:10:c8:
                    51:d8:2b:d3:0d:80:4a:56:79:0c:1d:27:8c:e3:e8:
                    73:0f:7f:33:06:76:46:2e:57:0d:a5:da:ad:3d:6f:
                    55:31:d1:03:95:34:bd:f4:19:af:3f:5d:21:59:52:
                    4e:6f:8f:ce:35:a3:39:d3:ca:8e:f1:2e:f2:29:3e:
                    97:cd:5a:67:5e:40:47:b9:66:5a:81:10:04:52:e4:
                    70:49:60:7a:79:85:db:18:f0:c1:7c:68:a2:19:63:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.192.0/22
                IPv6:
                  2a09:1b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209383

    Signature Algorithm: sha256WithRSAEncryption
         9d:7d:39:c6:62:bc:06:2f:2a:3b:ea:6d:b3:58:f8:ce:f5:2b:
         e4:32:1d:30:d7:60:47:36:d1:10:6b:ed:47:e6:b0:a5:d4:32:
         de:6e:9d:92:25:50:08:81:46:9c:e9:f3:82:09:2a:52:15:55:
         01:35:ec:4c:e6:7c:e2:39:6b:7f:2c:17:62:78:22:5f:94:c3:
         56:77:f6:24:7e:da:4c:9f:b7:d9:41:fd:95:af:90:8c:ec:a4:
         39:4a:a2:ee:e8:92:c9:2a:a0:d9:6f:53:0c:7d:e5:3d:35:83:
         e9:a6:f2:df:59:55:12:8e:08:6b:9f:95:bd:2e:a2:56:ad:4b:
         d9:93:d1:ea:dd:d0:88:33:5c:69:d5:c7:fe:7c:25:3e:a9:7a:
         b9:23:dd:8c:3f:65:61:48:e2:ee:8a:97:e0:9d:7a:3a:05:12:
         2b:d5:a4:3d:1c:04:fe:c5:b6:56:0d:e4:ba:a5:d4:b6:42:dd:
         e8:f4:ce:11:74:9d:e4:a0:01:f2:92:22:9b:49:95:0a:09:ba:
         8b:a2:84:c9:31:a3:bd:1f:08:35:60:3f:66:7e:0a:27:10:20:
         56:05:71:67:7d:02:aa:91:e7:54:9c:d4:76:30:d6:25:56:2b:
         8b:be:aa:82:39:f2:66:b1:75:75:e9:e6:56:d7:cd:74:a6:72:
         e1:3e:1d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----