This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
File:                     pJKfzWHcadzPvgHV_wA1tBrJUmA.cer (raw, json)
Hash identifier:          y5Q7/37/ywdJK1tx7/iaPnE19dCGui6t+o+fa9z0WOw=
Subject key identifier:   A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5C0B7C6AF2CD415841267E09137271
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:19:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 45.150.16.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:0b:7c:6a:f2:cd:41:58:41:26:7e:09:13:72:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:b5:f7:8d:95:28:a6:ac:43:84:b9:78:a1:
                    7a:e4:03:61:69:66:9a:8c:15:0d:bb:cd:6c:30:f3:
                    11:08:22:09:9b:26:e2:cc:3d:e9:26:2d:d4:f1:db:
                    0b:bb:72:9f:21:a8:65:92:72:2e:14:9d:45:37:51:
                    fc:97:21:01:99:b3:ad:27:3b:da:57:f9:13:e0:52:
                    0e:ce:53:fd:2c:5a:2b:5a:e6:92:bd:ca:2a:47:42:
                    44:66:67:02:74:5a:d6:00:50:df:f2:98:55:25:61:
                    d7:85:a7:2a:f2:f7:4e:1c:a6:a0:87:d3:84:4f:07:
                    c0:ab:e5:86:a9:24:85:7c:5e:aa:a7:7f:8d:65:cc:
                    09:ca:9f:15:0b:5c:cf:e4:10:70:e6:9f:c5:b5:a9:
                    2c:64:11:ff:64:6e:5f:33:70:2f:1f:a0:41:c3:f9:
                    63:29:2e:68:44:72:da:d2:cb:17:9f:00:d1:c6:44:
                    77:7c:59:fc:9a:12:a3:5b:dc:9f:75:0f:04:57:e6:
                    d0:78:e4:7b:e3:db:f9:45:0b:c4:35:da:54:7b:43:
                    ac:de:72:9d:88:03:a9:2d:de:e4:5a:b0:86:52:3a:
                    ec:5d:d7:f7:2b:f8:e3:86:a5:8d:b1:3b:96:cb:e9:
                    eb:0d:31:18:6c:3f:fb:9d:c4:ed:e0:f9:5f:e0:a2:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:d1:34:5d:4b:1d:8b:43:ba:39:7a:55:e0:61:3e:da:be:aa:
         d7:ce:ad:92:d6:9c:9a:08:b7:b9:5f:29:f5:cf:21:c8:50:1d:
         5f:3a:50:ca:85:53:45:ed:fc:5e:9c:5c:6b:a8:e9:1a:f5:1a:
         eb:9f:85:78:46:3e:85:cd:ea:c3:bf:4d:58:aa:19:3d:b1:9e:
         2a:94:65:f1:10:30:4c:33:d2:8d:e7:75:9c:a8:02:13:57:1e:
         b5:9f:68:73:c6:be:e3:5a:77:95:ff:a3:c2:fc:7b:fd:c5:0b:
         2e:64:5d:82:1c:a4:cd:a9:46:27:15:69:c4:63:15:3f:c5:f6:
         63:03:06:07:a6:3d:be:53:5e:ed:27:97:91:40:06:6a:fc:8e:
         37:ec:33:05:49:a4:21:e7:23:b9:d6:8a:d4:fc:85:d6:15:a1:
         57:79:0b:11:2c:a7:56:4c:22:a1:e6:7a:e1:2b:cc:27:52:49:
         04:e4:da:6a:3b:29:3a:99:3d:63:b2:50:f8:98:76:40:43:65:
         71:75:08:74:db:fb:ca:d6:33:e1:9a:6e:e9:8c:32:38:0e:6e:
         7b:e7:a1:ea:f3:b3:8a:31:e5:27:b0:c4:3b:68:1f:4d:22:ba:
         24:7a:51:09:85:7a:62:57:f5:b3:1a:1d:e8:8b:63:7e:31:79:
         32:2b:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----