This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
File:                     aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer (raw, json)
Hash identifier:          RyyVvn/PVbECr1EE3xpTlTTFZVobs3JrYF+d4v7jkmI=
Subject key identifier:   68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7834626A20F84A5BB486042BCCA2EB70
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:17:37 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.107.40.0/22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:62:6a:20:f8:4a:5b:b4:86:04:2b:cc:a2:eb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:c2:ee:25:ec:2c:08:75:09:7b:18:42:d4:
                    53:30:d3:71:53:39:8e:d3:1e:3d:d8:28:26:a7:70:
                    e3:e1:90:b8:ff:95:6a:e6:ac:c8:7b:5b:d4:07:9b:
                    d4:2a:62:9d:af:11:ab:9b:5f:f9:66:a3:3a:b0:5d:
                    21:20:3c:11:40:99:a1:af:38:d0:86:e6:8a:fa:a0:
                    6b:7e:ba:fa:6d:82:66:2a:26:5a:0d:1a:0d:e1:bd:
                    84:59:28:ff:dc:fd:59:21:0a:81:0b:90:f2:00:b7:
                    d2:d0:9f:f5:6c:70:21:19:33:d3:bd:1a:08:18:73:
                    29:f2:3e:44:64:57:db:e9:6a:d1:35:f4:39:41:a1:
                    80:c2:93:9d:17:e8:77:b4:e4:1c:4e:9e:d7:5c:0a:
                    2f:e3:89:b7:3a:e5:c1:da:d7:61:fb:16:6b:05:da:
                    b7:1d:e3:a0:4b:14:d8:14:89:75:6b:7e:97:4d:d8:
                    ec:c6:75:2e:4a:f0:e1:29:e7:f5:72:00:07:f6:c4:
                    d2:e0:62:f4:90:ce:7e:34:e4:e6:15:c6:13:b3:52:
                    bd:91:5c:0e:7f:a3:c4:53:0b:ba:17:8d:13:6d:c1:
                    7d:db:53:35:94:c4:71:06:d9:b5:f3:13:c4:df:f7:
                    1f:c6:14:3b:2e:18:6a:99:53:2c:07:86:c4:b3:4b:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:89:f6:2e:85:51:41:4c:39:fc:bc:ba:a4:b2:52:84:e3:
         44:4e:1a:c4:83:d0:e1:02:28:4d:b4:98:14:93:ba:77:cb:1b:
         4e:22:6d:0b:3a:4f:4d:44:91:38:13:55:1a:0c:64:2f:ff:d0:
         45:10:e5:68:79:71:1c:2c:d1:0a:d3:fe:93:bf:3d:28:43:8d:
         7b:3f:69:c9:c2:bf:87:f4:37:ab:49:85:5b:c9:cc:06:15:02:
         e9:8f:33:c6:a9:f4:16:31:53:63:3a:a6:12:eb:a8:dc:ee:d2:
         91:64:cd:47:24:46:9b:ba:6c:da:96:19:38:79:b5:d7:69:34:
         d3:00:2f:7a:fa:d5:36:b7:b5:f2:f5:92:42:10:03:c8:b6:df:
         25:d2:7e:88:dc:7c:e9:4f:86:58:ff:e0:3c:84:6a:6c:ca:29:
         97:e4:8d:6e:2d:32:d3:b5:76:02:c4:02:c0:05:0a:15:f5:da:
         60:db:d0:70:59:0a:3f:ff:95:57:38:22:4b:e6:a2:0c:5e:68:
         91:d6:54:4e:51:98:08:cc:8e:67:0a:ed:6a:d0:12:0e:be:20:
         12:4d:1b:12:08:7b:68:6e:b4:6c:e2:bb:e6:57:27:fb:e5:82:
         ac:55:88:a7:6f:b4:b2:bf:6c:a9:63:c5:f3:b6:c1:21:a9:ee:
         82:db:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----