This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
File:                     bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer (raw, json)
Hash identifier:          MvI9Md5/naxfDY9ZyasqYatpWV3/rq2JOITQ64r41Tc=
Subject key identifier:   6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C767F53F2A283C59FB0D5F54240BFD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:35 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 43751
                          IP: 93.191.216.0/21
                          IP: 2a02:4b0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:67:f5:3f:2a:28:3c:59:fb:0d:5f:54:24:0b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:53:1f:38:3c:3c:4d:0b:74:63:93:70:43:da:
                    c2:87:20:09:e5:dd:1c:aa:55:4e:7a:12:a4:96:8f:
                    47:17:94:1e:11:69:0f:96:2e:a7:4b:81:f8:6e:94:
                    92:d9:14:fa:3c:92:f8:26:1d:81:ea:d5:12:5f:76:
                    6a:0d:33:b4:2d:64:40:5b:e8:d0:2b:18:2b:07:f2:
                    28:c4:54:12:a2:41:5e:be:da:af:46:3e:1f:19:49:
                    75:13:32:94:85:07:f9:9c:23:21:bf:88:f8:1c:fb:
                    39:b5:53:be:57:e5:a8:5d:5a:8a:68:0c:a7:44:bf:
                    21:d1:e8:30:ea:44:1d:cd:df:12:be:28:92:a6:8b:
                    10:d3:7c:a5:dc:62:5d:78:2c:85:4c:8c:0c:f9:cf:
                    ab:23:77:55:44:7f:4f:c2:4d:e9:af:ef:b1:e9:bc:
                    1e:18:10:b8:ed:76:e3:69:e5:f3:49:95:ac:1b:e4:
                    9a:8f:b9:3f:46:ef:da:ef:46:ed:02:a3:a0:ec:7f:
                    c4:30:dc:e1:fe:ad:0f:05:f1:99:78:47:90:36:25:
                    52:93:49:d9:f7:65:ce:71:0f:85:43:f6:3a:0e:f8:
                    52:79:26:33:25:f5:be:de:4d:ea:f1:b2:88:f0:0b:
                    ed:78:04:ac:c9:77:fb:94:93:5b:df:9f:d7:7c:f1:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.216.0/21
                IPv6:
                  2a02:4b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43751

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:e9:09:6f:f7:ce:28:fa:ca:9d:81:48:a9:17:6a:96:7c:
         50:f0:33:3c:3a:d1:5f:4d:2f:c5:0b:38:72:70:59:c4:d2:e7:
         d4:3a:ec:50:34:14:4b:b2:87:e9:95:86:1f:26:16:e2:73:01:
         e2:4a:8c:27:c2:6d:06:7b:45:d1:1d:7c:c2:6a:6c:e9:a4:03:
         eb:1f:84:85:8c:83:6e:51:0e:6e:3a:43:25:79:09:7d:58:68:
         30:90:27:1a:66:c0:0b:9e:26:b7:5f:b2:13:f0:4e:46:4b:04:
         5e:d4:94:db:2a:87:4d:9e:c2:48:9f:e2:2c:a1:17:b2:78:bc:
         f9:2c:80:87:1c:00:a3:60:93:f2:a8:d8:d2:6f:38:49:ff:e7:
         02:28:58:5c:58:53:30:3c:fc:ed:f8:50:d7:70:ae:cc:eb:f7:
         f5:52:cf:66:59:36:5d:6e:f4:6e:32:6e:97:28:62:6a:61:44:
         97:9f:36:5b:c4:48:35:47:7e:d9:74:d6:a7:e0:4d:6b:18:e1:
         40:e6:6c:b3:d0:b9:2c:e5:a7:f2:be:6f:24:d0:8b:01:50:54:
         27:74:a8:2c:59:01:35:5e:79:7d:fe:63:a1:b4:2c:c5:0e:97:
         c7:88:63:82:9f:16:02:0c:3d:90:55:af:e3:39:03:62:ab:b0:
         9a:be:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----