This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.cer (raw, json)
Hash identifier:          YmIRxt+vAn2Y2z1cXf/XaWbvpLWnSQNLhx92sbEIQVw=
Subject key identifier:   FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7EA6C29A4BFC242E112D7D5B411CB0B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 12:20:16 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:10e4::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:c2:9a:4b:fc:24:2e:11:2d:7d:5b:41:1c:b0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:20:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:63:cf:86:cd:77:0a:14:d4:58:39:23:24:
                    71:54:26:6a:14:93:ee:2e:dc:b1:44:84:56:cd:e0:
                    49:9e:8f:51:c0:a5:a3:ce:71:bf:03:d4:ec:4a:85:
                    f1:fe:52:6d:b5:bd:a2:9e:4c:41:a4:66:84:1f:88:
                    38:7a:71:b9:71:c1:b5:46:d3:34:48:8c:03:cc:50:
                    7a:fd:45:02:90:cf:1c:6b:56:d0:2c:be:e7:a9:81:
                    41:4c:1f:70:08:87:af:b9:95:27:90:d3:a5:ee:2a:
                    cf:2a:d1:5c:15:99:ec:93:2b:76:70:64:a6:ef:1d:
                    d9:8a:1e:4f:cd:4f:75:1f:9f:42:63:de:04:45:d7:
                    cf:4f:a9:55:ca:cf:ee:fc:ca:87:f2:93:34:f7:25:
                    51:ad:c6:18:97:9c:d5:07:2a:84:a8:e7:40:ee:30:
                    71:ab:d3:2d:c5:a5:8f:7d:ae:bc:2f:0d:16:ab:2a:
                    b4:df:68:76:12:c4:e7:39:64:1e:cc:24:cf:ae:41:
                    26:fd:de:a6:fc:83:43:10:e0:e8:1d:1c:27:82:8c:
                    07:db:d0:84:04:65:1c:d5:ca:a2:2b:7b:48:db:93:
                    5e:72:3e:a9:30:fe:7e:55:2c:36:9e:95:dd:00:18:
                    d6:90:1c:09:64:b3:fd:85:14:41:06:d8:5f:f5:b1:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:10e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:d0:7b:b9:ca:56:73:d4:1d:89:99:39:0b:45:75:b5:58:ae:
         5d:f1:7e:d3:e2:a6:e9:f0:b9:38:69:95:73:3b:3e:7e:78:cd:
         30:51:a9:06:42:5c:5f:d4:be:31:98:c0:96:94:3b:25:04:ff:
         6d:cb:2e:17:f5:15:23:2a:4f:b5:80:ec:59:3f:76:f1:fd:d0:
         a6:ef:85:59:9f:d5:fb:78:6c:08:b5:46:fb:00:2f:35:e0:cd:
         7b:64:78:34:5a:83:df:cf:81:46:b1:c5:60:23:79:ba:20:da:
         83:ff:a5:ad:16:c5:f2:d7:ea:79:b4:4f:52:61:7a:98:b7:3f:
         0e:30:51:0a:43:62:a9:a3:5e:78:da:23:b7:92:28:f9:29:f0:
         d4:89:7e:e7:59:3d:ba:19:29:35:d8:31:c3:fd:e4:32:c9:42:
         ea:b0:9e:6c:58:72:1b:a2:0e:35:df:05:65:58:44:3f:b9:6c:
         98:4d:ce:8c:d6:c6:5b:a2:34:5d:29:09:ec:4c:11:5b:ee:fa:
         a8:8c:76:f1:5f:63:cc:9e:ed:61:ac:a0:a0:93:f8:85:f2:6e:
         37:88:53:a3:4d:88:2d:65:4c:4e:55:eb:c3:5a:7a:ff:a8:2d:
         3b:27:68:dd:76:dc:54:fc:d0:6c:4d:78:04:e9:97:8f:ea:ca:
         e8:b6:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----