This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
File:                     g6PKzqjF0dmJsH6m4JdKANoDako.cer (raw, json)
Hash identifier:          TLub2TTFb2QDqoLlm6sF0rhdVrK/Ptdv6EtCK5nCROQ=
Subject key identifier:   83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019ACAD14B65BD7159102BB080DEBB727131
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Nov 2025 14:15:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43615
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ca:d1:4b:65:bd:71:59:10:2b:b0:80:de:bb:72:71:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 28 14:15:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:56:b7:fb:1b:71:f9:2a:0d:72:71:d9:08:46:
                    e7:ae:dc:37:a2:8e:d0:2e:23:83:8c:50:06:fb:12:
                    ec:e5:66:e6:7a:ef:ad:56:66:b6:93:7e:8b:18:a2:
                    fe:13:6e:b5:1e:03:18:0c:26:27:08:14:60:f2:11:
                    47:af:96:7f:47:9a:11:fc:0b:64:0e:c8:49:60:ad:
                    33:11:4f:22:8f:e1:00:a7:9e:b7:2f:40:08:88:fd:
                    e5:fe:59:87:b1:b0:cd:4e:06:35:49:ea:6b:34:68:
                    61:b1:57:ab:62:f2:43:16:23:71:eb:5c:1f:39:49:
                    e0:3d:dc:82:d3:01:c0:1e:6e:31:ef:5a:32:6c:e7:
                    12:36:ab:b5:9e:c1:3f:03:1c:5f:03:db:40:14:52:
                    1a:ee:91:c7:18:47:86:56:f6:be:55:6c:71:a8:61:
                    ab:9e:0e:88:35:83:65:16:8d:20:5f:84:f0:c3:8f:
                    01:58:47:21:39:c1:02:ea:81:ae:f3:4c:c8:86:6c:
                    9b:48:ed:0b:71:3b:90:1f:7f:e7:20:ff:be:c9:7f:
                    15:b3:a3:15:f6:f1:6d:2b:e7:3c:a5:b4:1c:df:36:
                    f8:b7:ac:b3:a6:c0:59:45:d8:45:6b:e9:8d:f0:29:
                    b9:6b:09:bd:50:1b:b4:ac:5b:ea:0e:da:ee:a9:c1:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43615

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:c5:e4:1e:3e:b4:6b:7b:fe:8f:e5:12:ad:90:b7:f7:e3:
         2f:2b:db:e0:2b:2f:3c:fd:fd:db:a0:55:4d:5c:2a:0d:bf:5e:
         1f:ef:69:68:c9:f7:40:dd:84:4d:e3:83:88:19:3d:dc:f3:1d:
         0c:d6:cb:54:22:4b:1a:d7:26:52:ca:17:ea:8b:70:73:41:12:
         4d:91:8c:d7:31:4b:81:66:7e:05:50:77:53:43:e8:01:f4:64:
         c9:c7:0b:16:c4:37:b4:0a:f3:7e:03:95:e6:9a:d9:93:48:af:
         57:5c:04:d1:e0:56:0d:bf:b7:51:f3:d6:90:b9:66:10:22:ca:
         41:3f:92:23:01:f0:3c:13:07:f7:84:e8:6d:3c:82:d9:19:52:
         57:de:80:1d:99:d7:10:1b:54:4a:c8:8d:ce:44:69:3e:39:69:
         1b:9e:f8:02:35:96:06:ef:02:f1:6e:3d:b8:bf:e3:99:36:b5:
         14:1e:e0:8a:88:1b:4c:31:c9:88:b5:b3:9f:b9:2f:cf:e1:37:
         fa:fb:f7:79:82:01:60:81:bd:57:16:cc:2b:fe:27:56:e1:3c:
         49:28:db:06:64:c0:f0:51:33:09:a4:50:cb:7f:2a:06:87:a5:
         1a:57:81:aa:2c:29:55:55:75:a9:97:cb:d6:cc:69:91:af:11:
         ce:29:71:47
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZrK0UtlvXFZECuwgN67cnExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMTI4MTQxNTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2EzY2FjZWE4YzVkMWQ5ODliMDdlYTZlMDk3NGEwMGRhMDM2YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Va3+xtx+SoNcnHZCEbnrtw3oo7Q
LiODjFAG+xLs5Wbmeu+tVma2k36LGKL+E261HgMYDCYnCBRg8hFHr5Z/R5oR/Atk
DshJYK0zEU8ij+EAp563L0AIiP3l/lmHsbDNTgY1SeprNGhhsVerYvJDFiNx61wf
OUngPdyC0wHAHm4x71oybOcSNqu1nsE/AxxfA9tAFFIa7pHHGEeGVva+VWxxqGGr
ng6INYNlFo0gX4Tww48BWEchOcEC6oGu80zIhmybSO0LcTuQH3/nIP++yX8Vs6MV
9vFtK+c8pbQc3zb4t6yzpsBZRdhFa+mN8Cm5awm9UBu0rFvqDtruqcEEWwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIOjys6oxdHZibB+puCXSgDaA2pKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzU0MDky
OS1iYTVlLTQzMTYtYTEzOC1iZDBkZWU4NDQwNDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNTQwOTI5
LWJhNWUtNDMxNi1hMTM4LWJkMGRlZTg0NDA0Ny8xL2c2UEt6cWpGMGRtSnNINm00
SmRLQU5vRGFrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCqXzANBgkqhkiG9w0BAQsFAAOCAQEADFHF5B4+tGt7
/o/lEq2Qt/fjLyvb4CsvPP3926BVTVwqDb9eH+9paMn3QN2ETeODiBk93PMdDNbL
VCJLGtcmUsoX6otwc0ESTZGM1zFLgWZ+BVB3U0PoAfRkyccLFsQ3tArzfgOV5prZ
k0ivV1wE0eBWDb+3UfPWkLlmECLKQT+SIwHwPBMH94TobTyC2RlSV96AHZnXEBtU
SsiNzkRpPjlpG574AjWWBu8C8W49uL/jmTa1FB7giogbTDHJiLWzn7kvz+E3+vv3
eYIBYIG9VxbMK/4nVuE8SSjbBmTA8FEzCaRQy38qBoelGleBqiwpVVV1qZfL1sxp
ka8RzilxRw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:41:45 2025 by rpki-client