This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
File:                     is0usvBhi3LGRtmX08ld2Da90AY.cer (raw, json)
Hash identifier:          KCUT+Gm/zhcocv7Whfi1D7G1+EiIAb1hUhRTX5vyFs4=
Subject key identifier:   8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C80DC6387ACAEF956E4E1C849F1A96A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 02:19:38 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 51423
                          IP: 213.133.224.0/19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:dc:63:87:ac:ae:f9:56:e4:e1:c8:49:f1:a9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:23:70:54:18:ea:f0:09:80:2d:a7:33:40:
                    df:95:09:6d:a5:82:d3:3e:c8:9f:7d:86:5d:a7:14:
                    29:6d:97:80:fa:76:dc:2b:60:b7:26:67:f1:82:24:
                    0f:85:20:69:01:e5:bb:de:5f:de:dc:e3:94:ed:9c:
                    75:7e:b7:84:44:77:37:25:6f:a4:db:ec:18:ef:19:
                    d1:e9:fd:94:b3:7d:f8:fa:8a:15:3c:dd:66:8d:fc:
                    31:cb:fa:6f:24:b9:d9:65:64:68:9d:9c:bc:95:df:
                    58:74:2a:23:73:7d:f8:cc:92:d4:de:77:e2:11:c1:
                    6c:7c:e4:e2:92:d6:cb:09:c8:20:81:92:2d:3f:a7:
                    2b:d3:0e:eb:9e:9f:b6:9f:2c:b8:8c:06:53:d9:2b:
                    a7:20:8a:52:ef:23:8b:1d:0e:d0:c0:ce:d7:28:74:
                    15:a5:43:8d:53:92:69:44:b1:a1:82:05:6a:d6:8c:
                    e6:cf:04:c8:a3:d4:a3:74:79:23:98:83:57:33:23:
                    b4:37:61:d2:46:4e:32:88:72:ca:a8:5f:ee:2f:87:
                    e9:90:24:3d:26:df:4d:54:d7:b2:86:d8:75:57:07:
                    db:66:37:62:5f:7c:b7:92:27:5d:0b:9b:7b:f3:96:
                    44:6f:13:4d:76:db:4d:01:9b:a6:bd:8d:fb:85:ae:
                    17:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.133.224.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51423

    Signature Algorithm: sha256WithRSAEncryption
         57:f1:e8:dc:35:5d:0e:04:74:60:0b:07:13:ca:85:15:28:6b:
         49:c3:9f:86:44:f3:7f:5f:ab:ac:42:f3:d8:3b:b1:2c:6c:ae:
         ec:26:bd:a7:54:5c:b2:11:71:97:85:d7:03:45:bd:3e:07:35:
         8c:79:4c:5b:b9:59:6b:21:37:6d:4d:2d:94:cd:5b:9a:41:e9:
         7e:01:a1:78:74:4b:79:8c:b9:0a:e6:65:5d:e4:60:be:ad:63:
         70:24:eb:b8:8b:60:a9:f7:30:40:0b:50:e1:5b:c1:7c:90:2e:
         63:10:e2:33:8a:7b:27:e4:a0:ac:3b:2b:15:6d:12:cb:de:19:
         b2:fe:6a:c5:4b:09:f6:47:d6:38:68:7a:dd:e5:f6:40:75:be:
         57:52:45:ff:3b:ca:6f:b7:d5:55:af:32:a0:37:eb:e6:a2:0c:
         fd:2f:ba:83:ed:d8:04:b8:77:9b:71:ef:be:d9:83:52:de:c1:
         1d:c3:24:1d:17:63:f2:f7:13:8c:71:bf:08:d0:dc:61:74:57:
         f0:26:9d:9a:c2:39:50:de:43:e6:66:5b:6a:4b:dd:94:04:d3:
         80:5c:4b:00:83:b7:bc:09:b8:d5:d3:e5:1f:48:34:4c:77:1a:
         6f:f0:af:71:4a:f6:11:96:5e:74:d0:1f:ff:3a:12:9c:b2:44:
         a9:12:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:45:41 2026 by rpki-client