This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
File:                     fhNA7SMjqShumA9mRpmQqaHjB10.cer (raw, json)
Hash identifier:          Jv57T76HPv6qi9gbGNYRblNnGWkkPuOdPywpvtiwdZY=
Subject key identifier:   7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA522F3CF139227B09B93FC5B4709E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:19:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213736
                          IP: 2a14:cc00::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:22:f3:cf:13:92:27:b0:9b:93:fc:5b:47:09:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:06:18:38:5b:88:87:90:9a:02:d9:6c:35:
                    90:89:2b:12:01:a1:e2:a0:ac:c6:1d:cd:d2:2d:17:
                    14:7e:7a:e8:8b:7a:95:3e:85:09:3a:b6:a4:41:75:
                    55:0c:06:44:69:2a:1c:75:47:e1:7f:e2:b9:e9:30:
                    52:1f:c1:0c:49:98:5c:66:c6:9c:91:a0:60:bc:88:
                    cb:fe:61:e3:2b:e4:f1:72:3c:53:8e:96:c6:c5:06:
                    9f:2b:6d:15:13:20:d4:cc:df:69:ae:4f:9f:ed:05:
                    1d:d7:6f:27:f9:dc:14:3a:ef:fe:11:1b:75:d0:e9:
                    23:63:ca:c3:76:4b:0b:7e:65:37:b0:86:90:70:50:
                    5c:48:1b:7f:7d:91:63:1c:01:3d:09:cc:fb:09:72:
                    ba:36:44:fa:f9:92:08:0e:73:3e:4d:46:8c:af:c1:
                    56:32:e4:be:01:32:a2:9f:b1:3b:ec:b7:f3:87:ce:
                    aa:0d:26:69:a6:e4:06:d0:85:ca:77:b9:c6:ba:8f:
                    cf:75:9b:1c:d7:3e:82:91:44:1f:ef:50:e6:ed:78:
                    b1:26:c3:aa:9e:d5:6a:51:44:2a:47:43:bf:8f:9c:
                    c8:5f:52:3c:89:a4:e2:00:47:2b:45:ae:0b:f4:45:
                    26:b5:87:12:3d:94:92:85:8f:b5:d9:3a:d4:d7:9a:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:cc00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213736

    Signature Algorithm: sha256WithRSAEncryption
         73:55:94:15:33:54:ed:3e:33:03:85:77:68:08:30:97:59:d5:
         ad:3e:ff:93:63:31:e6:4a:de:15:5c:2f:e6:b7:30:d5:08:64:
         87:fb:3f:cc:a4:5a:7c:4c:42:a7:ab:cc:87:87:4c:f2:96:25:
         7b:53:0e:89:5b:1d:3a:13:8e:76:ad:c1:60:cf:c3:57:05:bd:
         e8:52:3c:3b:41:e6:93:0d:15:26:bc:f9:53:e6:ad:8f:f7:16:
         b2:c4:9c:dc:e6:f5:68:f0:e7:7f:9c:90:e9:41:65:09:c5:d3:
         ec:6b:37:bc:9e:d9:b5:ee:c7:ea:73:c3:f4:3d:56:13:c3:f7:
         0e:70:89:f5:86:f9:fd:52:f4:b0:5c:2c:f9:4c:b2:4d:03:bc:
         09:1c:77:2b:80:06:a8:f6:31:63:2c:55:ad:54:95:81:87:ab:
         df:19:af:bf:20:b6:84:0c:bb:7b:07:60:3e:9d:f7:7d:81:08:
         02:ad:a0:f3:c8:80:cb:17:9a:25:38:8a:df:b3:4e:b1:b9:67:
         cd:c0:c3:d1:7d:9f:ae:7d:cd:09:3c:41:b3:90:f1:c3:db:05:
         c2:a5:6c:02:bf:36:da:e1:d6:24:36:6d:fc:53:c6:67:23:db:
         23:50:5f:56:6b:49:08:0b:8c:a9:b8:59:8a:10:f4:e3:05:6f:
         94:3a:85:6a
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZt7pSLzzxOSJ7Cbk/xbRwniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTEzNDBlZDIzMjNhOTI4NmU5ODBmNjY0Njk5OTBhOWExZTMwNzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3owGGDhbiIeQmgLZbDWQiSsSAaHi
oKzGHc3SLRcUfnroi3qVPoUJOrakQXVVDAZEaSocdUfhf+K56TBSH8EMSZhcZsac
kaBgvIjL/mHjK+TxcjxTjpbGxQafK20VEyDUzN9prk+f7QUd128n+dwUOu/+ERt1
0OkjY8rDdksLfmU3sIaQcFBcSBt/fZFjHAE9Ccz7CXK6NkT6+ZIIDnM+TUaMr8FW
MuS+ATKin7E77Lfzh86qDSZppuQG0IXKd7nGuo/PdZsc1z6CkUQf71Dm7XixJsOq
ntVqUUQqR0O/j5zIX1I8iaTiAEcrRa4L9EUmtYcSPZSShY+12TrU15rNXwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFH4TQO0jI6kobpgPZkaZkKmh4wddMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzE5ZmNj
OS1jYjMzLTQyNTUtODg4My1mZTAyN2EwMzQ0NDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvMTlmY2M5
LWNiMzMtNDI1NS04ODgzLWZlMDI3YTAzNDQ0OS8xL2ZoTkE3U01qcVNodW1BOW1S
cG1RcWFIakIxMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhTMADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDQugwDQYJKoZIhvcNAQELBQADggEBAHNVlBUzVO0+MwOFd2gIMJdZ1a0+/5Nj
MeZK3hVcL+a3MNUIZIf7P8ykWnxMQqerzIeHTPKWJXtTDolbHToTjnatwWDPw1cF
vehSPDtB5pMNFSa8+VPmrY/3FrLEnNzm9Wjw53+ckOlBZQnF0+xrN7ye2bXux+pz
w/Q9VhPD9w5wifWG+f1S9LBcLPlMsk0DvAkcdyuABqj2MWMsVa1UlYGHq98Zr78g
toQMu3sHYD6d932BCAKtoPPIgMsXmiU4it+zTrG5Z83Aw9F9n659zQk8QbOQ8cPb
BcKlbAK/Ntrh1iQ2bfxTxmcj2yNQX1ZrSQgLjKm4WYoQ9OMFb5Q6hWo=
-----END CERTIFICATE-----