This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
File:                     nhuhZT_KfIAXI8pG_0Qua6wekaA.cer (raw, json)
Hash identifier:          ilOogVkZDvgj/m2grieox2FeDDkHKdxfSS4Okns9QFs=
Subject key identifier:   9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78A35CC10582A5A68AD2EBD8283EA106
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:18:50 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 211974
                          IP: 185.203.220.0/22
                          IP: 2a12:9740::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:5c:c1:05:82:a5:a6:8a:d2:eb:d8:28:3e:a1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:a5:7e:60:3e:24:62:d2:1a:fb:3d:01:34:
                    73:7f:e1:e0:2f:69:b6:bf:0a:d2:0f:77:f9:a9:ab:
                    01:b5:17:0b:31:e9:d8:ab:df:7d:ba:2f:60:02:5b:
                    d4:1a:90:32:f2:8c:4a:59:23:39:0b:f7:dd:d8:28:
                    d1:82:3b:c6:61:51:56:07:37:d6:3b:e6:5a:62:ec:
                    fb:2c:72:b6:2e:81:5d:af:47:55:38:ef:e9:00:77:
                    ac:9f:85:00:e7:15:9d:61:d2:86:b0:78:51:5d:08:
                    93:13:b3:e7:aa:dc:2d:30:11:97:4c:32:ec:22:71:
                    67:55:ac:cb:99:20:1e:63:ab:36:fe:5c:9c:09:67:
                    3b:3d:7a:07:b6:0f:29:16:0e:0a:94:03:41:d2:3f:
                    45:e1:e3:3b:36:f1:b7:eb:48:bf:a9:dd:d8:0d:89:
                    e5:32:a3:89:4b:e4:cc:87:12:c6:8c:7a:ad:42:e4:
                    41:e8:95:0b:f9:85:0f:70:1a:b6:ca:2f:9f:f0:de:
                    8c:fd:02:5f:5a:84:d3:4a:53:42:1a:39:82:d1:4a:
                    14:4a:34:36:14:94:d8:d0:6e:fc:04:c5:20:51:e9:
                    8f:4b:7d:e0:14:07:aa:19:c6:8d:fe:1b:65:2b:41:
                    54:60:61:f6:53:97:a7:0a:28:87:88:ea:cb:f3:f0:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.220.0/22
                IPv6:
                  2a12:9740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211974

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:c4:58:fc:38:43:58:71:9c:a1:5b:7f:d1:cc:43:88:0b:
         0c:c6:91:ae:32:10:ad:1f:1b:7f:ec:d9:9f:64:12:63:7e:8e:
         44:84:a7:55:e0:ad:9a:48:f8:a5:a5:3b:a3:49:26:c4:7b:0e:
         90:4f:b5:b2:73:3f:a7:b1:63:4d:d2:e6:4d:76:fa:fc:91:7f:
         44:6d:34:0e:0b:de:7c:cd:fd:ce:c8:3b:d8:b3:8e:b4:9a:13:
         3c:40:69:db:37:7b:9f:35:27:59:0c:a2:18:2f:ce:f9:6e:66:
         69:4c:6a:95:b8:3d:4e:7b:ac:99:88:15:d3:a6:47:ce:de:7d:
         dc:e8:1a:b9:a6:02:b9:28:18:21:ae:fa:70:34:d6:08:40:f8:
         cf:cf:1a:e1:db:0c:12:e1:fa:8a:68:82:3d:c8:5e:b1:9f:f6:
         78:93:81:9e:ac:cd:f7:7e:84:f6:84:c5:62:99:df:89:6c:38:
         81:21:fe:9d:8f:f8:b3:6e:c8:a2:c3:1b:24:32:23:73:1c:8c:
         c6:fe:1d:8f:d8:51:de:8c:b8:46:25:88:b6:49:b5:d8:e6:cd:
         37:92:66:6a:87:f0:4f:1a:58:a6:c6:7a:14:57:b2:55:68:be:
         d6:6c:31:cd:d2:fb:5e:9b:ab:12:5c:77:e6:e9:94:30:be:06:
         28:26:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----