This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer (raw, json)
Hash identifier:          TN5Ba6rRc2JBFILwdoFK7YGKTSqd33yGtxoccNQsrb4=
Subject key identifier:   66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79ED4BE9BBF1F841F13BCAABA51165E9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:19:13 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 131.174.0.0/16
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:4b:e9:bb:f1:f8:41:f1:3b:ca:ab:a5:11:65:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:bc:75:71:76:a6:54:25:e4:e6:7c:a1:f0:
                    b9:2c:26:eb:7b:19:57:64:e0:56:d4:b2:d8:97:fb:
                    db:8a:92:e0:50:dd:df:bf:81:0a:3d:a9:11:0a:ba:
                    60:d9:d9:47:fa:69:a8:4d:a9:3a:9b:74:7f:d7:c5:
                    bc:38:31:51:95:80:b3:b6:57:ae:2f:96:25:e1:6b:
                    cd:7e:2e:2c:d8:86:75:63:c1:e0:4d:5a:91:16:e4:
                    b2:46:bb:da:6d:7a:64:7a:1b:91:96:b3:09:9d:9d:
                    f0:2e:9d:6e:de:61:2f:d2:22:7d:40:3a:b0:99:9b:
                    58:c6:71:91:28:09:40:35:b2:85:03:ba:fe:67:05:
                    e0:f2:fe:74:a9:ae:04:d3:23:43:2a:ed:d8:1b:87:
                    98:b1:e2:3e:3d:f9:ea:44:8c:ac:53:86:cd:13:bb:
                    33:3d:f6:48:7b:56:f0:94:73:ed:e3:63:3f:d1:7d:
                    63:f0:a0:44:c2:45:41:49:83:66:f3:d7:f2:d2:e6:
                    3c:97:ef:a5:53:a3:c2:37:d8:ed:80:16:d9:8c:ae:
                    27:13:bc:cb:06:4c:d0:80:5d:1f:fa:19:87:d9:31:
                    e2:c1:e3:0e:3d:7e:1c:79:a1:03:d8:17:86:e7:3a:
                    d4:87:24:8f:01:cd:c2:0b:3d:e5:68:4a:ef:16:1b:
                    77:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:9a:1e:29:7a:5d:6d:8e:dd:3c:27:7b:7c:a5:8d:bd:34:
         2b:3f:ac:c6:10:74:d1:0f:8e:84:e0:43:91:62:05:38:14:ac:
         ae:b7:19:b5:9d:9c:05:22:82:9e:34:f7:f7:7f:11:a9:6e:16:
         77:36:95:df:8a:c8:ef:b9:73:68:31:32:79:56:c9:c9:4c:a0:
         33:72:c8:e2:d7:56:69:38:45:73:21:32:fb:b0:36:11:83:49:
         a1:ba:c7:7e:76:2c:be:9b:11:b3:81:3b:d0:2a:9f:9d:08:ac:
         45:d4:55:4e:08:4d:a9:e3:c5:2d:b9:3e:9c:7d:5f:60:c1:d2:
         b8:45:ac:68:e6:37:67:35:2d:96:88:dd:f9:b8:14:ca:7e:87:
         0f:92:49:e2:65:be:8f:0b:52:cc:12:50:7d:16:48:f0:bf:15:
         28:e0:85:b8:b8:07:21:6a:55:99:f2:18:e0:70:43:ce:7e:0b:
         6f:96:6d:6c:99:25:29:89:68:35:a2:86:4e:50:22:f1:6c:4c:
         a6:8d:94:d3:5f:56:8a:ca:fc:4c:78:32:43:b2:c3:13:7c:c4:
         e7:52:c8:f8:e7:30:61:99:95:79:39:c9:2a:a5:76:7e:11:83:
         8f:cc:dd:60:30:ed:96:3e:97:36:84:35:81:cd:c5:d3:c3:3b:
         9e:c1:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----