This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
File:                     TZGXarBr_68-KPhChts-4gPgfV4.cer (raw, json)
Hash identifier:          7ak2x7qJYjZBiwaGURPLF459EhCoCcIvBSq4xVyLs5M=
Subject key identifier:   4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7AC896BB24448782000E684B7945F368
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 18:18:44 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 206814
                          IP: 77.247.197.0/24
                          IP: 2a12:b540::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:96:bb:24:44:87:82:00:0e:68:4b:79:45:f3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:92:37:01:81:71:67:d0:e0:54:14:51:5f:
                    f7:26:01:fb:1f:7b:8b:5b:58:91:0c:24:de:f4:ed:
                    7b:4d:03:b9:b9:c2:7b:99:83:14:bf:86:d7:c9:17:
                    d2:a7:31:08:f7:18:af:54:88:32:07:ad:d5:a4:a2:
                    02:25:e1:ff:87:85:2d:b1:73:34:d4:ee:c3:16:44:
                    80:06:2f:27:d0:bc:68:07:da:bb:a4:27:bb:d7:81:
                    49:18:11:29:86:41:77:56:02:e3:5a:ab:f4:fe:eb:
                    6f:88:64:e7:45:ba:e1:48:e6:7a:75:0e:e1:71:c6:
                    b4:89:9c:3c:d5:ef:de:b6:c5:16:46:d0:23:0c:ee:
                    82:c5:ef:58:7f:60:92:2d:78:bf:3b:01:b9:59:c6:
                    8c:d8:30:e2:53:48:7a:2e:81:58:99:20:90:56:2e:
                    e2:92:f8:d2:05:8b:27:93:9c:e1:ef:f2:66:6a:66:
                    f1:3f:4f:d0:51:0c:90:cd:1d:8e:29:fb:76:9e:2e:
                    32:da:b1:ae:6b:27:75:88:76:7c:d4:75:74:6e:0f:
                    bc:b6:cf:70:12:59:d6:27:f4:40:78:d9:d0:b0:67:
                    d9:2c:b3:b7:a9:8d:00:bf:54:47:ad:78:2d:ca:96:
                    05:d6:d3:b0:f5:b5:de:ad:b1:23:06:c1:0b:57:99:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.247.197.0/24
                IPv6:
                  2a12:b540::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206814

    Signature Algorithm: sha256WithRSAEncryption
         3f:e6:23:17:c6:a7:62:13:7a:91:1b:5a:05:24:64:14:43:ec:
         4e:9f:d2:50:60:eb:52:30:82:00:bf:db:be:7c:40:3b:28:48:
         aa:94:22:08:2e:ec:9e:3b:ae:d3:d2:ad:74:ad:a4:89:04:88:
         8c:57:93:77:f4:1e:85:08:92:65:6d:62:d4:94:6b:66:15:91:
         14:d1:f7:84:37:6b:83:ba:f9:21:48:bc:b4:5b:1b:54:51:bf:
         78:8a:5a:ba:b8:70:8e:21:ee:cc:15:15:15:0e:22:a8:61:d8:
         b6:73:aa:95:7e:ba:0a:e0:2b:65:a6:00:36:e7:de:5d:42:cc:
         76:8f:ae:db:30:9c:c2:ca:dc:7f:29:83:8a:29:c3:02:52:f6:
         a1:d7:74:0c:93:2e:ce:86:48:b9:4e:5d:a4:33:95:97:4d:95:
         e6:e4:4f:b1:99:d0:af:fe:02:d4:04:a9:d5:9e:1d:72:e8:e2:
         8e:55:a3:03:ec:a5:f2:c9:87:ba:e5:e5:d3:42:6a:e7:51:7f:
         33:fd:a2:9a:8c:42:fc:7e:c5:d5:e7:30:b7:f1:20:00:34:7e:
         0c:67:73:45:8c:d1:d8:58:11:84:fd:46:c8:f6:3b:25:33:41:
         91:35:dd:56:76:53:0a:6c:11:4a:b4:d9:4a:de:1e:28:e6:0e:
         8c:7c:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----