This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S3NMolsEoZjz7_ecKTNRYGRwIj8.cer
File:                     S3NMolsEoZjz7_ecKTNRYGRwIj8.cer (raw, json)
Hash identifier:          WSYquPW/OmXJznDBqLoBgVJa86cpqMCF5MpCodrwns4=
Subject key identifier:   4B:73:4C:A2:5B:04:A1:98:F3:EF:F7:9C:29:33:51:60:64:70:22:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B8DE3D8DB08670467089A3729BC69F25B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.mft
caRepository:             rsync://akane.maru.co.jp/repo/1073c6/11/
Notify URL:               https://akane.maru.co.jp/oshirase.xml
Certificate not before:   Mon 05 Jan 2026 11:21:18 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.155.75.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8d:e3:d8:db:08:67:04:67:08:9a:37:29:bc:69:f2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  5 11:21:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b734ca25b04a198f3eff79c293351606470223f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6c:2e:99:03:33:75:d9:13:60:9e:1e:52:22:
                    99:cb:a1:c6:ca:9a:24:42:6a:a8:e4:c3:86:38:e2:
                    8b:28:6a:89:fb:fc:46:3b:98:f2:7f:81:19:85:ef:
                    ad:a0:55:0e:9d:c0:16:8a:3f:1c:e7:c1:93:1f:2a:
                    5d:9a:8a:84:6d:82:d0:7e:8b:a9:0a:03:e2:b7:40:
                    38:bb:d8:c3:a7:4f:0f:31:4f:bf:ba:c0:c9:35:7f:
                    d4:e3:70:e8:61:c1:ad:e0:98:ea:3f:fa:4a:d0:5b:
                    9a:23:3a:8e:9f:cb:0f:a3:33:e6:c3:9a:27:0d:fa:
                    25:28:01:f9:5f:90:2f:17:cd:e7:c3:72:d9:c9:8c:
                    b8:19:60:ac:99:65:e8:99:b2:e3:ef:94:96:15:4a:
                    50:e2:97:2c:d6:d9:e4:d8:93:c8:40:93:06:71:43:
                    39:54:3b:aa:b3:86:fe:43:f4:71:f8:68:f4:7c:b2:
                    34:f5:03:2f:b4:cb:c1:fb:f7:ac:a3:65:4d:4e:1c:
                    d8:85:4c:2d:20:91:32:f8:cc:d6:cf:25:f1:1c:82:
                    95:f8:03:d5:50:36:96:f6:46:d0:cc:87:a8:d4:3a:
                    82:93:99:ea:a2:32:8c:f7:ce:c5:15:26:5c:fd:a7:
                    c5:83:1f:58:94:3b:58:4d:06:40:47:c7:e2:1a:b6:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:73:4C:A2:5B:04:A1:98:F3:EF:F7:9C:29:33:51:60:64:70:22:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://akane.maru.co.jp/repo/1073c6/11/
                RPKI Manifest - URI:rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.mft
                RPKI Notify - URI:https://akane.maru.co.jp/oshirase.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:ab:3f:ed:c7:7a:31:8a:fc:cc:e1:b4:0d:c8:92:1e:17:
         1b:b8:bb:10:0d:ca:02:b8:c4:58:58:30:c2:fd:0c:40:bb:a5:
         be:08:8c:0e:b5:e8:e8:d7:dc:36:88:a6:fb:07:b3:5c:d2:a9:
         95:d8:44:f8:c9:2e:1a:8b:62:2e:0e:02:17:93:80:15:70:57:
         6a:fe:4b:98:e4:07:3e:2f:6e:9e:82:f7:49:46:93:52:cd:f9:
         a7:98:b0:77:4a:31:28:dc:92:54:d2:12:0f:e8:14:6e:1a:8c:
         02:61:cb:d2:b2:f6:86:06:3e:74:c7:71:87:c6:a5:73:02:8b:
         0a:8a:a2:4d:f8:c4:26:e1:c1:99:6c:24:83:ec:27:4e:b8:65:
         7d:3b:34:f4:79:ae:3b:d9:4f:ec:60:e1:c2:31:2b:d5:33:97:
         2f:94:43:7d:05:74:70:15:bb:6e:5f:c4:7a:b7:56:0b:84:57:
         78:fa:ac:29:40:58:95:03:2a:f8:11:8a:b7:7f:91:13:c5:4f:
         fc:5a:2c:3b:cc:a0:6f:52:0c:f3:fb:aa:52:f5:12:66:72:4c:
         4b:82:53:e0:9c:77:11:f7:5f:a6:ed:eb:35:74:a0:ef:fd:69:
         34:e2:a9:e9:a4:ea:c3:89:b5:10:24:f6:a5:13:0b:85:79:2d:
         aa:d0:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----