This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
File:                     rdJhytDf8tm7L4x60Nsm7Vcw090.cer (raw, json)
Hash identifier:          CwDwgxhLZxLmyJpq0+K0t9MhXDuk2SZr1YohO6SrwGE=
Subject key identifier:   AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7834C3EF13BE13474297738B195F5BB5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:18:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.138.252.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:c3:ef:13:be:13:47:42:97:73:8b:19:5f:5b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:05:24:1d:0a:ad:cd:94:fe:97:38:ac:cb:
                    0f:a4:11:7f:96:d6:f4:5d:23:37:1a:87:10:8f:4d:
                    6c:6b:f0:e4:f7:a8:bb:9e:7a:1e:be:9e:4c:15:a9:
                    77:ff:e0:a7:f7:05:83:36:e7:79:e1:59:12:20:7c:
                    6d:6f:1a:47:a4:47:a9:ff:a5:ff:59:54:2e:5e:cf:
                    92:56:6c:6b:57:b4:7f:a1:75:c5:34:e2:00:fe:5d:
                    93:5a:96:2b:5a:7c:77:8c:97:59:13:f0:75:76:08:
                    bc:94:20:6b:2d:8b:d8:0a:67:53:07:9f:0b:75:2e:
                    bc:25:81:73:21:d7:c3:22:cb:06:19:18:d4:c0:d0:
                    71:a4:fb:1d:32:b0:51:b1:50:75:f8:5a:1d:9c:20:
                    68:88:62:12:de:18:0d:cf:15:36:e7:9a:8a:ed:4f:
                    69:2e:2d:55:e9:70:d4:ad:92:e6:03:38:bd:80:47:
                    1c:b6:7a:85:0e:ca:0a:19:98:ba:e3:e1:f4:47:75:
                    33:60:69:37:00:79:b3:b3:40:72:85:1d:23:06:45:
                    8f:91:5d:4b:eb:b5:da:bc:bd:a4:83:10:34:19:30:
                    04:76:a3:e2:8d:af:02:50:ef:94:9a:45:ee:c6:14:
                    25:ee:4d:38:e1:f9:96:f9:21:89:22:3d:fb:54:08:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:3d:48:b4:b0:4d:54:d5:c1:c9:b3:b3:7f:d6:9e:db:4e:7d:
         f8:67:96:0e:93:8a:64:20:16:82:6b:08:ce:c5:ec:33:c8:6f:
         98:9d:b3:d6:c5:e5:c9:5b:d9:e3:5b:b0:27:68:92:3f:01:b5:
         3c:f3:da:13:fa:7c:a0:3a:2b:06:1e:d2:59:51:17:bd:7c:a5:
         2e:40:46:3e:d4:16:8e:78:1f:e4:85:46:60:59:14:46:15:61:
         66:bd:64:97:65:49:43:22:a0:73:0a:14:07:97:af:f2:75:03:
         6d:c3:57:ef:18:0a:6d:8e:5a:90:84:30:46:97:a0:ae:14:8a:
         b6:f8:4e:f2:bf:3e:86:5a:7f:54:da:7e:d1:9f:df:ce:95:9b:
         a6:5c:cb:64:55:41:fb:a8:1d:53:45:dc:18:cd:2d:90:1d:35:
         7e:e4:a7:e4:98:12:42:e1:4a:5c:83:92:c0:b7:7e:b5:9e:0f:
         46:6f:c9:49:60:28:48:f6:f7:7f:30:30:96:99:1e:f0:bc:c6:
         e2:27:03:98:e1:94:be:3b:c1:28:da:95:58:51:24:ed:3f:c6:
         da:49:b5:2a:87:df:e4:92:92:ed:2f:94:e9:8c:9d:91:33:46:
         b4:68:24:10:31:67:15:86:34:8d:7f:ad:47:5e:bb:38:6e:1c:
         0a:8d:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----