This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
File:                     VffKupvV-frB4BRadWfJtFmpXoY.cer (raw, json)
Hash identifier:          hsn/0Y2+ZJX/NwrvlnQQiJPPjoqUPa0HeiH1EYEyg0g=
Subject key identifier:   55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C702B7703BB5EBD9F1C898BB39340F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:09 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 58205
                          IP: 195.88.188.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:02:b7:70:3b:b5:eb:d9:f1:c8:98:bb:39:34:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:68:e2:39:23:6b:86:1f:9e:f3:5e:46:04:
                    c8:80:0c:cd:19:27:0d:fb:c8:a3:f2:35:4f:20:57:
                    ad:98:fe:31:11:cf:65:31:86:59:ec:07:fa:c2:e4:
                    21:7f:c0:93:28:be:79:e6:90:95:fa:96:15:6c:f5:
                    26:ce:98:a4:1b:5d:5b:39:dd:ae:e5:5a:4d:48:78:
                    38:37:47:9f:41:70:7e:3e:2c:e3:0a:1f:f8:95:f7:
                    8e:ca:71:7f:1d:bc:65:45:70:ac:86:6e:76:c6:f7:
                    e0:77:8f:d2:f5:38:ec:90:d4:7c:7c:5b:bf:3f:e4:
                    db:f7:4b:0d:d9:be:82:1f:79:f9:d4:d5:9f:94:e1:
                    72:46:19:ea:20:a8:de:94:43:1e:56:0f:6d:ea:15:
                    32:b5:bd:05:6a:5e:75:ab:ea:fc:a0:54:ba:67:9a:
                    25:c0:25:eb:f0:99:9d:af:d5:42:a6:76:52:1c:76:
                    fe:5f:7e:30:1e:ee:d2:75:d8:64:0e:53:45:56:44:
                    eb:b3:16:89:5f:be:b1:09:5b:f6:ce:82:70:30:2a:
                    a3:e6:4b:79:7a:1a:71:8e:c4:94:73:91:4c:46:f8:
                    26:fa:5b:3e:92:ad:08:5d:aa:7e:81:0f:45:a0:cb:
                    85:23:3e:d5:54:06:06:27:d2:ba:d2:13:db:8b:f0:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.188.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58205

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:a9:5d:c3:f0:0b:e5:15:b1:92:f7:c7:7d:7a:04:61:12:
         1d:2d:d7:70:34:94:ff:0f:f4:a8:45:ef:64:1b:e3:aa:02:4c:
         c4:f1:bf:9e:f7:3e:ee:47:46:a6:bc:da:26:ca:7f:5b:4b:25:
         d7:38:a8:94:2b:43:20:85:e2:b2:0f:8b:04:b3:2c:f9:0d:77:
         c8:56:8b:77:94:b4:ac:f5:dd:1a:55:26:74:b9:9f:da:39:e5:
         9a:67:f6:4a:83:2b:4b:40:e3:be:a4:c9:4c:cc:1c:53:da:04:
         d2:ea:dd:ca:6d:71:e1:81:75:11:9c:0e:cb:60:32:45:0a:17:
         ca:1b:f2:78:6a:1d:7b:99:89:70:39:73:c2:1a:63:b4:27:3b:
         ec:3d:e2:44:d7:3c:b5:3b:00:4e:41:62:e7:3a:66:99:58:08:
         27:34:31:57:d6:05:c1:3e:34:58:b0:d7:e6:93:bd:0a:34:aa:
         27:a9:a3:eb:25:b3:31:fd:c6:65:96:1d:0a:d9:af:52:53:5a:
         a6:be:d6:23:11:47:b5:44:0e:af:9f:72:d9:97:53:62:8c:d5:
         e4:d3:1d:63:0f:cb:61:6c:ce:1b:08:6d:87:92:bb:ba:51:40:
         b4:46:ff:61:be:d4:36:1d:25:be:cb:83:96:bf:72:eb:24:08:
         7f:ba:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:02 2026 by rpki-client