This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer File: idpg8EnfujS-S06EGLn_SSElxEk.cer (raw, json) Hash identifier: EVBmyz1JKWkUkn+ajgaz0Kqa4DGL5igmr1EClrNYNbo= Subject key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB4CD7DF6F7336A7D8D8F5F61F3543 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15802 AS: 57187 IP: 5.30.0.0 -- 5.32.127.255 IP: 80.227.0.0/16 IP: 87.200.0.0/15 IP: 91.72.0.0/14 IP: 94.200.0.0/13 IP: 213.132.32.0/19 IP: 2a00:f28::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4c:d7:df:6f:73:36:a7:d8:d8:f5:f6:1f:35:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89da60f049dfba34be4b4e8418b9ff492125c449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:b7:2a:4c:6f:d6:19:bd:f1:db:75:00:03: a8:60:bb:64:0f:e0:59:50:fe:b7:27:4a:94:3d:bb: fb:94:6e:21:d0:7d:81:64:97:8c:6a:4e:55:b1:56: 7c:07:a3:d9:77:3a:87:1e:71:92:44:c8:eb:a5:f1: 04:67:b5:1e:9b:e9:7f:fb:51:03:51:46:53:72:20: e6:4c:7e:ab:03:6f:e6:d7:07:75:87:e1:81:6d:20: 3c:0a:9b:e1:e6:62:27:92:df:45:04:9a:55:f8:e1: 8e:db:11:b8:20:a8:37:71:1f:7e:12:fe:a7:17:b5: d8:35:3c:2d:10:2d:d9:05:77:d3:fa:8c:7d:56:23: 44:86:ab:39:71:35:50:cf:a2:ef:b0:ca:69:67:c1: bd:fb:6e:6c:41:f9:c2:d1:f3:5f:13:5a:1a:b1:2d: b8:90:84:40:7a:59:15:89:d5:6e:ab:b7:32:c7:63: 88:39:bd:34:31:a3:f0:3b:b5:64:aa:96:2b:e0:97: 9b:66:c7:d6:aa:3a:78:09:4c:d2:36:db:39:77:80: c4:d1:63:3f:5e:96:93:bf:ee:e3:a6:27:41:07:8f: c7:cd:d4:93:8d:4d:77:2d:8d:7c:36:1e:5f:6c:aa: 7e:4d:fb:c7:92:e3:5f:a1:23:80:54:6f:79:2a:2f: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.30.0.0-5.32.127.255 80.227.0.0/16 87.200.0.0/15 91.72.0.0/14 94.200.0.0/13 213.132.32.0/19 IPv6: 2a00:f28::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15802 57187 Signature Algorithm: sha256WithRSAEncryption 06:b7:8b:3f:81:e0:78:36:7c:b1:78:d9:f4:e3:e7:7f:a4:7a: 1c:42:2e:0e:9d:c4:ea:9e:2f:46:15:d2:b1:a9:ed:9d:b2:14: bb:83:33:94:9d:cf:d4:58:97:8d:72:e5:33:dd:dd:f8:76:22: 95:2e:ea:a0:dd:50:be:2b:ab:48:74:01:20:3c:89:36:ec:a2: df:bc:79:04:89:9b:4f:e6:f4:a5:37:5f:e0:7e:b1:d7:92:1e: 5d:09:48:7b:8a:90:f2:88:24:25:6f:0d:45:d5:2e:92:a8:fc: da:18:58:f1:d7:42:72:0b:d9:a4:4f:64:9d:f0:4c:fc:bc:9c: 1a:42:c3:d5:b7:06:48:9e:ad:99:f1:ef:0c:1a:6f:df:2c:01: d3:42:e0:71:f0:07:e1:31:52:e0:5b:e7:ec:22:8c:ff:3c:ad: 46:75:e6:bb:3e:ea:66:b8:35:a8:0a:e1:48:89:7d:4f:46:23: ab:da:b9:4e:48:05:2f:7f:49:da:8e:e9:6c:0a:7a:b2:2a:65: cd:b9:7c:8e:c7:9d:28:d8:07:37:99:51:ef:2a:1a:91:c0:b0: d6:25:ea:ca:7c:0a:6f:96:a7:4f:93:a4:ca:41:90:ae:08:44: ac:55:2d:17:07:2e:df:3c:61:03:6f:53:64:ad:13:51:0d:5a: 77:b1:98:e3 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt9y0zX329zNqfY2PX2HzVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWRhNjBmMDQ5ZGZiYTM0YmU0YjRlODQxOGI5ZmY0OTIxMjVjNDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYS3Kkxv1hm98dt1AAOoYLtkD+BZ UP63J0qUPbv7lG4h0H2BZJeMak5VsVZ8B6PZdzqHHnGSRMjrpfEEZ7Uem+l/+1ED UUZTciDmTH6rA2/m1wd1h+GBbSA8Cpvh5mInkt9FBJpV+OGO2xG4IKg3cR9+Ev6n F7XYNTwtEC3ZBXfT+ox9ViNEhqs5cTVQz6LvsMppZ8G9+25sQfnC0fNfE1oasS24 kIRAelkVidVuq7cyx2OIOb00MaPwO7VkqpYr4JebZsfWqjp4CUzSNts5d4DE0WM/ XpaTv+7jpidBB4/HzdSTjU13LY18Nh5fbKp+TfvHkuNfoSOAVG95Ki8PEQIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFInaYPBJ37o0vktOhBi5/0khJcRJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2RlNDc3 Zi0wNzg1LTQwMjYtODNiZS02OTg5MGM4MjllMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvZGU0Nzdm LTA3ODUtNDAyNi04M2JlLTY5ODkwYzgyOWUzMy8xL2lkcGc4RW5mdWpTLVMwNkVH TG5fU1NFbHhFay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjAtBAIAATAnMAsDAwEFHgMEBwUgAAMDAFDjAwMBV8gDAwJbSAMD A17IAwQF1YQgMA0EAgACMAcDBQMqAA8oMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkC Aj26AgMA32MwDQYJKoZIhvcNAQELBQADggEBAAa3iz+B4Hg2fLF42fTj53+kehxC Lg6dxOqeL0YV0rGp7Z2yFLuDM5Sdz9RYl41y5TPd3fh2IpUu6qDdUL4rq0h0ASA8 iTbsot+8eQSJm0/m9KU3X+B+sdeSHl0JSHuKkPKIJCVvDUXVLpKo/NoYWPHXQnIL 2aRPZJ3wTPy8nBpCw9W3BkierZnx7wwab98sAdNC4HHwB+ExUuBb5+wijP88rUZ1 5rs+6ma4NagK4UiJfU9GI6vauU5IBS9/SdqO6WwKerIqZc25fI7HnSjYBzeZUe8q GpHAsNYl6sp8Cm+Wp0+TpMpBkK4IRKxVLRcHLt88YQNvU2StE1ENWnexmOM= -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:28 2026 by rpki-client