This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
File:                     akYj92vVuy3wr2bzYP90_xwA2wI.cer (raw, json)
Hash identifier:          olPT0lOqiqdf7mu2i18H1V2hCNVGpc30Gu3SB49fTYg=
Subject key identifier:   6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7834BE72C968831A5317645350208803
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:18:01 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 60342
                          AS: 199246
                          AS: 206038
                          IP: 185.4.132.0/22
                          IP: 185.138.40.0/22
                          IP: 2a02:c500::/29
                          IP: 2a07:8c0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:be:72:c9:68:83:1a:53:17:64:53:50:20:88:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:b5:ce:02:35:c9:d4:4d:6f:6b:b8:e3:9f:
                    f8:c5:63:24:5c:bf:9d:51:06:96:24:83:19:48:d2:
                    80:f5:64:7b:7d:67:b6:eb:ad:c3:ed:99:ad:27:26:
                    d3:8c:97:16:fc:ac:16:1d:82:98:c8:2e:67:6a:77:
                    57:99:6c:19:c5:13:db:25:ce:e7:b3:75:6f:d6:4a:
                    a1:04:7e:0e:04:5a:15:42:9f:aa:71:7d:74:0f:93:
                    32:55:dc:92:d3:82:fd:3f:ba:ba:81:76:f4:a5:6e:
                    cf:82:09:2f:22:43:6b:c8:f0:90:07:c1:35:be:09:
                    31:3e:71:d3:40:93:f1:5c:ad:c6:90:5f:5d:fe:d6:
                    b1:8e:f9:3e:96:e4:9f:a8:4e:e0:84:79:ff:75:8c:
                    56:71:1c:fe:f5:7f:11:dc:33:4e:67:dd:0b:be:bb:
                    62:e4:2c:9a:9e:b6:88:af:b8:73:7b:1d:8a:dc:8a:
                    68:32:4d:78:ad:90:20:60:cf:b4:1d:13:65:cc:dc:
                    f7:1c:67:96:4f:f5:d2:64:fe:ca:b7:4e:5e:67:b2:
                    43:a1:0c:da:91:c7:81:4f:f4:f7:9d:b9:58:c8:9d:
                    7d:4e:e5:db:59:bd:ce:ab:66:e1:f3:8e:06:28:f2:
                    82:6c:54:4c:fb:c6:1d:5b:3c:a0:72:98:c6:6d:03:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.4.132.0/22
                  185.138.40.0/22
                IPv6:
                  2a02:c500::/29
                  2a07:8c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60342
                  199246
                  206038

    Signature Algorithm: sha256WithRSAEncryption
         70:e7:39:e4:9d:45:52:12:a8:f1:d5:b4:52:cb:ee:c8:76:42:
         83:bd:67:1f:c1:05:68:0e:a9:7e:1e:1c:99:fa:e6:a7:71:d1:
         55:5f:45:f4:ea:8d:8b:35:25:94:5a:79:e9:84:38:76:08:6a:
         8f:e8:f5:c8:03:5a:18:6a:fd:ec:01:a2:cd:5f:04:26:fb:76:
         5b:02:a7:07:fb:0d:c5:91:7a:8b:1c:78:39:db:9c:70:9c:de:
         99:f0:f2:ae:e2:3a:50:cd:6f:70:a8:3c:09:12:30:68:df:7f:
         64:61:25:83:15:31:c3:b6:b3:5a:b6:37:59:0f:a4:f5:2e:cb:
         32:9f:e8:9e:a6:cd:14:52:ec:6c:6b:b4:e7:3a:13:71:7d:ca:
         3f:62:bb:16:ec:30:eb:10:04:9a:f8:78:54:25:90:11:42:8d:
         ef:32:4a:0d:37:c6:50:13:61:a6:6a:ab:db:d6:3d:cc:38:f4:
         be:75:1c:c3:28:d4:10:35:da:ed:9f:3a:57:f2:6a:5e:ae:71:
         6c:1b:33:0b:7a:dd:12:13:81:3b:2f:18:37:39:f7:99:59:8e:
         53:de:4a:54:02:26:fb:24:34:fb:95:ae:bb:af:9e:c6:f0:f6:
         3a:1c:d0:20:fa:23:9e:a5:a7:46:b0:f3:b6:c6:10:6a:57:be:
         5e:7e:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:56:38 2026 by rpki-client