This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
File:                     b6U11TlSoTJ99CLvgOuXvABDRn4.cer (raw, json)
Hash identifier:          lB0XM5El7ZXWw0EZ6AZCMrnfU063elID3EV56r377bY=
Subject key identifier:   6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019BD64F33987C1E731A144AF747DAB56E43
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 19 Jan 2026 12:51:13 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 207303
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:4f:33:98:7c:1e:73:1a:14:4a:f7:47:da:b5:6e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 19 12:51:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6fa535d53952a1327df422ef80eb97bc0043467e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:c0:c2:7a:eb:35:51:9e:9d:b1:ef:dd:f1:
                    0f:45:ce:f2:c6:90:a4:dd:70:89:1a:d1:e4:6d:57:
                    63:ce:63:20:df:67:0b:58:c6:68:09:0e:34:5b:a8:
                    55:2f:29:11:1d:b5:81:cd:84:08:b0:50:fb:1a:2f:
                    37:1c:74:7c:3b:e9:e8:e1:5f:e2:e6:7f:d9:97:17:
                    1d:39:b9:5d:e0:51:64:c0:9d:49:57:d0:a0:f1:92:
                    8c:8b:4c:8e:b3:76:cd:4c:a9:b4:ac:d9:31:33:6e:
                    c2:d4:1e:46:af:7d:e5:36:c7:72:58:7d:03:47:38:
                    61:3a:a3:de:2c:3d:93:32:6a:2a:8c:80:59:56:12:
                    38:41:52:1f:dc:1a:b7:31:14:67:53:d4:20:bf:96:
                    fb:4a:52:38:c3:bd:71:5f:77:9f:1f:db:57:d5:2a:
                    15:2e:1c:fa:01:56:a9:ef:eb:db:19:d8:07:9d:37:
                    48:9f:31:68:7f:e0:0f:22:05:18:94:3b:9c:bd:33:
                    69:d6:ab:df:95:ff:61:98:d8:65:5c:ca:a4:b5:42:
                    ec:ba:96:23:50:78:a5:97:42:20:e0:0d:c6:bf:98:
                    1e:d6:86:7f:c6:3c:55:3b:18:2a:e0:1d:3c:c5:7b:
                    ed:68:1d:be:f3:1c:ba:9f:d0:c7:e0:79:a7:cb:d1:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207303

    Signature Algorithm: sha256WithRSAEncryption
         8a:bc:64:f9:4d:8e:77:3e:78:93:43:98:dd:f4:7d:2b:e3:46:
         95:8f:bf:c7:a6:d0:d6:ce:c2:5d:04:45:45:f3:34:53:30:e8:
         f1:39:bb:6d:b8:f4:82:39:a2:4b:bf:6a:47:6b:43:49:11:2d:
         65:ae:35:26:40:f9:f2:f1:23:e1:0a:d0:31:be:2c:30:5f:6b:
         ae:55:26:da:fe:ff:b5:d9:3f:a9:1a:4f:67:59:96:95:85:e3:
         53:63:4b:f4:bd:2b:66:dc:ea:c6:5e:9f:3e:db:40:57:0e:d3:
         11:15:a8:35:6e:ae:40:1b:21:c6:78:0e:60:be:2d:13:63:11:
         b3:76:1a:7b:07:3a:68:ad:f0:fe:36:e3:1b:0c:93:81:84:bf:
         5b:ed:d9:67:4a:43:1d:b8:1f:1d:be:b4:27:9c:04:51:47:c5:
         4b:92:5f:03:0a:7e:7b:b8:8d:9f:c4:8e:f7:58:a3:42:57:61:
         2c:8a:ca:01:0c:bd:54:f7:c0:b3:9b:7a:ea:40:db:f8:07:a1:
         40:a7:e5:59:6d:92:96:f5:d3:bd:ff:50:f8:17:b3:0d:63:5f:
         da:c7:36:71:b9:0c:4e:f4:9f:7d:81:66:27:0b:5e:b7:a8:61:
         1a:a7:e3:0d:a9:ce:49:f0:88:36:19:76:0f:da:c4:de:cf:f7:
         a0:f9:98:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----