This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.cer (raw, json)
Hash identifier:          r1kh/JjqdPFi8PGQeftO7NI3TQdGIji4Bda71Cuv7vE=
Subject key identifier:   58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B30E7575A59A007C03945D703868795A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 18 Dec 2025 10:00:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197450
                          AS: 213652
                          IP: 2a12:e680::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:e7:57:5a:59:a0:07:c0:39:45:d7:03:86:87:95:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 18 10:00:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:b4:ff:4d:52:74:07:45:7a:24:9d:94:90:
                    1e:b3:61:be:fe:c5:52:f6:a9:d3:a3:d6:f0:24:62:
                    20:9d:18:0c:0d:d2:74:9d:5f:57:1f:ba:45:9a:4e:
                    88:37:4e:89:76:fa:5b:5d:59:4f:eb:14:d2:b4:fd:
                    8d:4f:5e:ce:76:4e:00:20:96:ea:c3:c7:33:b1:59:
                    00:89:53:6a:1d:4f:55:32:89:22:1d:81:50:7f:66:
                    d6:e6:cb:a6:2a:0e:b2:87:10:3e:fd:60:27:97:50:
                    42:cd:bc:36:9b:05:64:f8:a0:b7:63:aa:6d:47:fb:
                    b0:77:0f:6c:2c:49:87:a3:ba:f6:59:47:a8:2a:52:
                    29:61:35:9e:60:4e:a9:41:71:a8:1b:3a:9b:55:cf:
                    10:f9:f6:88:44:bf:03:44:59:b3:12:fb:51:cf:6d:
                    46:4b:2f:de:3c:d7:1d:62:b7:9f:ad:03:68:57:53:
                    1c:a0:91:35:9c:2c:15:06:45:12:21:d5:bb:da:0f:
                    a6:8d:c6:ef:0c:ff:57:5a:e4:ad:74:33:db:12:42:
                    81:b8:60:65:7b:6a:70:87:90:80:3e:d5:4e:60:7f:
                    0b:c7:a7:b9:dd:ed:ad:3b:7d:30:66:67:43:f8:65:
                    51:01:dd:0b:8e:78:ab:f2:ee:32:74:7e:b8:83:c3:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:e680::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197450
                  213652

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:2e:53:2d:e7:61:88:be:c9:6e:45:d3:d9:6a:3b:65:6a:
         52:55:8e:40:47:69:ad:16:40:68:b7:7d:85:3a:e3:e9:21:66:
         1f:01:80:1a:16:55:31:02:f3:e3:40:b6:e8:44:df:a8:16:06:
         1c:b3:ad:2c:c1:c3:2b:df:8b:9f:30:02:d3:ac:a3:e6:5a:46:
         3f:04:bb:57:e2:17:08:11:5f:a9:d0:22:d2:fa:b3:b9:47:43:
         96:97:28:77:53:26:f0:31:fa:06:cf:0d:81:82:39:4a:80:f7:
         38:4b:04:7c:ae:ea:86:73:18:31:dd:36:01:42:da:e2:72:15:
         12:f4:70:8e:62:3d:f1:7e:69:c1:c7:fb:1f:80:21:8a:6a:38:
         70:15:32:ea:d2:f3:a0:aa:6c:c5:7b:08:9b:d5:7e:46:1b:2a:
         de:17:73:5d:a4:a5:2c:cc:ff:9e:6a:62:88:7a:d2:17:41:b0:
         aa:78:87:7c:b5:ac:9a:b3:b6:b5:4b:f3:fa:6d:c0:02:1a:1e:
         1d:67:ff:e5:3b:28:8b:e4:c1:10:54:06:f4:15:74:af:0f:de:
         43:a7:bb:c9:e6:8d:31:e1:e3:08:e7:fe:28:62:00:09:fe:05:
         93:9d:1a:ce:ee:2d:ec:bb:7f:84:f1:69:73:d3:97:f4:19:dc:
         3a:66:21:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----