This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer File: idvHFWpO58Z9nmhHZ6L0uvijW6s.cer (raw, json) Hash identifier: lejyoUh8CqrhVTdwhrrzpj6AMjOGD9fz67V1N0ga0Wc= Subject key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F534DF51A37AF7EA5ECA212C7B63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208059 IP: 46.149.109.0/24 IP: 2a10:200::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f5:34:df:51:a3:7a:f7:ea:5e:ca:21:2c:7b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:f2:83:24:34:96:97:3d:7a:2d:31:62:86: 04:6b:be:4e:87:51:49:f5:9c:d7:65:0a:e4:f0:81: 18:01:73:fd:7a:7d:3b:1b:5d:9a:05:3a:f4:9e:d0: 5a:f3:0d:3e:a2:a7:9d:e8:b9:36:1c:53:c5:ae:a6: e5:90:ae:79:ce:5e:ec:86:ab:a0:0d:b2:29:eb:9f: f7:1a:9c:41:7e:12:05:a8:47:48:eb:ef:2b:a0:17: 9b:69:de:82:ae:e7:7b:44:54:6b:81:af:68:2f:b0: 1c:8f:0c:1e:06:4a:13:4c:de:c4:ca:5a:f2:5d:5b: cc:72:c0:15:7d:0f:af:13:43:3e:67:79:51:35:d6: 59:37:fa:86:b0:9c:9e:5a:17:d9:24:38:f7:10:01: a0:fc:95:18:f8:47:a8:3c:9e:e0:ae:89:05:f2:13: 83:1c:2c:12:a2:34:4b:4b:8a:62:7f:5b:1a:f9:f8: e7:b8:51:bb:4a:4b:a8:37:c6:54:fe:d7:be:1c:ac: 0e:27:36:83:0e:33:97:1e:54:12:0e:e9:49:1f:bb: e6:b5:5c:0d:55:87:25:64:a8:e2:96:44:b6:25:3f: 74:6f:3e:b4:dd:7c:32:72:86:74:97:6b:b3:ce:a8: af:2a:40:1c:38:9d:9a:6e:ee:4b:48:4b:76:f3:76: c7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.109.0/24 IPv6: 2a10:200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208059 Signature Algorithm: sha256WithRSAEncryption 14:82:47:0c:41:06:e5:05:aa:98:59:2d:91:a2:22:03:e9:dc: ab:95:73:33:25:46:f7:d3:ec:51:41:d9:73:b0:e9:4d:ef:a3: c7:ad:16:35:d1:91:91:74:1e:b2:ac:97:6a:6d:b7:e2:df:b4: cd:c7:77:55:7a:83:45:0e:9d:01:7a:08:a0:af:20:10:a1:67: 13:c0:f4:93:d2:d8:47:fc:84:95:32:5c:2b:63:36:b7:9f:60: 2d:ab:e7:99:c2:1b:34:c4:37:80:26:1f:16:c7:78:5c:6e:fc: 95:3f:c2:31:63:e0:ba:26:01:65:7b:8d:e0:51:86:65:ec:bf: 7f:58:68:40:1b:a2:63:9c:31:c4:12:a1:93:ef:dc:5d:6c:ee: 93:7f:37:70:35:b0:8d:0d:36:23:89:1a:b4:8a:56:81:c9:6e: 9c:69:86:da:b9:ba:b8:b7:f6:b0:e4:54:2a:a6:43:1b:bf:b9: 43:c8:2d:d8:82:34:6b:1e:30:b8:24:17:d3:9c:06:f9:56:98: 22:35:ec:37:bc:f5:db:26:6b:d3:30:23:f9:bc:60:c4:fb:c6: 97:4a:8c:93:b5:e2:50:d6:17:00:01:e4:7a:44:3f:2a:b5:fe: 81:d7:d1:39:62:22:ef:00:4a:e8:2d:37:4f:9f:71:86:25:78: 12:3e:b6:5f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NPU031GjevfqXsohLHtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWRiYzcxNTZhNGVlN2M2N2Q5ZTY4NDc2N2EyZjRiYWY4YTM1YmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGTygyQ0lpc9ei0xYoYEa75Oh1FJ 9ZzXZQrk8IEYAXP9en07G12aBTr0ntBa8w0+oqed6Lk2HFPFrqblkK55zl7shqug DbIp65/3GpxBfhIFqEdI6+8roBebad6Crud7RFRrga9oL7AcjwweBkoTTN7Eylry XVvMcsAVfQ+vE0M+Z3lRNdZZN/qGsJyeWhfZJDj3EAGg/JUY+EeoPJ7grokF8hOD HCwSojRLS4pif1sa+fjnuFG7SkuoN8ZU/te+HKwOJzaDDjOXHlQSDulJH7vmtVwN VYclZKjilkS2JT90bz603XwycoZ0l2uzzqivKkAcOJ2abu5LSEt283bHUwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFInbxxVqTufGfZ5oR2ei9Lr4o1urMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzVhOWE5 OS00M2MyLTRjYzgtYTM3Yi00OTUwMWE3Njk0YzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvNWE5YTk5 LTQzYzItNGNjOC1hMzdiLTQ5NTAxYTc2OTRjNC8xL2lkdkhGV3BPNThaOW5taEha NkwwdXZpalc2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALpVtMA0EAgACMAcDBQAqEAIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMsuzANBgkqhkiG9w0BAQsFAAOCAQEAFIJHDEEG5QWq mFktkaIiA+ncq5VzMyVG99PsUUHZc7DpTe+jx60WNdGRkXQesqyXam234t+0zcd3 VXqDRQ6dAXoIoK8gEKFnE8D0k9LYR/yElTJcK2M2t59gLavnmcIbNMQ3gCYfFsd4 XG78lT/CMWPguiYBZXuN4FGGZey/f1hoQBuiY5wxxBKhk+/cXWzuk383cDWwjQ02 I4katIpWgclunGmG2rm6uLf2sORUKqZDG7+5Q8gt2II0ax4wuCQX05wG+VaYIjXs N7z12yZr0zAj+bxgxPvGl0qMk7XiUNYXAAHkekQ/KrX+gdfROWIi7wBK6C03T59x hiV4Ej62Xw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:38 2026 by rpki-client