This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer
File:                     uQs3yxdghhgU8CzzVJfuVlMwZEw.cer (raw, json)
Hash identifier:          fMktwmwNEyvSepfr4KTuw7I8zxUUQ1d9DcrJLpL9dNc=
Subject key identifier:   B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019A8C8F16EC657D6B86189D35B6541731DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 16 Nov 2025 12:06:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212623
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:8c:8f:16:ec:65:7d:6b:86:18:9d:35:b6:54:17:31:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 16 12:06:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b90b37cb1760861814f02cf35497ee565330644c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:f2:08:b6:ab:15:a3:dc:d8:39:83:1e:73:
                    f0:ac:f4:c5:a2:ae:98:8e:e2:64:bb:9f:6c:ba:90:
                    3d:26:4d:33:5e:6b:f5:1e:df:d2:f0:cc:8b:a4:dc:
                    f4:41:7c:5e:d7:62:b9:9e:d9:92:a9:82:95:8b:ef:
                    db:d9:3b:9f:09:96:da:77:32:7f:df:25:05:f7:c6:
                    90:66:e1:7e:6f:49:76:9b:41:e4:c5:15:71:7d:47:
                    35:a6:09:3c:28:42:6f:e2:24:a6:1f:d3:de:12:e0:
                    d6:60:e0:cf:9d:96:27:4a:bb:9a:af:c0:de:80:ce:
                    b8:6c:f7:10:a6:21:20:d8:de:0a:bf:fc:c7:8e:ff:
                    6a:bc:5e:69:23:15:04:aa:ff:ae:ab:ae:92:c5:76:
                    23:e0:37:e9:80:ca:53:42:23:73:57:a7:c3:8c:fe:
                    f5:bc:4c:23:15:a6:21:4a:04:33:34:97:9e:bd:37:
                    60:4f:3c:38:50:02:d9:f4:d9:6b:6c:8a:5a:28:43:
                    51:67:a2:8f:23:35:8e:34:df:e9:10:00:41:f4:29:
                    a9:80:2e:c3:02:8c:b5:3e:e8:d1:8c:46:38:95:49:
                    b4:3e:58:3e:cc:a1:53:33:0f:ee:3a:01:59:29:ff:
                    a7:d0:22:23:91:7a:8e:95:28:7e:62:88:a5:dd:40:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212623

    Signature Algorithm: sha256WithRSAEncryption
         50:d9:72:3a:1e:2a:b3:98:39:2c:b6:04:e5:46:81:7f:f0:c0:
         5d:b5:74:f2:eb:1c:62:a2:1d:81:18:4e:77:33:40:65:55:d5:
         34:2b:d7:79:c6:2f:e9:87:fb:f8:b6:63:d5:d6:6e:84:0a:a3:
         69:2a:c3:72:9f:f7:05:66:18:02:5c:d4:4f:22:84:9a:15:5c:
         65:dd:bb:77:8d:31:85:fb:4f:fe:17:4c:91:ad:70:f2:c5:1b:
         ff:27:ee:47:a5:85:84:cb:70:c8:f5:a7:d3:db:36:6f:9d:2f:
         95:09:34:77:fe:e9:25:20:7a:0e:d7:97:10:57:ee:46:95:0b:
         9b:c0:2b:a9:22:64:16:6c:df:a6:17:bf:d6:8d:44:6b:6c:67:
         69:d1:66:d4:10:b3:73:3e:15:63:d5:84:1b:ad:e2:6f:86:e7:
         39:14:d2:b5:a8:5f:18:61:30:fc:90:90:b2:d1:f8:e0:f0:48:
         b8:9f:58:e1:b5:e8:b8:8b:d3:23:3f:c4:a1:ce:1f:ef:e1:c0:
         a0:21:6e:ee:b7:a5:72:ed:ac:b3:48:f8:b9:ae:b8:04:a6:b7:
         56:d9:8d:d7:40:27:5e:74:17:69:bc:fd:cd:72:b3:af:02:4f:
         f1:a6:9a:2a:d5:cc:dc:9e:c7:8a:8f:0b:4b:45:d7:8d:ae:24:
         1f:c0:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----