This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
File:                     ihal-sZaxenF67_tcVGMrgwTEcU.cer (raw, json)
Hash identifier:          ekj5SPvxpqjZlijX5KnWeTuJEg3JNGrbfJagN2uovEQ=
Subject key identifier:   8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CEDE6EFDD45CD0337F1E92CB5152F35
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:18:44 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.113.246.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:e6:ef:dd:45:cd:03:37:f1:e9:2c:b5:15:2f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:f0:5c:fa:92:aa:05:3e:c3:27:5f:14:d3:
                    cc:97:29:47:52:e8:b4:d3:70:ea:c6:09:f8:e0:38:
                    a6:0a:02:e8:e2:a7:13:9f:c5:bb:a8:eb:26:83:35:
                    ac:70:dd:d1:e8:dd:d9:44:e8:6d:e0:80:c5:52:f2:
                    35:b3:88:00:e0:16:8a:22:ec:b3:e5:19:ac:c8:e2:
                    95:05:53:68:44:56:26:a7:33:87:fd:15:6e:c2:cd:
                    95:6c:78:f5:1b:08:00:c8:fb:d1:3e:79:e6:df:25:
                    e3:d7:0f:33:25:52:1b:7c:09:4c:c1:04:1f:7c:eb:
                    f5:22:79:6a:fc:7e:6e:a5:dd:35:c7:18:5e:5d:72:
                    29:32:65:f7:73:b6:fc:f2:b3:65:7c:ce:88:77:f5:
                    02:b6:3c:5d:c2:22:c4:fc:75:5a:44:36:5e:e1:6a:
                    01:d5:2b:26:d4:c6:12:7b:0f:91:68:88:90:70:ab:
                    8c:95:49:ad:2a:77:60:9d:9d:04:28:e3:64:23:0c:
                    ca:31:27:26:73:aa:eb:ee:d5:43:ad:92:5b:92:02:
                    55:aa:47:c2:33:c3:0a:46:6c:7d:93:79:81:8c:17:
                    df:da:de:5f:25:aa:4d:6e:7f:a6:ef:17:5f:af:4e:
                    bb:bc:bd:dd:d5:0f:8c:10:f0:73:47:b7:29:99:f0:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:7c:f4:ff:f4:ed:9d:90:6c:37:f4:fd:7f:dd:27:48:6b:
         a3:b7:ac:fc:68:85:55:1e:1e:ae:2c:6b:be:9e:ff:62:a3:f9:
         cd:0b:15:88:31:9e:79:0b:d2:4b:f4:4f:00:58:ae:4b:97:67:
         b9:05:c5:ff:2b:6b:58:94:9a:16:c3:9f:ad:91:73:03:32:0b:
         b8:e1:79:32:c2:f6:a2:1f:8a:d3:64:73:f6:85:92:4f:0d:5c:
         32:c0:a4:38:c5:25:b6:9e:ec:98:b2:f8:c3:52:c0:f1:54:69:
         f4:cc:32:8b:fb:e2:29:ff:89:c6:2a:63:4f:dd:ff:36:4c:57:
         aa:7f:54:da:99:3b:52:75:7d:c4:4b:e9:1a:5b:c8:76:41:f2:
         09:3d:45:c1:75:04:64:e8:83:55:0d:63:cf:75:d4:42:c3:2b:
         f3:31:18:f9:67:5d:c8:31:98:09:6b:ed:f7:a5:aa:76:f6:ee:
         7c:d8:97:6e:55:a1:91:6c:1e:19:f6:fa:c1:26:b2:99:b3:2c:
         81:10:4f:82:e7:19:79:0d:5d:45:87:97:bd:09:a5:dd:89:87:
         7e:0b:c7:68:7d:6e:4d:c2:08:e0:e6:f6:d8:4b:b0:ae:b3:e9:
         c6:8e:c0:be:15:d7:8b:42:ee:73:88:a0:77:60:e0:cf:b0:1e:
         39:99:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----