This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
File:                     4zgHQmp0h6CET99NelLw-5C9t9M.cer (raw, json)
Hash identifier:          A/FKZxBbApqWskiq9c+o4RVl8ovSnVDOPzhCeJM9+z0=
Subject key identifier:   E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5B912B92FD485544311312D41DEF91
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:18:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.8.248.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 19:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:91:2b:92:fd:48:55:44:31:13:12:d4:1d:ef:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:a3:d3:93:36:c9:b1:6b:a8:2b:b1:66:92:
                    ed:db:2d:00:ce:28:f9:af:6f:eb:d2:f8:55:e9:b9:
                    b3:6e:a7:65:54:a2:7e:5a:e3:66:47:06:ab:89:32:
                    a1:61:23:32:c8:52:7b:3a:6e:8d:a2:e4:87:92:e3:
                    ee:30:7d:6d:b9:cb:43:ce:65:57:61:70:5a:64:f8:
                    42:a4:16:92:d3:fa:b3:62:10:00:7a:d7:a6:ec:ca:
                    7b:b2:c3:b1:92:88:8a:38:3e:f6:2f:e7:69:cd:92:
                    48:ee:46:0d:5c:4f:e8:8f:25:40:67:ab:4f:37:95:
                    8b:c3:d6:4c:bc:ec:29:af:80:ed:e1:7b:59:90:28:
                    6a:eb:07:a1:b3:25:69:e8:fb:c8:71:49:89:3b:fb:
                    b3:91:9b:c0:aa:8f:f7:0b:41:77:e6:3e:7e:03:de:
                    b7:20:a5:d6:23:ab:4e:15:77:4b:a9:67:80:a1:65:
                    75:ef:82:8b:5a:da:20:fd:7e:74:e6:6d:78:31:0c:
                    d5:02:d2:6a:6f:87:28:22:fd:42:67:f1:55:d0:09:
                    de:ac:90:15:2a:53:93:8b:28:79:bb:04:b3:bc:2f:
                    47:f2:66:63:b9:1d:52:82:72:a5:67:20:67:da:07:
                    75:d6:bf:54:be:17:96:73:aa:c1:4a:c9:10:85:4a:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:3a:ef:b7:6d:cf:bc:30:81:e4:6c:8f:5b:a5:90:5a:a5:
         eb:d2:cd:1f:b8:40:2a:8e:62:62:05:09:c5:db:32:23:53:67:
         be:da:4b:5b:f3:92:d6:ed:3b:74:b2:ba:5b:57:89:25:c7:29:
         14:59:52:08:e4:2b:0e:cb:76:fd:f1:55:01:93:6e:c5:54:e4:
         60:47:8e:b0:84:7a:29:6e:91:23:6b:6f:8f:2f:6d:75:d9:bb:
         61:b5:0c:38:a5:bd:ee:94:8f:c3:5f:9d:0a:a8:93:63:52:bb:
         c2:07:36:3f:d9:55:b5:88:fb:6d:fd:cf:32:fe:e6:33:e4:c6:
         89:40:bc:29:ec:96:41:0e:05:dd:e9:bd:60:f2:6d:85:c5:7f:
         45:3d:c6:55:c2:0c:bd:a8:02:7d:71:e9:d6:08:b5:77:a3:6b:
         37:88:6f:c8:eb:f7:b6:80:86:3d:2e:e9:7f:32:14:50:79:8d:
         dd:61:5e:a3:6d:c4:c0:c6:ea:77:e5:d2:4c:99:7a:2b:e3:91:
         45:03:85:68:cf:bc:08:08:88:09:65:2d:c2:62:88:76:af:11:
         a1:94:49:f0:84:ef:c8:12:81:93:2b:6b:62:2a:46:93:69:79:
         f9:e9:62:c3:e4:d5:5b:95:ca:8f:5d:f3:5b:f8:55:7b:04:79:
         5e:25:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----