This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
File:                     v6yXEHYmO92w7s9b6mV0pAW5hd4.cer (raw, json)
Hash identifier:          ckZTDvU6z7wge2+Xba7CCVtLC4WxitULY6Ya6O2sulE=
Subject key identifier:   BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7AC952F1431F112E32FAC76D3BB2FB98
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 18:19:32 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 80.244.13.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:52:f1:43:1f:11:2e:32:fa:c7:6d:3b:b2:fb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:19:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bfac971076263bddb0eecf5bea6574a405b985de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:34:95:c9:18:1a:61:c4:67:13:a2:aa:e9:
                    f3:67:4e:88:63:53:aa:1f:88:02:00:8f:64:fe:45:
                    32:2a:eb:fb:46:01:35:15:ca:bf:53:81:92:40:ac:
                    b7:26:b9:d4:0b:ce:0c:8f:e9:04:d6:79:8b:63:c5:
                    c3:ba:9f:45:25:dc:97:4f:cf:71:a9:c0:83:5e:ea:
                    e9:b8:c6:c7:2f:38:72:a2:04:dc:e8:00:a3:38:ab:
                    fc:5d:02:5d:8f:48:df:da:83:2f:2a:03:08:de:df:
                    c1:f2:35:90:aa:7b:e0:e9:e3:ff:0b:73:d0:6e:cf:
                    08:6c:fc:8e:40:81:9b:32:0d:f9:e2:2a:64:51:fd:
                    e2:bc:b9:f3:75:12:33:92:73:e0:49:1f:cb:b7:30:
                    50:1c:04:fa:21:dd:b8:36:d4:39:b0:e0:6e:1c:07:
                    7e:f9:2d:a9:90:e4:d5:78:3a:e2:ef:cb:f7:c8:d9:
                    38:e9:d4:00:8e:11:01:07:fb:fa:5e:c7:b3:ed:0e:
                    27:78:7d:c7:6f:0d:d7:53:3d:8f:b9:d5:b5:e0:3f:
                    27:2f:53:17:b6:3b:ad:b1:09:6a:bd:f6:c1:38:d0:
                    33:69:53:8c:c8:2b:d2:41:5a:b6:c3:32:4e:50:d4:
                    6e:eb:29:cb:dd:8c:be:8f:a0:bc:02:6e:74:b0:f6:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:39:82:01:e3:6e:7e:6b:ea:62:9e:42:90:17:4f:71:39:
         af:8e:d2:98:40:71:17:1f:48:73:4b:2b:22:f6:4f:77:dc:85:
         80:a3:47:71:3a:d8:2f:23:1c:3e:cb:ef:e9:15:16:7e:fc:b6:
         75:b7:1c:c9:c4:77:fc:14:27:37:05:2e:fa:cc:4d:06:d4:22:
         7e:99:29:78:32:ad:d1:aa:e5:14:c2:98:74:07:e3:37:6b:4e:
         95:7d:2c:de:ce:64:c2:aa:f0:3e:03:08:6c:39:12:58:f0:15:
         09:6c:83:00:f1:0b:99:8d:77:79:54:e4:94:51:6c:cf:4d:2b:
         a5:e7:5e:85:08:f4:b4:58:dd:59:51:9e:9b:34:80:9c:51:d3:
         d2:ff:22:ae:a2:34:e5:f1:8e:77:39:35:d6:90:f6:98:54:87:
         ce:9f:37:d1:7e:13:38:8a:34:4a:38:74:7f:80:06:39:41:b6:
         f4:78:66:aa:ef:20:36:f8:b9:ea:e4:1e:76:43:ff:99:15:66:
         dd:70:02:8f:13:4f:2f:fa:3d:7b:b3:36:9a:8a:27:54:26:16:
         b9:ae:dc:ad:c2:1d:3c:4b:48:00:88:ae:a3:bd:f5:5d:11:6c:
         7b:3d:7e:56:9c:4c:8e:fb:c5:2e:f2:6b:a4:cb:f8:6b:23:16:
         bf:1e:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----