This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
File:                     qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer (raw, json)
Hash identifier:          FzF+ZHLJdui5foaOkPww5LGu5f+bp9u8OEsO0REzoIM=
Subject key identifier:   A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B2C3C91B691125FD745363E2865B9C8D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 17 Dec 2025 12:15:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206790
                          IP: 193.223.254.0/23
                          IP: 2001:678:e04::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:3c:91:b6:91:12:5f:d7:45:36:3e:28:65:b9:c8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 17 12:15:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:67:0b:24:12:c9:d3:32:84:74:9c:11:45:
                    af:ec:83:f8:91:e3:95:1e:fe:dd:6c:81:ad:8f:c8:
                    2a:cc:88:97:bc:3c:45:16:33:cb:1c:af:9e:f5:c3:
                    0c:e7:25:d6:dc:12:a6:42:84:58:50:e4:c2:2f:b0:
                    7a:34:10:fb:00:4b:7e:41:24:13:57:75:ac:92:0c:
                    c0:60:4d:d8:18:ee:5a:3d:f9:87:44:99:8d:21:49:
                    27:7f:29:4f:77:e7:25:37:7f:aa:08:78:a5:de:e6:
                    a0:3c:57:e7:77:5b:0a:88:b5:40:4c:73:3f:6f:9e:
                    21:e4:18:56:81:88:d5:0b:e8:93:ab:88:2a:8a:10:
                    7b:f8:6a:7f:ca:01:08:52:9e:b6:53:f5:5c:9b:6e:
                    25:22:3a:79:b5:cf:77:34:f0:c4:c9:5a:cc:dc:0d:
                    ae:b4:0d:b5:0f:c7:c9:1c:5b:e5:42:02:e8:10:15:
                    4d:a6:58:28:f5:89:f5:db:70:3c:ad:e0:3f:82:6b:
                    a3:c3:07:9a:79:a8:84:23:e2:83:e9:db:fc:9d:5e:
                    ea:a4:36:58:c8:6a:24:92:24:17:16:00:8b:32:b1:
                    ec:c6:72:f3:a6:ae:c6:da:42:19:3f:3c:7c:b4:e3:
                    a3:2f:67:7b:0e:ef:ed:1a:18:1e:9a:a7:70:9a:f9:
                    3c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.223.254.0/23
                IPv6:
                  2001:678:e04::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206790

    Signature Algorithm: sha256WithRSAEncryption
         0f:90:b9:e1:13:8a:a2:ea:67:d6:1d:ef:a9:dc:60:f0:c0:35:
         e3:5c:c3:9f:52:6a:38:dd:f8:66:dd:cd:31:89:c5:e6:88:4d:
         15:36:4b:a8:a5:03:da:9c:9d:a8:bc:5b:3a:85:24:06:2d:7e:
         7b:c3:5e:77:9e:e6:97:16:18:59:3e:0d:9d:ab:a1:24:f4:8d:
         8a:b4:99:24:ec:c8:1e:5e:a0:fc:c6:df:ae:79:57:c5:70:db:
         73:ba:c0:25:ca:57:5e:72:49:3d:f4:02:ba:a9:27:4c:d9:5c:
         e7:6d:77:c3:7d:c9:67:61:47:f2:29:9f:dc:0a:6b:05:04:e8:
         9e:9f:65:cd:6f:aa:56:ee:b2:89:82:2d:9c:88:4f:95:a4:14:
         0e:cc:9e:9e:c3:6f:aa:87:29:30:07:59:ff:9b:69:c9:30:05:
         cd:07:7d:09:18:4a:62:a8:cc:19:7b:ff:09:82:35:9f:b5:f3:
         de:49:3f:39:d9:46:ea:bc:6e:29:44:18:b2:13:d4:d2:5b:8d:
         f9:c1:0b:b1:6f:5e:89:fe:30:b9:93:25:30:d7:80:56:58:26:
         69:5b:ba:9f:76:82:de:8d:77:ca:eb:70:eb:a4:fc:38:5d:22:
         4c:76:0c:d3:7a:0b:40:d6:67:c8:f1:41:4e:c8:5d:19:73:3e:
         fa:cf:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----