This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
File:                     ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer (raw, json)
Hash identifier:          Z0JD/QUCwcs1CTG2kRTzR9sB5B2azadp1eHCSIZG4xU=
Subject key identifier:   C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5CDFE00916443836F4CC3AE1418BE0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:19:57 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.247.208.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:df:e0:09:16:44:38:36:f4:cc:3a:e1:41:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:19:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:db:9d:49:17:d2:e0:60:d2:bf:18:12:bf:f3:
                    b9:c7:59:85:ba:32:21:47:6c:ac:e1:68:8b:b7:e5:
                    34:b6:d8:cd:06:4b:2a:7f:5a:a7:a7:47:52:bd:4b:
                    68:6a:7c:13:b8:c4:74:7d:7a:ed:80:a8:a9:86:59:
                    86:c2:17:10:82:b9:b2:aa:bc:80:20:37:c3:08:da:
                    11:47:86:de:5f:1e:7e:22:f2:00:af:58:0d:d5:2f:
                    2d:af:5a:6d:4a:10:0c:f2:c5:d1:6d:9d:d4:a5:fd:
                    ca:cb:4f:90:2c:c7:74:04:5c:f6:46:b5:99:5b:ac:
                    51:dc:7b:4e:03:8e:a1:1d:a5:c3:53:81:d8:19:91:
                    71:52:9e:03:b0:12:c8:c9:56:04:32:bc:f4:7b:a4:
                    24:a7:0d:24:c1:5a:75:b5:7e:2b:38:04:79:84:bf:
                    ce:02:aa:df:dd:81:a3:50:36:d5:81:42:ff:25:6f:
                    b1:35:91:f1:d2:fa:cc:77:a2:35:f3:a8:1d:2c:21:
                    3b:12:9c:bb:ab:4b:7f:14:d3:c3:82:5a:ea:56:f5:
                    e6:ee:16:3f:68:1d:45:d6:03:c8:8f:5e:38:d2:43:
                    11:59:10:11:58:49:ad:60:2c:f2:5a:42:8f:1d:45:
                    c4:f1:b0:fb:f0:13:04:f4:c4:41:34:44:1b:fe:9a:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:bc:b6:9d:39:60:12:7b:77:74:9c:8a:cb:70:4c:74:71:d9:
         59:3d:5d:2e:89:e0:36:b6:29:50:d1:8f:46:df:19:74:09:25:
         4b:b2:a5:a8:30:17:ed:b3:54:4f:9f:63:38:8c:53:84:e3:34:
         2c:06:0f:72:56:0f:84:8c:04:a9:33:5d:c6:2c:41:57:16:e3:
         3a:df:77:f0:1c:70:e8:3f:b0:6e:cd:22:25:d9:6c:a7:6b:41:
         8c:0c:98:0d:e2:1b:31:9f:89:93:7f:ea:ef:8a:79:72:90:5e:
         85:2a:60:df:c4:18:01:81:26:17:00:39:85:8c:0e:46:71:f3:
         1d:e3:6e:86:a8:36:69:b6:5f:47:5b:5c:52:f8:06:24:64:0c:
         a4:4c:22:9c:10:32:56:2a:d1:16:e5:93:d5:aa:22:db:b0:c7:
         b1:21:28:74:68:f4:06:d1:7c:a0:76:b6:d9:a1:93:53:c8:88:
         96:ec:a1:1d:f3:ce:36:17:56:6c:cc:72:8a:b4:14:f9:e3:1d:
         ac:b6:f6:a6:39:fb:b1:2d:f1:2a:20:18:13:d2:dd:36:ae:dd:
         2c:7f:ac:be:ad:4a:05:27:5a:b2:3c:2a:2a:83:72:1e:f4:3a:
         ec:a9:9e:4e:ac:b4:23:f0:2f:33:76:44:e4:95:8b:1f:53:d2:
         15:99:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----