This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
File:                     iuE5rwiZ9da1syWBNz7aMDfqMMA.cer (raw, json)
Hash identifier:          CdnuEZKDVHK1YMTDNAB8iQpaxjxzrma934elbW6lZ6A=
Subject key identifier:   8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5B9EF814699C6318A318FD1E18F299
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:19:43 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.105.19.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:9e:f8:14:69:9c:63:18:a3:18:fd:1e:18:f2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:19:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:47:50:fb:4b:12:de:8a:6f:b9:07:f6:ca:
                    8e:90:42:8a:07:7f:02:83:bd:a0:7e:9d:2b:b7:4b:
                    6b:28:c4:5b:4c:e2:39:d7:94:e6:da:ae:f9:62:b6:
                    55:01:25:30:bc:24:93:6b:0b:b0:db:4c:cc:e1:1d:
                    ec:a8:5d:92:2d:b6:48:6e:7c:60:f5:98:e9:d3:c1:
                    8e:99:34:a2:df:a2:dc:71:41:19:a4:af:bc:e9:42:
                    87:29:b0:dc:79:81:f4:91:1c:18:a1:d8:a2:18:46:
                    01:ce:c1:f4:2a:56:94:56:60:c5:60:53:28:a1:64:
                    24:8f:94:61:b5:96:b2:dc:d1:a6:de:bd:ce:ad:eb:
                    88:8d:05:a2:f5:64:61:2a:5d:ce:7a:57:bb:ac:aa:
                    d8:81:82:b5:5d:1b:b5:5f:e1:52:53:84:c8:99:d9:
                    dc:bb:85:d2:b9:b5:0f:b5:ff:77:34:3d:5a:7a:e2:
                    a3:67:bc:a6:94:1b:5d:0c:c3:43:84:5f:0b:92:85:
                    99:c5:6a:b6:2d:39:75:5b:a5:ee:a9:8e:e0:a2:34:
                    d4:c3:c9:7f:31:3f:d8:5d:f6:94:ee:bd:22:89:30:
                    50:e2:aa:38:68:2c:ba:68:c4:e3:14:88:58:94:75:
                    63:6b:ae:09:07:f2:a2:ec:ac:d2:b0:4b:81:28:d2:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.105.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:10:7c:b5:c9:23:05:1c:f2:17:76:0c:77:fb:2d:37:88:
         80:03:15:cf:0c:dc:3f:0b:79:e4:25:8f:a3:f8:c5:3e:91:74:
         ca:6d:3d:59:b6:0a:a5:53:8a:35:b3:1a:32:8e:8a:20:73:13:
         01:8e:ba:20:19:23:b8:01:dc:e5:35:1d:44:79:48:07:25:32:
         be:b3:eb:bf:6c:04:0a:2f:9e:11:8d:f6:92:16:6b:46:05:5d:
         68:b2:5c:fe:45:53:96:6e:31:c5:aa:fc:2f:97:8d:bc:54:1f:
         ea:af:6c:3d:54:96:eb:c3:36:c0:29:a9:d1:ea:77:1f:5f:63:
         cb:d4:e1:49:22:8a:5c:22:fe:a9:ee:05:73:b1:43:26:0f:ab:
         ca:57:b5:1c:4c:b8:ea:a8:b5:13:f6:0d:ed:a3:22:63:12:a0:
         7c:33:87:f9:f5:05:20:da:23:e4:21:1c:6f:2e:69:4a:b8:8d:
         de:b8:58:71:61:07:1b:f6:7f:c0:3a:fe:4d:e5:c9:4c:e3:64:
         fb:3c:e0:2a:b4:a8:00:16:48:b0:4c:0a:17:36:e0:75:c0:d5:
         f4:14:c8:56:86:de:60:60:3f:ac:5f:08:5e:97:b6:5b:18:78:
         a6:29:ec:f5:a4:57:cf:10:4a:5b:56:ce:2d:dc:e2:f6:51:71:
         b8:fd:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----