This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
File:                     gePml83W4iWsWxFhzfcE3pz8JlU.cer (raw, json)
Hash identifier:          zD/45byphIiFH5PAEjq0pv25seJj+kOC4X9bw92fWdQ=
Subject key identifier:   81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7B368D4186F2C303C5A02DD07744271C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 20:18:51 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 198080
                          AS: 205491
                          IP: 2001:67c:b7c::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:8d:41:86:f2:c3:03:c5:a0:2d:d0:77:44:27:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:85:57:6f:77:ac:39:ba:d1:2d:d8:97:e6:
                    de:2c:98:c3:40:90:fe:36:c0:02:89:18:aa:50:78:
                    0f:9b:b2:5b:cc:da:a6:b9:ce:0a:c9:84:df:80:c5:
                    94:75:45:bf:16:73:82:2d:fd:70:1e:fa:8a:ff:e9:
                    46:cc:3a:e8:2d:b2:57:61:12:76:ec:4c:88:8e:cc:
                    28:36:2f:25:04:67:69:5d:93:4e:68:61:16:0b:17:
                    6a:20:58:86:2b:50:86:52:f8:26:f3:8b:2b:58:33:
                    bb:04:85:e5:e0:d6:56:fc:c3:25:a3:52:f6:08:0d:
                    cc:41:e3:df:e1:a4:37:3b:32:25:d1:04:90:6b:a8:
                    a8:67:14:6f:e0:28:c3:94:26:d1:2d:08:c3:b7:b9:
                    93:1b:04:6e:12:46:2c:19:5a:b0:19:9c:37:c6:d8:
                    b4:da:54:6a:ab:fe:7d:e8:19:d8:0c:96:6b:57:15:
                    1c:0b:14:4f:30:81:8c:ae:66:9b:b8:55:e2:12:3d:
                    8a:f1:58:39:77:e0:4d:84:61:c1:e3:29:f1:5a:af:
                    79:c4:25:cc:c8:38:68:39:06:2b:2c:ff:ef:77:3c:
                    74:6b:1a:50:a2:74:98:9c:19:d4:4e:b8:a4:08:02:
                    51:ed:1b:76:ea:5e:26:d1:32:71:1b:52:9a:40:3b:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b7c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198080
                  205491

    Signature Algorithm: sha256WithRSAEncryption
         2a:78:d8:5f:d5:7a:2a:f8:ab:5d:6a:d1:d6:dc:cc:f2:25:0a:
         a5:8a:c1:96:cc:a2:58:14:93:79:a5:2b:e0:8d:86:6e:69:65:
         fb:b2:6b:58:6d:d1:03:51:50:09:3e:ad:3e:3f:b2:58:9a:c3:
         aa:f0:84:7c:15:c0:d5:cd:c8:36:2f:37:bd:c4:a4:28:cc:42:
         c0:5b:99:fb:d6:ab:a2:d5:f0:06:c5:4f:0b:08:0b:76:11:67:
         4d:17:84:75:67:89:42:d1:42:a3:c1:21:eb:c7:94:dd:01:87:
         72:70:ac:64:46:86:07:7b:93:b5:07:6c:01:00:65:70:a0:5e:
         e7:c3:8f:c9:c4:61:b1:c4:bc:44:71:18:65:00:df:a0:89:24:
         fd:e4:e4:60:b1:34:4a:32:cd:4a:60:41:c8:41:e1:2c:1a:f6:
         fe:7c:c7:38:2a:c4:1d:e9:2d:9c:8c:a4:eb:05:43:22:4a:81:
         78:13:5a:8c:76:e3:19:a4:6c:d2:1d:2f:3d:6c:4a:af:dd:ef:
         53:e7:7c:6c:25:d3:32:91:1f:a1:2f:68:dc:41:ca:dc:ea:95:
         65:e9:32:5a:aa:73:2e:d8:69:79:29:50:41:46:b2:32:43:33:
         2c:b8:d7:d3:75:94:bb:6f:0b:27:e5:20:c0:57:84:e6:28:1f:
         d7:2a:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----