This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
File:                     w49sR0pKRBSpySd75Naqrivt6ks.cer (raw, json)
Hash identifier:          QZUT6kNVoqgGY2ogRmQW9nwkzeDI1yeIpzIufsvU0GE=
Subject key identifier:   C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019A920C3E5266B3540102FDEF27D156BB26
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Nov 2025 13:41:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203691
                          IP: 194.180.248.0/24
                          IP: 2a13:ff40::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:92:0c:3e:52:66:b3:54:01:02:fd:ef:27:d1:56:bb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 17 13:41:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:4a:79:d9:f4:19:0a:57:77:0e:60:5c:c7:
                    45:78:b5:97:67:a4:3f:04:b9:a3:0a:5f:72:f4:78:
                    e8:89:3a:60:53:7f:bc:0f:67:bb:e2:fc:95:f4:3a:
                    83:f2:da:af:77:25:6c:75:e4:06:45:5e:ff:87:a0:
                    0b:26:fa:58:49:74:21:14:62:c0:bc:48:b9:fc:ba:
                    57:f2:6e:05:d8:fd:cf:6a:af:2d:98:4f:f7:04:1e:
                    fa:f7:77:78:3f:0d:b9:60:e8:93:58:6a:16:e7:fc:
                    3b:d1:99:65:42:57:4e:42:a8:61:f6:4e:a9:f6:d9:
                    71:bd:fd:ac:1f:78:24:c3:0b:70:4c:82:e1:56:9c:
                    c2:71:af:72:79:84:f2:d7:f4:b4:83:03:50:02:e9:
                    80:19:d6:77:ed:07:8d:11:19:77:e0:c7:07:f9:9e:
                    5b:f3:af:16:84:ad:66:56:9e:f8:7a:b7:bd:9d:b9:
                    eb:a0:58:ac:43:06:11:12:76:15:0b:66:15:74:cb:
                    50:cc:54:bb:f2:de:fb:a3:2b:60:93:93:b8:d9:6b:
                    68:9a:18:ab:98:85:33:11:14:67:dd:9a:46:87:13:
                    c3:ca:f0:fd:d3:e2:5d:c8:98:62:53:fa:2c:15:79:
                    7a:c9:97:7d:fa:37:f8:4f:d4:09:bf:9a:f6:44:b0:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.248.0/24
                IPv6:
                  2a13:ff40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203691

    Signature Algorithm: sha256WithRSAEncryption
         61:73:62:d9:0b:7f:7b:4f:2a:97:c3:50:06:f2:51:88:08:96:
         cd:79:4b:79:df:d3:dc:ab:ce:34:f5:fb:0c:c4:e9:cb:0b:71:
         b0:5c:89:52:8b:55:68:b8:cc:d3:ab:39:c5:20:bc:ca:95:8a:
         60:25:1c:52:e5:63:2a:61:5c:88:61:a8:69:57:ad:b9:14:17:
         4c:25:ef:3a:71:3d:e0:cc:d7:36:39:85:41:70:d1:08:7d:52:
         f5:7a:c4:ed:f4:13:10:0a:70:ed:39:1e:39:5d:b9:47:d1:28:
         42:dc:17:d6:6a:3c:fa:28:d7:64:32:54:7d:f0:6e:44:8d:b9:
         e4:5c:ea:d2:f9:16:b5:5b:ac:79:73:57:fc:16:53:59:ce:8d:
         be:dc:9c:f4:f5:37:8e:fb:62:d4:30:a8:16:f3:a5:c0:f1:10:
         a2:ab:10:3c:7d:c7:ff:76:85:60:00:68:6b:f2:d7:3f:4c:a9:
         b9:4c:6f:67:df:7d:fd:c4:7a:88:07:49:45:49:ec:81:cb:b7:
         2f:b8:80:85:77:bc:f7:7a:cc:c4:c7:67:16:f3:47:68:d4:8c:
         f5:6d:15:ef:69:72:1a:4c:b9:4b:54:35:13:8a:4b:40:e4:17:
         fd:93:3c:ab:0e:d7:c4:95:34:45:32:39:bd:4e:e5:14:e1:ac:
         d6:49:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----