This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
File:                     Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer (raw, json)
Hash identifier:          x6KFTCvF4dRZzbYM/5/j0blp6YUg2yj7xuCv27ogaN8=
Subject key identifier:   62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B797EBF6EC9FD602DC05C2EE35B8DFC90
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 12:18:28 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 202516
                          IP: 193.58.164.0/22
                          IP: 2a0c:9540::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 11:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:bf:6e:c9:fd:60:2d:c0:5c:2e:e3:5b:8d:fc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:88:a1:0f:ae:f3:07:29:32:e7:40:4a:e1:9e:
                    42:f8:b3:4d:e7:97:2d:06:1d:8d:55:48:8a:0f:13:
                    80:18:c6:48:88:4a:bb:67:05:a9:6f:c9:9c:8f:54:
                    a6:e4:81:f7:16:03:76:56:37:71:73:c7:b7:c9:67:
                    30:8c:fc:65:25:77:04:4c:5a:0c:6e:f1:d2:78:b4:
                    86:e0:0e:60:31:85:2f:db:a7:8c:71:49:02:89:ca:
                    f4:62:f6:66:5c:dc:49:6e:d2:1e:69:db:17:14:c6:
                    42:4c:de:d8:27:67:a4:1d:b4:02:c9:8d:11:c3:5a:
                    a4:40:59:b6:f8:ca:95:28:f7:84:51:0e:c8:db:05:
                    97:c5:73:0d:f1:ca:d2:83:75:bb:7a:14:34:3a:94:
                    15:2d:b5:a5:9c:f8:9d:07:75:9d:3f:af:2d:aa:59:
                    9d:5c:bf:43:0b:af:18:78:f4:db:08:80:ac:f8:17:
                    d3:a0:9b:24:f4:e4:11:a0:6e:83:6b:ea:15:17:97:
                    03:2d:b2:17:1d:91:03:89:0f:55:4c:fc:98:d7:3d:
                    6b:a8:f1:10:ef:c2:8a:cb:f0:16:3e:11:e7:04:c2:
                    1c:b4:f4:4c:d7:00:34:1f:ce:5c:57:3b:30:6f:11:
                    06:eb:f9:9c:ee:40:29:21:33:ec:cf:26:e6:c6:e5:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.164.0/22
                IPv6:
                  2a0c:9540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202516

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:d5:22:df:39:ef:29:34:35:e9:bc:23:a2:ae:97:a0:3e:
         ed:2b:fc:5c:10:84:ae:fa:30:47:04:33:b1:e5:13:91:e4:26:
         8d:b9:b9:94:db:5e:8f:51:ce:f0:ba:98:7a:5a:8b:9e:ff:01:
         ca:d9:b4:87:f6:94:fb:b5:9d:01:6a:29:e9:dc:db:e9:09:e5:
         0e:f7:c8:07:c1:69:e2:c1:2d:b7:4b:02:b3:b5:40:98:5e:ef:
         f2:4f:69:ae:85:27:92:1e:b3:b1:17:6a:da:ff:ad:fa:c4:20:
         b6:20:00:70:f5:eb:c9:f7:1c:12:b8:b2:1e:c5:fc:d4:3f:66:
         3f:3b:e6:09:68:a0:3c:f3:30:c3:41:aa:20:0e:be:51:81:42:
         00:2b:77:5f:b3:d3:2a:cd:6b:79:31:fc:5c:1b:07:7c:3d:22:
         7d:3f:82:2f:5a:39:84:2f:17:0f:ea:fa:33:1d:42:be:5e:5e:
         4a:d5:96:74:fb:9b:f8:2e:31:55:96:74:a0:91:47:1d:75:e6:
         8a:ea:4f:39:28:36:c6:4e:13:c4:22:44:4d:83:73:25:a0:d0:
         14:c3:43:4f:81:4d:a9:86:77:48:ab:73:66:28:d7:71:c1:54:
         9b:95:5d:09:45:59:00:17:14:c0:87:57:b1:0c:76:97:04:66:
         5b:4c:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----