This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
File:                     WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer (raw, json)
Hash identifier:          0hK56iWGK93rTFpFeGsqMpb4DS3hfrJ3LHjBYwF7TDU=
Subject key identifier:   58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F82A95B3946FB47243BC59675295608
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:20:28 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 45.15.4.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:a9:5b:39:46:fb:47:24:3b:c5:96:75:29:56:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:20:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:30:be:b3:45:23:f3:c0:b8:b9:1d:81:22:
                    a1:9e:ee:ae:ec:b2:32:f2:8e:d1:f3:59:cc:07:7e:
                    95:a4:5b:5e:59:1d:0a:09:9d:2d:7f:19:06:13:81:
                    38:e2:35:49:81:9c:82:97:62:fc:89:b0:12:20:00:
                    c1:b1:e7:20:e7:da:d3:e5:7c:0c:57:52:9c:e7:40:
                    78:6e:9a:a8:ae:31:2d:79:51:b3:00:82:8e:0a:d2:
                    a2:8f:49:ae:15:e7:3e:00:a6:a4:17:4d:69:15:43:
                    fd:1b:9c:18:ad:b6:33:7e:52:0d:f9:1f:aa:a6:ef:
                    d5:ff:cb:58:0c:98:69:06:36:7a:eb:1c:24:0c:8a:
                    3b:50:6c:0b:a3:20:32:74:11:b9:4d:3d:c7:0f:e7:
                    cc:d3:c2:71:01:09:38:e5:c6:0a:66:5b:4b:3c:80:
                    b6:be:f9:86:30:fb:c3:c3:27:f3:a3:67:be:7a:2b:
                    7d:15:36:33:cb:8b:77:d2:fe:13:79:ad:9c:dd:d1:
                    87:94:a5:1c:63:6d:b4:97:e8:33:80:5d:1e:95:4b:
                    47:88:ea:83:42:83:58:bb:b9:f5:66:b0:60:1c:4f:
                    7d:c8:82:2e:39:2b:53:f9:5a:a6:c8:53:24:ab:76:
                    00:f9:68:94:9a:26:15:80:71:ae:b7:dd:d6:db:36:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:67:df:bf:b8:c5:e7:4a:64:99:e1:30:b2:e2:00:ef:13:47:
         ed:bc:7e:9c:a1:f8:87:46:6e:32:d1:5a:cb:87:8c:e5:1f:ac:
         f3:ef:96:d7:39:85:dc:ed:2c:67:76:ec:61:32:e8:7a:08:1c:
         55:f7:05:50:07:07:d5:a7:3c:6a:92:52:b3:8f:d5:14:0d:dd:
         cf:4c:b8:87:e2:d4:d5:86:b4:ac:7d:76:b4:5a:f2:af:b7:5a:
         d8:32:a9:74:75:a3:70:11:17:8b:d0:a3:8b:7f:44:4a:05:ed:
         d0:3d:59:74:6d:a1:52:b2:ec:e7:dc:de:6f:37:ce:e8:88:e1:
         04:c1:69:b7:37:af:e2:dc:6a:b4:b1:21:79:81:ab:ea:7b:fb:
         1d:bc:3a:d4:c0:ae:be:dc:1c:0c:02:e2:87:22:3d:ac:27:56:
         0c:6e:1b:06:01:58:47:a5:02:79:9a:ed:a3:c3:e0:6e:a0:66:
         aa:79:85:e7:19:e1:c0:e4:69:d5:d1:58:8c:d9:8c:5b:d4:1b:
         ab:3c:20:7f:2b:5e:fb:41:a9:96:d0:62:74:1c:cf:ea:3c:02:
         56:bf:25:1b:25:15:45:27:c0:0f:51:41:c3:6c:48:55:fc:73:
         82:66:dc:bd:80:18:2e:49:41:66:b1:30:c2:02:ad:28:aa:e7:
         83:a3:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----