This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
File:                     WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer (raw, json)
Hash identifier:          sAPEB0/OyAMhrrV8Y667JiZwqMUMqNzilLmWuDGcnkQ=
Subject key identifier:   59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7B362AA7D39ACA3EAB3B17EB85AF6B74
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 20:18:26 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 91.213.65.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:2a:a7:d3:9a:ca:3e:ab:3b:17:eb:85:af:6b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=594b79990f616a8344c860148fc922910e154dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:a1:36:e5:fd:cf:82:7a:43:51:78:a9:90:
                    96:65:ed:bb:5f:61:1c:37:91:97:72:bc:b9:58:13:
                    58:77:2d:22:6a:d2:ee:42:25:97:24:fc:fa:be:65:
                    f9:65:90:a9:41:0b:f3:47:77:25:ce:cb:ad:a6:3a:
                    5f:ba:70:c8:56:13:79:7e:ca:5a:8a:4a:19:84:61:
                    a3:ae:94:34:00:72:f6:fe:ae:6a:db:f0:8c:c1:b9:
                    0a:0b:58:bc:88:98:25:97:4c:63:40:bc:10:6d:d8:
                    ab:fa:7a:19:33:09:03:de:63:30:c3:9e:55:f5:d8:
                    58:5d:55:0c:4d:d2:07:5b:a4:1a:ab:fc:db:37:ed:
                    5e:27:a5:a7:a4:eb:f6:b8:06:64:2c:6c:09:47:90:
                    9f:74:95:da:dc:91:6e:6e:5c:9d:e9:72:18:96:b8:
                    f3:9c:97:19:86:b9:70:e5:43:55:82:6a:4e:7c:9c:
                    69:a5:1f:ce:60:3d:68:7d:e1:b7:ba:6b:44:98:34:
                    e3:32:c8:33:6a:79:5a:4c:72:cc:0e:d5:62:6a:f4:
                    c3:8e:ca:f4:5a:45:8a:0b:6b:42:3a:8c:15:8d:e7:
                    c0:66:5c:a5:59:16:63:62:ef:83:c0:c1:20:be:18:
                    80:cd:35:d0:3e:8e:a6:29:3e:8b:5c:81:b5:07:f3:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:1e:7e:d8:9a:bf:7f:b3:b5:8d:db:e4:13:59:b0:44:fc:
         c6:04:6e:87:4d:fa:74:df:51:4d:1f:12:83:f8:80:50:d1:3e:
         4c:07:64:e3:ad:06:48:26:52:18:cb:29:27:86:02:55:af:4a:
         56:75:f1:3f:d2:af:a6:e7:53:61:aa:e8:79:a2:65:ae:8c:cf:
         6a:53:fd:67:9c:35:fa:90:06:4f:d6:b6:5d:53:82:13:a1:5f:
         9f:03:6d:2f:17:bc:13:ea:9a:f8:a9:47:23:7f:cc:bc:62:ac:
         f6:94:df:0f:82:0d:c8:e3:f6:ee:8a:fb:6e:41:4c:97:21:8b:
         07:08:c5:92:1f:02:72:e0:d8:29:03:d2:09:a6:72:46:76:b0:
         df:03:02:76:75:da:cc:8c:da:cc:29:51:64:d0:fc:19:da:fd:
         a1:17:b7:d6:b7:30:a8:f9:1e:88:8c:6e:3d:27:d2:2f:9e:86:
         ac:88:06:87:50:1f:0d:09:ac:cf:4e:21:bb:ee:b5:cd:83:11:
         48:54:c6:cd:b7:13:63:33:79:8e:e8:ee:73:53:24:08:77:fb:
         60:aa:fc:8e:53:41:40:60:ce:9d:6c:84:a4:b3:b6:fd:26:3c:
         66:ac:d9:a8:59:a6:23:78:06:c8:46:6c:7b:ac:07:66:a3:c2:
         18:d7:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----