This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
File:                     vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer (raw, json)
Hash identifier:          K04/bz9aglifArQ9t1e7Bj0LrcpFuHZcg5QIwoDPHtY=
Subject key identifier:   BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA4D5CD62080DD3439F9F4F06E1B4C9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:19:18 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.145.100.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:d5:cd:62:08:0d:d3:43:9f:9f:4f:06:e1:b4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:3e:61:52:1a:5d:e8:c1:fc:89:d0:6b:e9:
                    72:f0:3f:d0:eb:d4:53:a4:25:53:3b:cb:2c:91:02:
                    87:56:fe:30:42:1f:25:a4:1e:89:e6:a1:ef:04:22:
                    dc:f7:e0:d1:fe:4f:5a:c3:e4:b8:99:e0:42:6b:96:
                    fa:a3:5b:42:1f:a4:95:fe:7e:b9:82:1e:d7:8c:21:
                    af:10:8b:6b:96:25:f8:8c:dc:e2:97:d1:74:ac:75:
                    ea:4c:22:b0:23:c5:da:62:af:69:54:fb:ef:93:d0:
                    93:66:f0:b6:ee:aa:14:3b:2c:05:6c:12:6c:47:b9:
                    48:92:f5:f2:fc:32:b6:a6:9f:1b:11:fa:39:1f:c1:
                    d7:a6:02:e4:29:b9:7c:90:77:3b:52:8b:de:16:72:
                    fa:e2:31:dd:3b:22:eb:a9:01:d2:0d:40:8b:3b:84:
                    d1:36:e9:ae:ae:e7:4d:ba:1d:c8:a9:b5:1b:c5:cd:
                    2b:4d:dc:6d:45:c5:ab:e5:07:a4:73:5d:4d:bf:65:
                    01:76:9d:af:f2:a5:4f:a8:d0:27:b4:42:a4:79:e1:
                    34:20:e3:0f:b3:0a:ce:ca:c0:a2:70:bb:67:cc:c0:
                    ed:6e:93:75:4f:52:33:87:8e:40:70:d7:f7:f9:0f:
                    4f:56:a0:07:f3:0e:4b:f1:56:92:ca:f8:a3:db:a2:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:be:be:38:11:08:a0:22:7b:b5:3f:2c:4c:8c:bb:1e:e8:8b:
         8a:e3:ec:cd:8d:cc:fb:66:20:fb:ed:83:9d:4f:f9:80:3d:89:
         d7:50:f0:85:a7:23:d9:b3:89:aa:a2:20:ff:a1:d4:eb:40:0f:
         76:29:f5:48:08:08:74:9d:0f:c2:bf:ab:89:bd:9d:dc:f0:10:
         f3:2b:a0:fb:18:4d:55:11:b6:77:27:e8:36:7b:79:81:38:32:
         3a:b1:2b:a0:54:20:d7:00:e4:1f:ea:15:a0:e6:87:81:c3:81:
         61:ad:e5:d5:d3:0b:aa:fd:9f:6d:ab:a5:86:0f:9f:99:b0:72:
         a3:a4:e5:28:9c:12:6e:b7:07:16:fd:01:3a:25:49:4d:db:83:
         09:a7:87:6b:96:d2:49:93:43:c0:02:35:75:f2:2a:b9:03:07:
         37:68:75:6a:a1:20:e5:a5:c0:a0:44:a4:98:3b:16:bd:79:af:
         09:06:8f:71:a4:e8:8e:60:47:04:ce:17:9d:1f:f1:11:5f:d7:
         05:99:b1:35:cc:05:50:5c:c8:9f:b5:57:80:91:b6:bc:6b:5e:
         85:ce:19:10:ae:99:73:3a:e3:15:81:2d:b7:f7:bf:36:fb:ce:
         30:12:fb:db:77:a1:9c:75:71:52:03:af:af:47:f3:7b:e7:de:
         d9:a1:91:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:07:41 2026 by rpki-client