This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
File:                     aKfCyE_6STTPD3PvGhoaM3hzGCY.cer (raw, json)
Hash identifier:          T1+pMjoaGVhUGTPixnuf+XxrvoA3RIrNy7MItGRg1xE=
Subject key identifier:   68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7DCA70377ECB547C1BCBDA4574235267
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 08:19:37 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.169.219.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:70:37:7e:cb:54:7c:1b:cb:da:45:74:23:52:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:19:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:6d:63:e7:5c:eb:51:6e:27:69:2c:b3:eb:
                    78:2c:ff:51:38:ee:c1:4e:1b:78:4f:7b:74:cc:b9:
                    78:a4:c5:06:9c:66:f5:10:89:a7:83:2b:ea:77:a3:
                    e1:a9:10:c2:66:85:d9:fb:17:15:be:ee:f0:1c:6b:
                    c8:a2:06:dc:0a:3a:fb:15:d2:30:aa:63:3c:07:12:
                    13:24:64:6b:f7:ab:0b:ff:8f:94:e1:fe:b7:0f:7f:
                    ff:ce:26:8d:10:fe:66:11:72:53:73:8b:b6:4a:35:
                    c6:01:cc:c0:7a:64:81:51:11:41:e8:5f:a8:22:9c:
                    03:de:67:73:a1:a8:f1:c2:cd:d9:ed:91:e7:56:2f:
                    72:c7:24:87:02:c0:78:54:e1:93:53:f9:45:cd:7e:
                    63:fa:45:4f:f8:bb:86:a3:2a:1a:57:d6:99:5d:cb:
                    3b:16:96:31:c0:d6:d7:0b:68:7e:9a:b3:47:4a:df:
                    b9:57:ba:7d:e5:61:e7:b6:ad:92:3c:44:5d:97:de:
                    18:5f:05:7e:07:d1:c8:da:a0:dc:95:ee:ea:d9:07:
                    b5:be:49:0b:4e:61:5d:1e:ac:36:5c:66:80:28:24:
                    22:29:c7:37:b1:83:b5:71:1e:06:77:6d:7c:a6:02:
                    48:3f:63:9f:dd:99:7b:75:c1:12:6b:79:80:a7:ac:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.169.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:a3:c4:82:33:4d:a1:52:18:85:71:12:f4:37:f6:23:d1:
         42:2f:05:92:81:36:a6:e0:71:91:2b:aa:ad:50:04:d7:3f:b1:
         e7:6b:38:f2:4f:5c:70:2e:66:35:e4:d2:71:9b:0b:d5:64:c9:
         a2:d6:e6:78:26:3f:8b:05:1f:de:c6:85:2a:b7:52:43:46:85:
         10:f9:14:f2:61:0d:e8:a8:c8:71:66:80:d8:79:c6:9e:dd:29:
         25:d8:f8:eb:97:50:4c:14:b7:7e:93:cf:c3:0a:5b:43:4c:e0:
         47:6a:1f:0e:2e:bd:03:94:31:f7:f0:8f:5c:cd:5d:e5:93:f4:
         31:09:2e:d2:30:2e:68:1f:b9:9c:4b:43:38:57:50:48:85:72:
         b8:a0:17:03:b4:3a:4e:a9:19:48:9d:39:39:dd:e4:42:1d:dd:
         14:70:a5:ce:04:8d:11:b8:0a:1f:7a:a3:9d:9f:95:0f:8d:3f:
         a0:88:91:45:2e:bf:97:8c:68:e2:6a:95:36:89:bb:a8:99:c9:
         7d:b7:a5:18:b2:be:30:6c:27:0c:80:0c:1a:4c:61:91:82:66:
         91:2c:db:5a:c0:44:57:3d:47:f8:64:a4:85:3b:bd:f3:57:52:
         c1:67:dd:c5:c7:44:0c:8b:50:8d:09:e9:23:9c:2c:bf:7f:66:
         6e:94:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----