This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
File:                     SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer (raw, json)
Hash identifier:          PJ/dIVGZNMZoQflXsgy3dxd5D2ZeL0PbELld0LJnjKs=
Subject key identifier:   49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA3892F7B7000A8CB0C6B3E4580DD33
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:17:53 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 34666
                          IP: 81.16.240.0/20
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:89:2f:7b:70:00:a8:cb:0c:6b:3e:45:80:dd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=490db999ca4ce287c5c92ab167a500902259bb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:2d:c4:a4:b3:3d:d9:4d:6e:ef:f7:c3:e3:
                    53:30:44:f5:27:08:50:20:89:07:1c:30:55:80:b5:
                    1f:4d:9f:04:bc:2b:4b:61:cd:e9:e6:71:72:21:37:
                    62:66:2d:62:ad:e3:f6:f7:92:b3:63:2c:67:c7:00:
                    11:b6:19:c6:75:ad:83:b9:42:30:06:73:ad:b7:71:
                    ef:92:69:d2:47:50:28:cc:a1:67:78:7b:97:4a:6c:
                    63:a2:e8:49:b4:db:4d:ee:4a:70:ed:96:a8:fe:19:
                    d7:89:66:17:53:73:05:f0:0d:97:fc:31:09:0d:f3:
                    28:d2:1a:f2:46:6e:93:1a:fb:0c:8c:67:1f:35:ff:
                    2c:22:b6:7f:9a:ce:b0:dd:c9:55:ec:c1:70:af:12:
                    8b:03:0f:3c:be:5c:77:e6:f5:24:13:e0:41:9b:7c:
                    81:03:ca:a0:96:49:b5:ac:a3:66:3d:39:59:0c:0c:
                    cb:f4:c9:55:ad:01:c9:33:9f:50:be:91:ef:15:eb:
                    22:35:57:d8:21:83:ac:44:46:7b:44:da:0e:50:bd:
                    98:fd:e4:d0:e4:28:37:37:55:fb:5b:18:e8:92:4f:
                    e9:d3:eb:b4:f1:34:b9:9d:9e:c3:e7:8d:13:d3:3a:
                    5a:ff:f8:14:87:bf:f1:cb:24:5e:d1:bb:d9:57:51:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.16.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34666

    Signature Algorithm: sha256WithRSAEncryption
         9a:3e:5e:76:60:6a:4b:10:8a:26:23:ad:72:41:35:7e:2b:67:
         75:30:1c:9c:59:cd:54:5d:44:fe:85:6d:b2:76:77:c4:a8:32:
         9c:cf:57:31:10:e6:00:7d:ed:77:73:01:93:50:9c:69:72:56:
         d8:49:db:2c:95:1e:fb:b2:ff:31:50:99:9b:a5:4f:10:83:af:
         97:14:b2:04:bd:fb:c7:f8:c6:ed:d8:cc:3d:27:b2:67:f2:de:
         57:66:0d:61:9e:d9:f3:a2:b4:3a:61:69:71:8a:8c:fa:1b:46:
         60:85:50:d7:7d:29:2f:31:b5:82:39:d6:5b:9e:fa:fe:b9:13:
         4b:f8:66:73:4f:f0:51:4a:f7:82:7d:d8:4d:9e:2c:22:6a:56:
         aa:06:c5:91:3e:78:a6:44:04:f8:6d:ca:84:d5:20:40:b9:7a:
         91:31:a4:ed:c6:e2:cb:d3:a1:59:ac:45:9a:0f:78:ff:63:1d:
         51:56:12:a0:1b:20:01:fd:c3:8e:29:bd:56:e3:1e:35:ae:64:
         8b:f5:5b:84:10:20:97:1a:d8:9b:eb:ce:aa:e8:30:c9:d6:04:
         8b:6b:ad:9a:e4:b6:69:28:3b:07:aa:53:ea:25:43:56:13:de:
         e6:cc:d2:4f:71:f6:ab:60:04:bf:28:12:29:92:ab:ed:e7:d1:
         cd:50:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----