This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.cer (raw, json)
Hash identifier:          JhZZJy651iBR/FQ1wn14Cn9omNUn6MQ7kGLFUcahjTM=
Subject key identifier:   5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79ED3674E082B2361F4DD0151707FCF8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:19:07 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.94.181.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:36:74:e0:82:b2:36:1f:4d:d0:15:17:07:fc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:31:58:5f:bd:55:e3:97:fd:d8:a8:5e:f6:
                    cd:10:3b:1b:f6:12:1e:99:0d:a6:7c:8a:63:03:51:
                    4c:76:93:e5:ce:d6:b9:da:c2:61:32:6d:5f:66:b6:
                    5a:7a:59:c4:42:6a:95:a2:d6:bb:82:32:58:52:39:
                    f3:0f:49:4b:f0:65:58:d6:f1:54:9f:f3:85:2a:93:
                    0a:ee:75:81:ce:d1:e6:fd:f6:de:08:a5:32:6b:bc:
                    18:7f:b3:ce:e1:11:92:f2:44:26:12:fc:90:6d:48:
                    f6:bd:a4:56:b8:ef:eb:0e:82:7e:7c:90:18:0e:e5:
                    a6:fc:8b:80:50:fb:64:2f:29:d7:c9:4b:c5:61:25:
                    72:0d:84:05:75:c8:bf:88:e9:ba:40:87:ca:cf:c4:
                    cf:06:db:5e:ea:60:84:db:f1:aa:47:28:a9:6c:03:
                    e6:f5:57:e9:a3:6f:18:49:aa:47:a4:6c:b6:c7:d3:
                    ff:69:1c:fb:a0:53:c0:5c:79:77:35:6f:ee:0b:64:
                    ad:19:f5:3f:00:7d:41:5f:9d:b8:75:fe:74:f5:f9:
                    f8:31:50:70:76:2b:7c:04:af:10:07:db:dd:c6:64:
                    e2:32:69:e7:a0:df:15:ff:c3:de:49:bf:66:7b:27:
                    92:f4:83:9f:a8:80:db:3b:4d:98:ee:9f:40:85:d2:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d5:7b:f5:16:45:6b:0e:f6:e4:24:98:ca:58:4e:96:a5:56:
         eb:0a:dd:ab:de:7a:41:ec:75:c5:b1:7c:9d:5e:eb:c3:bb:9c:
         b6:b0:22:46:bd:9e:86:63:bf:46:69:72:64:74:91:97:78:5f:
         05:4f:e3:bb:ba:70:4e:4d:27:d1:c8:4b:ee:93:ec:dd:fa:02:
         c6:27:91:48:d0:ed:74:81:2b:d5:08:98:01:6c:8a:2c:12:b2:
         ad:1a:fd:99:71:41:d0:97:f1:90:f6:09:3a:9c:46:68:f8:dc:
         0b:c7:ed:42:59:9e:7a:60:a4:eb:84:20:af:29:1e:57:fe:c5:
         f8:78:d0:d6:ae:d8:b2:a8:b2:fa:4e:68:e6:c4:a0:2d:b5:43:
         ef:24:0b:7a:b6:4b:05:5e:a8:30:13:14:8e:12:bd:5e:cd:dd:
         b1:38:08:64:d7:e2:45:b5:a4:0a:0f:e0:bc:8f:76:c8:4a:36:
         f7:42:68:e4:ee:80:2c:b3:13:12:ca:42:53:d4:5b:1d:90:12:
         77:ce:8a:91:cf:0a:55:23:b1:65:ea:0b:f6:f3:45:75:2e:41:
         47:5c:94:a2:ce:0e:44:fd:f3:4d:75:c4:d7:50:40:ed:ec:ec:
         f7:3e:28:04:df:35:98:51:31:a2:c7:c1:fc:2f:02:95:17:31:
         54:9c:8e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:03 2026 by rpki-client