This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
File:                     y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer (raw, json)
Hash identifier:          82q9jS8qwRw9gURgQyVUd86Ba3oftrKb21SQLPooZPM=
Subject key identifier:   CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5CA3E13EB384B3D8B344FA7A0B4A4A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:19:41 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 200382
                          IP: 194.50.20.0/22
                          IP: 2a0c:f6c0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:a3:e1:3e:b3:84:b3:d8:b3:44:fa:7a:0b:4a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:19:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:a4:03:d6:54:2b:38:89:b8:44:d4:82:3a:
                    73:4a:04:14:93:53:20:91:e5:40:0c:1c:9c:5a:ca:
                    90:c9:81:7a:3a:3c:45:ed:30:d8:65:07:a3:a1:85:
                    4e:39:5c:fd:3d:65:82:44:9b:a9:14:d8:19:19:06:
                    fc:31:50:c9:e2:d3:84:ab:60:81:a0:70:33:83:30:
                    e4:53:b2:55:a1:34:12:4a:0f:4e:5a:ef:20:13:10:
                    52:5e:3a:b9:0a:44:43:ec:3d:7b:d0:d2:6f:e2:fb:
                    23:ec:9c:c1:00:1a:cb:38:f0:f6:b2:e4:5f:d6:f2:
                    63:ec:13:74:ad:81:cd:a2:32:ad:c1:1e:55:42:68:
                    6b:dc:65:bd:e3:1a:e3:e5:f4:b1:cf:96:87:13:c4:
                    ad:2b:2b:be:5a:38:4e:42:18:4e:7f:b4:e8:5a:df:
                    82:c6:ce:99:6c:30:13:f9:e2:b4:3b:a6:28:9c:df:
                    66:53:05:de:a2:e5:6c:23:e7:e7:b0:7d:98:05:95:
                    d7:47:55:5c:bc:20:59:89:dc:45:1e:d6:69:52:fc:
                    db:30:4d:00:85:ea:6f:a6:45:a7:a9:eb:2b:3c:f5:
                    ae:e4:1d:20:2f:e9:a8:c7:71:90:79:45:18:cd:c0:
                    f4:6e:0b:44:25:c8:bf:43:8b:33:44:67:41:62:4a:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.20.0/22
                IPv6:
                  2a0c:f6c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200382

    Signature Algorithm: sha256WithRSAEncryption
         89:67:93:71:b2:62:e6:9c:76:ba:96:c5:1d:9a:08:d7:80:62:
         1c:dd:91:ae:30:5a:7a:17:79:a6:ce:17:23:e8:8b:86:e7:2e:
         b4:95:28:53:34:dc:25:aa:12:ef:19:f4:93:3d:96:05:e3:36:
         1f:5d:11:1c:ab:e4:da:00:97:18:cc:b7:58:37:cc:54:35:07:
         e2:48:9a:01:73:8a:e8:3b:28:3d:3f:c3:fe:09:4e:44:e8:22:
         59:a4:0a:e6:89:73:97:68:7b:c8:1d:98:7a:d9:2f:ec:96:eb:
         84:44:18:4d:56:f1:2a:ee:5d:8e:d7:5c:f8:91:7b:fa:27:db:
         61:57:59:68:90:1c:d2:71:b2:4c:f9:83:83:0a:76:06:a1:02:
         8d:60:1a:68:f0:0c:8e:64:a7:3a:47:fb:5b:da:ae:83:86:f5:
         53:b6:94:65:80:f2:33:0a:ac:a2:b7:a6:fb:c9:44:48:0b:33:
         39:15:17:ec:bf:ec:43:53:66:67:89:6c:6a:64:e8:2a:04:13:
         bc:18:e4:2c:98:e0:94:5b:b0:f5:d0:58:eb:32:8b:2f:fc:08:
         bc:90:b0:65:f7:a9:f2:ad:46:65:3f:6f:37:3b:da:a9:97:2f:
         2e:56:3b:7e:01:1d:b0:8d:52:dd:8c:08:56:54:31:cc:4b:ec:
         f8:99:78:9f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt9XKPhPrOEs9izRPp6C0pKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjk1ZTFjYmM2N2U3ODJkYmY5ZjhlNzQ0ZTQzNzI2OGJkY2MzOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrukA9ZUKziJuETUgjpzSgQUk1Mg
keVADBycWsqQyYF6OjxF7TDYZQejoYVOOVz9PWWCRJupFNgZGQb8MVDJ4tOEq2CB
oHAzgzDkU7JVoTQSSg9OWu8gExBSXjq5CkRD7D170NJv4vsj7JzBABrLOPD2suRf
1vJj7BN0rYHNojKtwR5VQmhr3GW94xrj5fSxz5aHE8StKyu+WjhOQhhOf7ToWt+C
xs6ZbDAT+eK0O6YonN9mUwXeouVsI+fnsH2YBZXXR1VcvCBZidxFHtZpUvzbME0A
hepvpkWnqesrPPWu5B0gL+mox3GQeUUYzcD0bgtEJci/Q4szRGdBYkpemQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMuV4cvGfngtv5+OdE5Dcmi9zDnOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzczZTAw
Zi1lM2UzLTRkMjMtYWQ2Yi03NjY4MmU3OTRjYzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvNzNlMDBm
LWUzZTMtNGQyMy1hZDZiLTc2NjgyZTc5NGNjMy8xL3k1WGh5OFotZUMyX240NTBU
a055YUwzTU9jNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwjIUMA0EAgACMAcDBQMqDPbAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMOvjANBgkqhkiG9w0BAQsFAAOCAQEAiWeTcbJi5px2
upbFHZoI14BiHN2RrjBaehd5ps4XI+iLhucutJUoUzTcJaoS7xn0kz2WBeM2H10R
HKvk2gCXGMy3WDfMVDUH4kiaAXOK6DsoPT/D/glOROgiWaQK5olzl2h7yB2Yetkv
7JbrhEQYTVbxKu5djtdc+JF7+ifbYVdZaJAc0nGyTPmDgwp2BqECjWAaaPAMjmSn
Okf7W9qug4b1U7aUZYDyMwqsorem+8lESAszORUX7L/sQ1NmZ4lsamToKgQTvBjk
LJjglFuw9dBY6zKLL/wIvJCwZfep8q1GZT9vNzvaqZcvLlY7fgEdsI1S3YwIVlQx
zEvs+Jl4nw==
-----END CERTIFICATE-----