This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
File:                     z33FpPcC09ydVuo1ue4gLsVJZH4.cer (raw, json)
Hash identifier:          Y5gKHD3Jj6x2TrD+GY/qm+cX75rdn9exjs65SNj1CQ0=
Subject key identifier:   CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B784F1A8B76786A8C7C32A8D143F3F1BF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
caRepository:             rsync://rpki.pudu.be/repo/pudu/1/
Notify URL:               https://rpki.pudu.be/rrdp/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:46:48 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 56762
                          IP: 2001:67c:81c::/48
                          IP: 2001:67c:b88::/48
                          IP: 2001:67c:b8c::/48
                          IP: 2001:67c:b90::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:4f:1a:8b:76:78:6a:8c:7c:32:a8:d1:43:f3:f1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:46:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:1d:16:b8:f2:a6:11:c1:f0:a1:64:8a:5b:
                    c5:96:d6:bb:69:97:37:97:16:92:4a:15:7f:0f:31:
                    bd:8e:e6:cc:d9:45:cd:9a:69:72:7b:4c:01:f3:de:
                    a3:80:c1:01:25:1d:f0:38:2a:4a:10:3d:35:e6:82:
                    0a:69:eb:c6:cb:8d:d9:b5:d9:1b:d9:53:4a:04:cd:
                    e1:8d:16:d9:be:07:50:bc:49:fb:3f:e6:06:c0:5b:
                    0c:e6:4e:80:4a:2f:c3:12:c0:8e:10:f5:06:06:59:
                    d3:73:1c:18:ee:27:72:59:ff:0e:67:37:3c:a7:ff:
                    2a:c4:9e:64:19:2a:43:b0:06:9d:ac:01:e4:26:07:
                    0b:b6:c1:9c:d2:e9:b6:2e:59:b5:41:79:74:1d:05:
                    72:f5:86:74:2d:80:e5:76:ec:b9:cc:da:ed:61:21:
                    f5:25:14:ac:df:25:18:5f:69:27:25:1c:30:0b:90:
                    59:ae:95:32:85:56:83:29:30:4c:76:1f:87:41:ed:
                    f4:36:27:20:a4:ad:8c:e8:eb:71:c5:99:7a:d5:df:
                    c2:4a:2c:99:8e:a4:71:8b:8b:cd:0a:c0:60:59:3c:
                    c9:88:79:6e:90:44:f1:fa:d9:79:a0:46:6f:aa:a5:
                    02:da:cc:e0:20:92:26:bd:e8:f1:25:53:82:61:47:
                    05:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.pudu.be/repo/pudu/1/
                RPKI Manifest - URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
                RPKI Notify - URI:https://rpki.pudu.be/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:81c::/48
                  2001:67c:b88::/48
                  2001:67c:b8c::/48
                  2001:67c:b90::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56762

    Signature Algorithm: sha256WithRSAEncryption
         24:95:df:c5:f2:25:d9:67:90:08:8d:ed:1b:33:68:42:34:8a:
         a3:4a:e8:a2:6d:84:f2:c6:de:56:9a:02:d3:64:d1:bb:8b:b3:
         18:a8:04:48:ee:74:9e:54:10:36:44:9c:44:5a:41:e7:49:7b:
         2f:77:f9:b5:20:9c:0b:eb:c4:03:3f:a8:c7:7e:f8:3a:1f:e2:
         7e:cf:7c:bb:84:72:8c:19:5c:ca:0d:60:4e:33:af:87:be:0d:
         c6:b5:b4:df:2a:6f:94:2c:77:fe:e3:fe:47:a0:c4:79:05:94:
         f2:73:a2:62:e1:78:ae:03:1f:af:ff:9e:3e:e1:1d:17:b1:b9:
         3c:53:3b:04:a0:28:33:eb:2a:25:fa:83:81:06:5d:49:24:2e:
         cc:b6:a8:89:33:50:12:4c:22:07:d0:d4:32:f9:d4:48:4c:91:
         84:54:f6:17:dc:5e:c9:eb:a1:cb:00:5f:e9:8d:ab:a4:d3:c0:
         74:a2:b9:f5:78:6c:20:48:ce:68:e7:94:9d:40:db:58:95:2e:
         41:1c:bc:35:44:07:aa:7e:dd:16:03:26:3b:3d:ae:24:58:82:
         0d:7c:22:fd:b0:4c:c4:da:5b:71:b7:a6:61:43:56:45:9c:bf:
         e1:6f:bd:92:0f:5d:57:50:7f:a6:e7:11:11:4e:b9:09:43:2e:
         13:02:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:07:05 2026 by rpki-client