This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
File:                     xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer (raw, json)
Hash identifier:          9VNW0HskQvatPB/arruwNKv/+7zrsRSgjvwVBbq8ILc=
Subject key identifier:   C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C73A02A0461C9AD20663DF76E1DCE1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:23 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 91.240.95.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:3a:02:a0:46:1c:9a:d2:06:63:df:76:e1:dc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:8b:cc:a4:3a:e0:6e:e8:8b:be:e1:80:c7:
                    6a:f8:8a:5d:b8:2f:e2:a1:a9:22:bf:7b:f7:0f:1b:
                    57:4a:63:69:89:75:aa:01:be:5a:58:2a:61:fd:58:
                    0b:8a:a4:7b:88:1a:42:ba:77:e4:f8:10:30:fb:48:
                    c4:e8:14:d1:7d:7f:92:0f:0f:cf:76:90:27:63:2f:
                    82:05:07:f0:58:4b:92:9d:a5:7a:34:bb:83:b8:68:
                    56:a3:b4:e0:8b:82:61:8a:26:c4:db:0a:aa:a4:fd:
                    e1:7d:a7:83:3a:45:dd:e7:89:37:56:17:8b:a6:ec:
                    95:43:39:45:9a:9e:47:23:11:54:b3:e1:93:e1:ba:
                    64:4b:28:fb:f1:64:39:fc:c6:92:11:2d:99:60:74:
                    92:77:37:dd:4b:9f:6c:da:58:06:8a:23:0a:16:ba:
                    a4:74:3d:d4:c8:5c:0e:ef:63:9b:9f:00:33:11:2a:
                    8f:f4:99:cd:ec:25:35:e9:76:44:71:6f:89:df:27:
                    7f:5d:6c:4f:8a:48:20:9a:a4:43:fe:27:72:55:0d:
                    e9:23:bf:f4:d4:a8:b7:ee:ad:06:27:4d:f7:64:2f:
                    c2:7c:0d:91:25:ff:f8:dd:0c:28:09:ef:5c:2d:be:
                    b3:5d:bc:6d:6b:3f:42:06:ac:77:64:15:cb:f9:4b:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:64:9e:fe:78:82:ab:f6:6b:e0:67:95:6a:c0:ba:12:33:04:
         f9:47:69:b3:7e:f0:0a:88:49:67:38:dd:82:99:11:3f:41:38:
         46:bd:3b:d8:6b:0c:c6:cf:ad:de:b9:e3:c7:99:2c:90:51:25:
         09:b6:44:f1:8e:31:54:62:db:7a:6e:1d:e4:4a:f9:4d:d7:65:
         6a:e7:92:70:bf:5e:f9:3a:1b:34:4a:59:df:3f:28:85:1b:56:
         d4:ca:6d:64:4e:65:6b:70:d8:80:56:5c:22:86:ed:00:05:45:
         cf:90:53:c2:0c:9b:15:41:1a:da:0d:ae:0d:12:31:78:d3:f0:
         62:91:51:d4:45:b0:c4:ac:62:66:5e:c4:c8:dc:71:c0:d0:a9:
         62:35:ab:09:7e:fa:fe:a1:77:65:02:b2:f9:2b:79:76:61:91:
         97:87:52:8e:fd:ae:e7:8d:c1:68:eb:7f:d9:63:8a:4e:08:81:
         df:96:72:83:09:3c:25:0a:43:fe:62:76:9b:28:d0:2c:42:ae:
         c1:07:66:94:c3:13:55:47:24:e4:2e:d1:f8:c1:0a:32:e4:51:
         fb:d2:56:bf:47:88:5d:85:95:eb:d7:68:4b:a6:35:14:32:27:
         4e:64:65:da:cb:74:ee:bf:a4:87:14:c8:33:b5:b2:b8:d6:19:
         a7:80:d5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----