This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
File:                     TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer (raw, json)
Hash identifier:          3JmQgj9UjOYy0W4HIjW2QpUp+dzs7lpoIAiGMHvT+Zg=
Subject key identifier:   4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019AC333E2CAD0BAF7F8CEC428506B663EBA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Nov 2025 02:45:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205692
                          IP: 185.230.44.0/22
                          IP: 2a0b:4ec0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c3:33:e2:ca:d0:ba:f7:f8:ce:c4:28:50:6b:66:3e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 27 02:45:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:65:45:f0:a5:9d:ff:a2:1a:60:5e:fd:65:
                    c8:4c:4a:17:a4:9d:9a:12:d2:9b:7a:f3:03:7c:1e:
                    1f:08:e2:3f:13:97:34:cc:16:64:c8:e4:50:78:60:
                    3c:62:82:11:15:9b:3e:63:51:82:f0:af:89:df:ec:
                    6f:e7:e4:0a:9d:01:0e:69:0a:9d:42:ea:12:8b:b9:
                    c4:18:11:2d:8f:56:80:98:ce:d2:2b:52:37:bc:ad:
                    45:77:e2:4f:08:dd:1b:94:fc:0a:21:26:b7:4b:0b:
                    d5:c4:38:a8:d0:f2:11:2d:91:3f:ab:44:7b:85:96:
                    c3:57:6b:5a:f5:91:1c:4b:90:17:cf:c6:83:68:a3:
                    f3:4f:ba:7b:57:ce:cc:0c:06:d7:88:44:4c:e9:43:
                    6e:96:55:0e:98:5f:d9:cc:85:68:22:a9:d1:f3:1d:
                    83:61:b2:88:f2:98:7f:f3:89:94:bc:dc:59:78:86:
                    17:cd:07:ab:7a:ad:aa:b6:7e:d9:0c:07:6e:60:85:
                    d4:dd:41:4b:4c:26:48:15:0a:85:46:b7:63:1c:a2:
                    c9:1f:9e:63:32:aa:01:13:fc:8c:a6:f1:55:50:70:
                    10:80:ba:a4:d2:ba:d1:00:23:33:c3:19:03:24:b5:
                    d0:99:50:47:5d:2c:cf:1f:83:4d:7b:76:c5:30:37:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.44.0/22
                IPv6:
                  2a0b:4ec0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205692

    Signature Algorithm: sha256WithRSAEncryption
         1a:2d:5a:a2:fc:1c:52:74:51:64:27:95:4a:47:9b:ba:a9:76:
         e5:4d:2d:e8:01:97:95:ff:9d:34:27:97:c9:d3:9a:fd:84:25:
         11:c3:25:93:56:e1:55:0d:47:2f:e0:0b:24:dc:28:98:28:68:
         7c:39:96:d7:65:38:e7:21:36:a4:cb:94:37:d7:ea:d7:83:d8:
         58:e0:63:1d:8e:52:78:c5:27:65:a1:53:bf:58:91:53:14:d6:
         63:9f:8b:d7:58:d3:d3:ca:a6:e3:ba:72:04:14:9d:97:f8:82:
         25:e3:92:3c:96:eb:f5:f4:f3:d1:eb:65:0e:c3:e2:45:b1:87:
         b0:13:02:80:1d:8e:cd:ae:92:58:aa:25:f0:3b:a9:f3:71:b4:
         bd:15:19:a4:30:fe:67:35:9e:2d:cc:24:bd:23:8c:1c:00:4b:
         a8:e0:0b:8e:d6:6a:55:bd:c0:75:a3:f0:96:ea:ac:6c:22:22:
         67:8c:ba:44:33:73:4a:1a:86:ad:d1:24:04:cf:25:1a:8e:16:
         9b:59:b2:67:1a:49:0b:db:31:5a:6c:83:f2:8e:c1:c6:e7:8b:
         1a:f0:e1:dd:95:05:3e:4a:0f:ad:1a:52:a3:7f:ee:2f:e3:ee:
         85:b7:6c:56:67:74:8c:e9:ce:fd:83:d3:25:03:81:7b:53:50:
         b0:c0:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----