This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
File:                     uas2E5RoPk8kOXz8jyPqssaCjeo.cer (raw, json)
Hash identifier:          ZXKA4+GX0/frdT6TnjZyMCkK0UB+Vs2idwpFlW5wNm4=
Subject key identifier:   B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA53785CC86A542C0EB8C4A1F8F3249
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:19:43 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 2a13:2e00::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:37:85:cc:86:a5:42:c0:eb:8c:4a:1f:8f:32:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:19:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:88:10:4e:42:38:41:0a:b5:c9:7d:68:4f:
                    27:96:d7:eb:d3:a8:b3:b5:4b:10:67:4f:4f:df:f3:
                    90:6f:81:2d:ba:dd:12:15:57:14:6e:09:12:76:65:
                    19:d4:e8:e5:a3:43:89:03:f4:90:ba:95:ea:fa:8d:
                    33:9e:63:93:95:6a:70:19:51:38:27:19:cb:59:3e:
                    81:83:a2:34:16:17:69:08:17:ea:5a:4f:43:62:0e:
                    10:c1:cc:b7:64:f5:31:81:be:99:14:9a:e1:12:66:
                    17:c0:fd:54:64:c1:50:45:6c:45:ff:d2:4e:14:02:
                    e7:50:9f:30:e7:7c:02:ac:86:3b:99:4c:2d:12:b2:
                    8d:1d:9d:79:b1:e4:d6:09:e1:cf:d6:25:74:c3:ca:
                    6a:cc:d8:02:2c:dc:13:2a:da:2c:c0:29:72:e2:5a:
                    13:34:ac:de:20:38:09:12:aa:cc:8b:54:75:d6:e8:
                    a3:65:54:f5:f7:2b:a5:d9:e7:42:0b:72:83:72:7f:
                    d1:9c:c8:dc:c4:1d:e2:eb:6d:b3:c0:2a:e7:ea:30:
                    43:da:fe:a6:3a:d8:98:b0:7f:5d:3a:e7:b6:06:64:
                    64:f7:a7:f7:38:9c:f0:fc:3c:4c:6d:d3:40:d7:6d:
                    73:54:6f:3f:52:c3:75:4f:63:2d:08:3f:95:d9:bd:
                    1a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:2e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:ce:4f:a7:f8:79:e8:50:91:c5:5f:f7:04:99:31:4d:79:e9:
         a3:7b:f0:75:4e:02:60:4f:18:37:e5:a4:72:42:6e:30:27:cd:
         91:e8:2f:1b:ac:22:88:67:ce:a8:cf:f5:7a:5c:1b:85:76:11:
         8d:fc:35:b7:54:24:b0:10:0a:f8:e5:9f:11:5d:d2:b9:7f:4f:
         48:15:0d:c9:d3:6b:00:2a:41:7e:c7:fc:7f:9f:1e:13:46:66:
         be:ea:5e:f4:bb:2a:39:f8:9a:8a:05:84:72:cd:4d:f2:16:7d:
         5f:11:44:ee:6f:bd:a4:04:16:83:37:1b:8b:51:21:3f:4f:f3:
         57:e8:e2:e8:80:bb:40:de:06:67:70:e8:91:b4:2c:c4:3f:84:
         cf:2a:cd:6c:bb:a3:42:ad:b2:81:f6:6f:04:19:e3:40:a1:67:
         14:c0:e8:40:43:2a:ac:ef:27:10:c4:93:bf:17:87:ab:7d:27:
         bc:22:3c:ce:fd:73:73:47:50:cf:a3:b5:33:43:8c:a9:80:f8:
         12:1f:53:9c:2b:4b:52:d4:54:6d:76:0a:c3:63:5b:17:46:67:
         c0:59:e9:97:d6:e1:d3:38:f1:37:ea:5e:fb:91:46:5c:ee:8d:
         6c:2b:02:97:51:a0:20:58:c8:85:71:a1:b3:ed:71:44:68:9f:
         8b:6d:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----