This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
File:                     _GpMWV8LLdBaH-Zyh8E84OvICts.cer (raw, json)
Hash identifier:          5Sq21tfUeQxZcZKmsGt0V77PVsvRk089w9LRKlshmGo=
Subject key identifier:   FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7EA733585DECCA4B0C155A37A919B99A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 12:20:45 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 203602
                          IP: 185.255.244.0/22
                          IP: 2a0c:61c0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:33:58:5d:ec:ca:4b:0c:15:5a:37:a9:19:b9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:20:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:e7:08:62:9d:a0:f5:eb:22:7d:f4:51:4c:
                    47:08:02:2c:52:e3:5e:16:c5:16:2d:2c:af:8d:e6:
                    dd:40:77:7e:53:57:a5:9a:c1:d9:03:17:18:c5:68:
                    b4:df:99:f0:2e:4f:30:53:0c:9f:a3:90:51:96:74:
                    d4:f4:4c:fc:ad:51:d6:68:6f:23:08:4e:b1:90:c4:
                    b1:ab:12:7a:f7:19:61:33:b0:20:e4:af:ff:83:bb:
                    5a:c3:9a:3d:fa:74:1d:6f:94:8e:ee:1a:40:82:55:
                    bd:1f:a2:5c:68:c9:0c:bc:79:cd:17:e8:ae:1d:6e:
                    e5:9c:cb:19:65:d8:5d:c2:c9:bb:f9:7d:78:09:a9:
                    25:12:6f:e6:f1:30:c8:3e:86:7c:bf:13:c7:da:13:
                    7b:e4:f3:0e:94:0e:e3:ee:60:23:4d:7b:d7:6a:d1:
                    40:77:c9:f3:b6:44:e9:ba:ae:cf:fe:56:42:31:4c:
                    96:80:a0:78:36:ce:84:29:ff:ac:06:07:b3:94:28:
                    b9:49:ee:08:31:3e:f8:dd:ea:3a:fb:32:0c:26:8d:
                    49:34:b1:97:73:ed:e9:fd:c3:36:09:34:24:6d:94:
                    e4:2c:52:a3:50:b3:44:66:51:8d:a6:31:0c:e1:62:
                    18:b1:e9:e1:c2:9d:71:b9:7e:ac:2b:d6:cd:79:fe:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.244.0/22
                IPv6:
                  2a0c:61c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203602

    Signature Algorithm: sha256WithRSAEncryption
         37:7f:90:19:a6:23:9d:38:9b:a7:7c:84:17:cd:bc:73:4c:8f:
         33:31:9b:0c:b6:19:f7:8e:86:a4:c2:56:19:e1:e0:38:43:c2:
         50:eb:ba:f2:df:c4:ce:45:1e:92:51:54:3d:14:47:5b:26:b7:
         f0:cc:09:d8:b1:bc:d6:1f:32:b5:39:90:36:80:c9:27:78:45:
         ee:01:0d:1f:6a:90:64:b9:07:c3:39:e8:0c:1e:f8:a7:3e:a0:
         8d:5e:14:d9:3f:c5:88:82:25:32:c8:7f:7d:50:7b:6b:47:f2:
         67:eb:3f:73:6b:a2:31:25:fe:74:58:15:22:06:ee:4d:1e:61:
         fe:4d:9a:b5:31:1f:ff:73:05:71:f8:ca:b3:2f:aa:ec:98:19:
         24:18:82:ce:b7:4f:24:2a:10:42:9b:b0:46:6c:83:fd:fd:ac:
         03:f1:21:9a:4e:70:07:ed:11:36:25:58:0b:8f:86:64:81:06:
         83:9a:29:3c:4e:28:9c:b3:59:26:3e:6f:b4:6d:6e:3f:80:08:
         3b:67:4a:26:0c:a9:99:06:82:ef:c9:f1:bc:61:3d:09:e5:2f:
         93:be:2e:a8:b3:c5:90:ef:09:41:df:d6:4a:ad:ba:3a:ab:67:
         de:31:20:5d:61:53:9e:d3:7b:c7:92:bc:6f:b2:09:62:40:a1:
         53:d1:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----