This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
File:                     eIehaWWHX29TvMMfDkk6lhVOt7k.cer (raw, json)
Hash identifier:          E3nrbr1OXPiHZbcqxA9bnT3YJIhKtPsOy4F/YXg3EvM=
Subject key identifier:   78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F144C8838F1062E51366369338B7AAA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:19:55 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 204720
                          IP: 185.141.224.0/22
                          IP: 2a0c:4480::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:4c:88:38:f1:06:2e:51:36:63:69:33:8b:7a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:19:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:d1:43:d0:8b:ca:d6:63:4c:4a:98:c8:6b:
                    f5:6c:02:14:c5:45:e6:ad:fb:bf:be:fe:8e:71:b3:
                    fd:83:24:49:90:c9:31:9a:c2:f7:d6:1f:a7:74:af:
                    ac:0b:b8:1c:85:05:bd:97:e8:cf:1e:1d:db:20:d7:
                    b0:5c:83:c6:55:27:99:48:89:64:91:cf:ef:a7:5f:
                    0b:1a:3f:cf:9c:57:ef:3f:36:50:bd:db:8b:33:e0:
                    ef:c9:80:71:50:82:3f:1a:b5:5d:65:b8:bb:9b:5f:
                    50:fe:88:e6:37:09:20:df:bb:67:a4:0d:a5:69:f9:
                    85:ab:8c:36:38:e9:09:cf:87:43:f6:3a:e4:14:e5:
                    5b:00:2a:96:8d:b0:8f:ef:c2:b9:e1:a5:4a:85:be:
                    38:de:0a:77:97:69:b0:31:95:79:39:f3:e7:3c:bb:
                    30:6a:4d:a6:22:aa:bd:eb:f1:c0:d6:79:d4:40:9c:
                    1b:9a:33:5d:a7:24:75:0a:a0:a4:a5:c9:0b:08:42:
                    47:14:aa:bb:64:50:1f:87:3c:77:4f:f1:20:a1:83:
                    98:e5:5a:27:07:14:2b:3d:40:7a:d4:40:0e:5d:5e:
                    7d:7c:30:3e:19:41:fe:95:34:bc:17:14:bf:af:97:
                    bd:62:54:d7:50:66:2c:52:89:3f:b7:5e:f0:9e:d0:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.224.0/22
                IPv6:
                  2a0c:4480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204720

    Signature Algorithm: sha256WithRSAEncryption
         98:c0:2c:ac:e2:46:d9:a0:61:03:98:e8:5f:34:f1:2b:90:ff:
         70:46:e3:29:d8:1b:67:7d:b2:c0:10:a8:95:29:5a:87:86:e8:
         f3:2e:de:7d:98:72:d7:8c:cc:ce:14:7d:c2:16:ac:b2:4d:64:
         39:71:80:91:a0:82:35:19:82:9a:4d:85:08:a3:ce:0f:08:0f:
         3c:7d:bb:79:6d:d6:52:44:c9:37:07:01:3d:32:da:de:13:bf:
         29:d1:e3:ef:96:26:63:56:1c:de:f6:83:9a:4d:96:e7:d4:be:
         83:dd:05:33:d2:58:39:3d:40:77:66:be:29:db:e6:b2:1b:2a:
         97:9e:a8:d3:f2:5c:92:8f:bc:32:39:43:d0:ad:a3:9a:44:35:
         25:1c:9f:4f:19:b4:05:14:e2:8c:37:40:b6:f2:48:d3:34:49:
         75:fb:a8:9a:a8:84:47:e4:3b:4f:63:da:da:97:a8:34:d8:8e:
         80:db:b9:db:da:0c:d0:09:d2:bf:90:e3:17:ea:34:79:59:79:
         16:63:57:c4:c6:61:2e:23:79:fa:d4:0b:95:e7:c2:79:80:c7:
         e4:a3:ac:42:56:5e:13:4e:a2:01:1c:02:da:99:72:0e:db:67:
         57:9e:23:09:95:bb:3b:64:6b:4c:7a:cf:75:54:8d:bd:1c:9e:
         1c:86:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----