This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
File:                     ykeSHkQwUhp3J4iME7x7jhBMvb4.cer (raw, json)
Hash identifier:          m9d3uwKtooYa1hAfec3jd+8JEz+f1VW41WeG/fkp1YY=
Subject key identifier:   CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CEE02A8808DE86BE5BBC6B561429C00
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:18:51 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 203082
                          IP: 185.251.244.0/22
                          IP: 2a0c:6cc0::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:02:a8:80:8d:e8:6b:e5:bb:c6:b5:61:42:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:07:1f:47:fd:ec:ee:70:82:b1:df:71:a0:
                    5a:b4:49:5a:34:83:69:e8:59:32:89:49:87:83:f3:
                    a4:b2:51:db:83:e6:d6:e7:de:d1:c1:9b:ea:c3:cb:
                    a8:86:5d:c4:1c:c9:31:9c:e0:4e:28:ef:66:be:91:
                    03:f0:45:f4:94:14:31:f6:df:09:1e:15:7b:c4:4b:
                    9b:00:77:d5:8a:29:c0:2b:2e:d1:24:94:17:5f:ea:
                    41:2b:89:c7:1b:d7:04:af:31:c2:82:17:b7:86:67:
                    2d:4b:c1:06:75:79:c2:1d:b0:fd:81:46:4d:7f:4c:
                    bd:4f:62:01:d0:f1:82:ce:79:8b:84:67:a1:c9:3d:
                    16:f5:2a:54:2a:59:c8:33:be:a5:37:67:d9:75:a1:
                    73:fd:36:45:46:d7:20:9c:67:cb:e5:13:2f:d0:0b:
                    80:85:54:02:de:9e:19:43:46:3f:79:99:2c:42:d8:
                    54:13:cd:84:55:71:d5:29:f7:b4:f9:4a:2d:be:34:
                    7a:ef:a4:f4:c3:e0:62:c5:a1:bd:a2:ff:4f:72:36:
                    d7:e1:b3:ee:02:2d:52:58:03:b5:66:86:61:f0:e7:
                    bb:7e:62:de:4d:00:7e:7f:53:4c:e4:25:c7:1a:ed:
                    3e:84:10:16:53:52:3a:48:ca:6f:5c:6d:a3:3b:9b:
                    be:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.244.0/22
                IPv6:
                  2a0c:6cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203082

    Signature Algorithm: sha256WithRSAEncryption
         9f:5a:57:dc:41:90:07:70:90:89:9b:7c:ac:55:0e:7f:5a:cf:
         6a:74:37:b6:04:9b:03:bf:cb:a1:53:55:11:6b:20:dd:28:ba:
         b7:25:9a:f1:24:0b:b5:c8:37:a4:ae:e3:25:46:79:29:89:a2:
         fa:0d:1e:b3:ea:fb:17:75:7c:9b:e2:74:d8:88:39:72:ae:4f:
         68:b9:0e:a9:86:c8:79:7f:57:42:4d:db:fc:5f:5e:f3:b3:b3:
         45:ce:32:bd:06:b3:47:1b:fc:a4:f4:8a:6f:76:5f:26:db:33:
         5c:16:3f:a2:15:b5:2d:16:35:c1:7a:8d:de:01:05:c2:51:98:
         68:b0:5a:fe:66:03:12:d5:f1:d1:c2:34:22:8d:59:62:e0:41:
         2d:07:b6:cc:73:1e:db:95:ee:f5:57:d0:b9:fe:4c:16:51:46:
         e9:e7:96:3c:5e:a4:b0:42:05:fc:e8:bb:6b:f3:72:68:c9:0f:
         d6:05:eb:a5:bf:f4:19:90:b1:54:81:69:00:99:89:bc:77:04:
         8c:ac:61:07:6b:d8:5c:75:2d:53:01:7b:a5:de:af:1a:0b:53:
         6e:b8:7d:5b:50:83:d0:6e:31:59:cb:21:1f:84:9a:8f:bd:1f:
         b5:b1:6f:12:71:1a:c9:31:3d:fd:18:95:39:66:75:5f:67:15:
         2c:fc:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----