This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.cer (raw, json)
Hash identifier:          vmgKK+6B8VL9YbkU9sOo8PQhIskw6xuhUo/eZ3Er1eU=
Subject key identifier:   FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C132BAA0F1BFF7F7D27DF80D45430B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 00:19:49 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.8.201.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:2b:aa:0f:1b:ff:7f:7d:27:df:80:d4:54:30:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:19:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:e0:68:f0:4c:76:79:5e:e4:36:be:8c:39:
                    7f:b3:30:18:9e:87:ee:0e:fd:d4:95:69:3f:cb:85:
                    b9:a5:98:1d:78:33:e8:51:7e:96:5a:4e:94:6e:ae:
                    98:06:41:1e:9b:a1:75:64:26:d4:d2:46:c5:91:08:
                    30:8a:34:d8:03:03:36:0e:11:45:18:ea:79:29:c3:
                    97:93:6e:f7:3e:b3:ed:d8:36:57:cc:24:f1:aa:0d:
                    aa:0e:b0:50:3e:b9:6d:3f:e6:41:05:87:66:6f:02:
                    2e:ec:cc:9f:79:c1:e9:b2:7b:63:e2:e0:19:5e:0f:
                    da:7e:11:29:56:41:a7:9a:4d:cb:a5:24:e4:d2:9f:
                    53:ce:29:79:66:51:d3:64:dd:c2:2d:72:95:af:2e:
                    6a:c4:74:86:5e:5e:5e:04:52:e0:5d:df:1d:cc:f7:
                    f2:c7:e6:02:4f:56:bb:5b:e0:6a:00:87:d0:9d:ad:
                    4b:df:77:90:40:5f:88:74:87:56:07:19:a6:68:44:
                    75:fc:a5:33:da:83:e3:5b:e7:89:c7:51:3c:20:8a:
                    bb:d7:88:a0:6b:0d:ae:46:21:87:32:86:83:d8:a6:
                    86:86:e3:e7:59:d7:57:ce:3e:d0:83:59:a3:70:8f:
                    fa:d0:3c:54:43:6b:ad:14:2f:9b:be:b4:24:23:ff:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c4:01:98:bf:cf:99:bf:11:b9:fd:e3:4c:9d:e3:34:45:dc:
         04:84:45:61:37:f9:3c:4d:4a:69:54:a6:e7:ee:48:67:09:22:
         9d:27:de:05:91:fc:33:9b:e1:bd:6d:f3:c6:1b:fa:54:96:a6:
         5b:56:12:78:a5:83:4c:4f:18:5c:4b:73:18:1d:1b:ba:cb:ae:
         87:4c:af:1b:bf:56:fe:df:1d:bb:e6:67:50:1e:3a:0b:00:b9:
         04:be:f7:15:8b:87:49:c2:af:4d:17:3d:a2:70:c6:3d:ae:1c:
         0b:e1:95:39:f1:a2:cb:c8:f5:c9:eb:a8:01:c2:98:b9:e3:d5:
         d8:20:e3:28:be:5b:cd:0a:76:5c:71:c4:fa:e7:cc:0b:70:22:
         de:55:12:a8:f6:c5:4d:ac:5c:bd:1f:be:da:77:bb:f0:30:8e:
         d0:bd:80:bc:32:08:6d:5c:d8:45:23:c5:64:b4:4e:27:d2:34:
         1b:b5:96:8a:59:1c:48:1a:66:10:8a:8c:75:e3:1d:d7:0d:2a:
         1e:4e:e6:0c:0c:1f:7c:e6:90:7a:a9:04:ef:89:54:b9:dc:9a:
         72:9a:41:70:9b:5f:6e:70:ac:40:bf:91:7c:57:64:ba:8f:e8:
         07:f2:79:d2:f9:5e:cd:7e:98:6f:c0:c7:5e:78:02:40:8c:ee:
         ed:ef:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----