This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer File: imBgNTuY9TMW0CL6AdKZ11__ItY.cer (raw, json) Hash identifier: 1jJSlZXCyGP8aeOs3GcpqZNKYDlvyE/9tEee51rOkUg= Subject key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C757A0324C025C5450DF21E7E5D596 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58245 IP: 194.33.109.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:57:a0:32:4c:02:5c:54:50:df:21:e7:e5:d5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a6060353b98f53316d022fa01d299d75fff22d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:89:06:bd:7b:4a:de:79:2f:6e:1d:e3:02: 6e:a8:8a:d3:3f:a7:b2:ea:a5:68:b5:84:8f:ca:28: 2f:d5:62:b0:39:09:27:31:41:69:42:b4:90:2a:f2: e0:46:5e:1f:4e:6b:6f:b1:4b:aa:ad:07:8e:47:38: e3:71:72:07:ad:b6:1b:b1:8b:05:d3:fa:7a:df:95: 61:bf:e7:3b:44:c5:f5:72:22:dd:f7:10:dd:17:d1: b4:9e:47:61:67:ec:8e:41:fd:09:ab:51:7f:56:3b: 32:21:69:28:26:03:3a:74:8d:f6:03:f9:01:76:c7: 8b:ab:10:f4:76:3d:24:f6:d2:5f:d1:d2:38:8c:db: 3e:4b:6a:45:fc:3a:99:61:2d:14:f2:d2:2b:3d:6e: b8:2a:25:34:48:36:4c:e5:c1:58:3b:86:14:50:1d: 2b:eb:22:89:62:a3:a6:9b:ec:ad:d1:63:b4:00:cd: ac:66:15:95:51:12:12:83:85:c2:ec:56:53:88:7a: 44:8f:80:a0:e7:cc:d4:a4:4b:87:ca:8a:7a:24:0e: 5c:1e:5c:95:d9:78:f9:e1:fa:af:af:1b:73:88:90: 89:e3:d8:93:c3:6b:ff:8f:12:89:09:0a:60:11:c3: f4:f7:70:b1:43:ea:19:e2:3f:bd:c9:1a:16:2f:d0: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.109.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58245 Signature Algorithm: sha256WithRSAEncryption 67:47:f6:3c:38:53:d8:bb:fe:be:a1:7d:ea:c1:24:6d:a1:3e: 41:69:4c:8f:e4:f7:e5:ea:46:af:77:37:3f:b0:68:62:6f:cc: 36:ed:4a:05:cd:cc:86:8d:40:af:5e:29:44:9d:e4:d8:94:d5: 95:5a:ec:ce:0e:4b:c4:38:d6:de:9b:ca:a3:3b:2e:ca:9f:5e: 93:ca:14:c8:2e:8b:6a:8d:ee:dd:6d:08:08:8c:0a:5c:71:a2: 0b:25:c7:7b:67:dd:a6:44:ef:40:1a:83:f6:a5:fd:ba:5b:1c: a1:46:6f:0d:87:95:a6:33:13:7a:56:79:1c:26:ec:d6:d6:e5: 18:a0:55:98:5f:d3:63:d0:0a:7c:4a:cf:c5:79:d6:67:2c:f4: 01:e5:cf:c5:0c:f8:46:62:86:83:61:a2:d6:fb:ef:20:4d:7e: 43:91:b7:a6:5b:9a:12:e6:a1:72:43:d0:d7:8a:3b:52:33:27: dd:d2:ed:d8:e6:08:d3:50:e9:52:41:f6:1f:a9:01:2b:24:12: 2b:2b:c5:c2:c3:6a:a0:68:2d:b0:5e:d7:85:ed:13:15:7d:6d: dd:bd:01:42:8f:5a:35:d6:51:02:c1:93:00:c9:a5:ca:ef:b9: d7:1f:6c:03:7c:9f:3b:0d:35:f5:e2:c2:d4:9d:a1:31:aa:05: a1:c2:85:ec -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3x1egMkwCXFRQ3yHn5dWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTYwNjAzNTNiOThmNTMzMTZkMDIyZmEwMWQyOTlkNzVmZmYyMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYOJBr17St55L24d4wJuqIrTP6ey 6qVotYSPyigv1WKwOQknMUFpQrSQKvLgRl4fTmtvsUuqrQeORzjjcXIHrbYbsYsF 0/p635Vhv+c7RMX1ciLd9xDdF9G0nkdhZ+yOQf0Jq1F/VjsyIWkoJgM6dI32A/kB dseLqxD0dj0k9tJf0dI4jNs+S2pF/DqZYS0U8tIrPW64KiU0SDZM5cFYO4YUUB0r 6yKJYqOmm+yt0WO0AM2sZhWVURISg4XC7FZTiHpEj4Cg58zUpEuHyop6JA5cHlyV 2Xj54fqvrxtziJCJ49iTw2v/jxKJCQpgEcP093CxQ+oZ4j+9yRoWL9CA8QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIpgYDU7mPUzFtAi+gHSmddf/yLWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5Lzk2OWRj Mi1mYTU2LTQ1YjYtYTNkZS01MmVlNDM2NDJlMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvOTY5ZGMy LWZhNTYtNDViNi1hM2RlLTUyZWU0MzY0MmUxMC8xL2ltQmdOVHVZOVRNVzBDTDZB ZEtaMTFfX0l0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwiFtMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDjhTANBgkqhkiG9w0BAQsFAAOCAQEAZ0f2PDhT2Lv+vqF96sEkbaE+QWlMj+T3 5epGr3c3P7BoYm/MNu1KBc3Mho1Ar14pRJ3k2JTVlVrszg5LxDjW3pvKozsuyp9e k8oUyC6Lao3u3W0ICIwKXHGiCyXHe2fdpkTvQBqD9qX9ulscoUZvDYeVpjMTelZ5 HCbs1tblGKBVmF/TY9AKfErPxXnWZyz0AeXPxQz4RmKGg2Gi1vvvIE1+Q5G3plua EuahckPQ14o7UjMn3dLt2OYI01DpUkH2H6kBKyQSKyvFwsNqoGgtsF7Xhe0TFX1t 3b0BQo9aNdZRAsGTAMmlyu+51x9sA3yfOw019eLC1J2hMaoFocKF7A== -----END CERTIFICATE-----Generated at Sun Jan 18 16:41:09 2026 by rpki-client