This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer File: imo0EVg-JhQzSS5QR88xxGw9LB0.cer (raw, json) Hash identifier: j5LDpqQ34eUIa+SvqoGPfb5qISRVpXECUbT6r5ymAog= Subject key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC892C9A7009B3A13D1922FA44D14A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59607 IP: 46.254.77.0/24 IP: 89.42.238.0/23 IP: 91.203.222.0/24 IP: 91.204.163.0/24 IP: 91.240.106.0/23 IP: 91.244.184.0/21 IP: 91.244.208.0/20 IP: 91.247.146.0/24 IP: 176.124.242.0/23 IP: 185.156.32.0/22 IP: 188.208.216.0/23 IP: 193.32.36.0/24 IP: 2a07:99c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:92:c9:a7:00:9b:3a:13:d1:92:2f:a4:4d:14:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:79:75:a7:0f:58:ad:3b:f4:bf:ec:75:c8:63: 78:04:ea:83:9b:d0:c5:be:69:a5:86:9c:0a:13:9b: 5d:47:71:c9:ab:22:18:f8:93:16:85:0e:94:3d:5c: 76:4c:a1:46:86:ad:f0:dc:84:6c:65:5e:c9:94:d6: de:ec:29:18:ae:1a:3e:54:ef:04:39:f5:f7:51:a1: 3d:12:3e:44:51:9b:39:fe:f9:c0:85:4c:d7:6b:2b: bd:11:72:df:1d:34:e9:b4:e0:02:f5:88:a7:c2:3c: 67:7a:e5:06:02:95:78:8d:a8:70:f9:eb:92:2f:a0: ed:e5:f2:18:7e:09:af:89:61:15:b9:89:dd:8a:f3: 92:ed:b2:05:1b:aa:e3:5f:aa:a5:cb:31:a2:d6:60: 98:55:3a:4c:52:ff:db:a2:44:63:47:7d:40:b2:2a: b4:0d:1a:62:a2:6a:83:9a:d3:89:de:d7:4d:e3:06: 2b:05:7a:2c:67:83:51:c7:6f:72:ee:80:5d:67:06: 0f:3a:28:e9:1b:62:84:53:91:df:69:62:34:9b:3f: 1d:a6:b3:20:86:a1:44:c8:30:4b:b4:4f:2c:a4:95: 2f:a6:d3:83:5d:29:f4:84:cb:c2:f0:74:df:df:c2: 69:21:d8:d9:a8:7e:c7:7b:10:7e:c3:25:28:e5:7c: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.77.0/24 89.42.238.0/23 91.203.222.0/24 91.204.163.0/24 91.240.106.0/23 91.244.184.0/21 91.244.208.0/20 91.247.146.0/24 176.124.242.0/23 185.156.32.0/22 188.208.216.0/23 193.32.36.0/24 IPv6: 2a07:99c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59607 Signature Algorithm: sha256WithRSAEncryption 4a:a8:3d:51:49:a0:e8:b0:20:98:b3:f3:e4:18:68:4c:ba:b9: ad:35:36:ca:a0:f7:dd:da:91:51:15:6b:9c:e6:32:f7:b9:86: e6:94:f6:36:64:a4:f7:61:9f:98:40:28:6d:ef:f8:13:2b:f1: f1:65:90:19:20:56:a8:61:4e:46:9b:a1:48:f9:8f:7d:35:52: 4a:0e:25:4d:b7:89:c6:86:64:59:17:5c:54:d3:8d:70:23:18: 5c:47:c9:10:6f:84:a1:ee:72:f8:49:4a:b1:f1:18:57:80:fd: 76:f2:6b:f5:dd:02:03:6c:0e:5d:b4:e1:c7:95:15:c4:e6:dd: d9:f2:16:d5:89:6b:02:08:c1:c5:9c:ce:e9:0a:0f:22:71:a1: ad:a6:c1:10:b9:33:dc:f6:e0:fe:97:25:40:00:cc:e4:95:c3: 51:ea:f3:40:97:07:1d:18:ed:c9:89:12:49:1b:de:aa:c2:7d: 79:5d:8e:6f:6b:09:cb:05:71:4a:66:ee:06:7a:c2:6c:64:b8: 91:4e:f1:92:20:fa:2c:97:bb:62:dc:b2:7e:f7:ad:b4:56:c0: 4e:2c:16:7b:bb:bc:69:88:70:48:ce:f4:fa:dd:bb:7f:d3:e7: 94:d0:36:13:4c:34:3b:2c:0d:69:c2:5c:35:f7:d8:bf:c2:c7: 62:fd:95:7f -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZt6yJLJpwCbOhPRki+kTRSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTZhMzQxMTU4M2UyNjE0MzM0OTJlNTA0N2NmMzFjNDZjM2QyYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHl1pw9YrTv0v+x1yGN4BOqDm9DF vmmlhpwKE5tdR3HJqyIY+JMWhQ6UPVx2TKFGhq3w3IRsZV7JlNbe7CkYrho+VO8E OfX3UaE9Ej5EUZs5/vnAhUzXayu9EXLfHTTptOAC9YinwjxneuUGApV4jahw+euS L6Dt5fIYfgmviWEVuYndivOS7bIFG6rjX6qlyzGi1mCYVTpMUv/bokRjR31Asiq0 DRpiomqDmtOJ3tdN4wYrBXosZ4NRx29y7oBdZwYPOijpG2KEU5HfaWI0mz8dprMg hqFEyDBLtE8spJUvptODXSn0hMvC8HTf38JpIdjZqH7HexB+wyUo5XzYFQIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFIpqNBFYPiYUM0kuUEfPMcRsPSwdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzI4Mjk3 NC0zN2ZiLTRkODUtOTJiZi03MDk4YTdhNTJjN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMjgyOTc0 LTM3ZmItNGQ4NS05MmJmLTcwOThhN2E1MmM3ZS8xL2ltbzBFVmctSmhRelNTNVFS ODh4eEd3OUxCMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF BwEHAQH/BGEwXzBOBAIAATBIAwQALv5NAwQBWSruAwQAW8veAwQAW8yjAwQBW/Bq AwQDW/S4AwQEW/TQAwQAW/eSAwQBsHzyAwQCuZwgAwQBvNDYAwQAwSAkMA0EAgAC MAcDBQMqB5nAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDo1zANBgkqhkiG9w0B AQsFAAOCAQEASqg9UUmg6LAgmLPz5BhoTLq5rTU2yqD33dqRURVrnOYy97mG5pT2 NmSk92GfmEAobe/4Eyvx8WWQGSBWqGFORpuhSPmPfTVSSg4lTbeJxoZkWRdcVNON cCMYXEfJEG+Eoe5y+ElKsfEYV4D9dvJr9d0CA2wOXbThx5UVxObd2fIW1YlrAgjB xZzO6QoPInGhrabBELkz3Pbg/pclQADM5JXDUerzQJcHHRjtyYkSSRveqsJ9eV2O b2sJywVxSmbuBnrCbGS4kU7xkiD6LJe7YtyyfvettFbATiwWe7u8aYhwSM70+t27 f9PnlNA2E0w0OywNacJcNffYv8LHYv2Vfw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:26 2026 by rpki-client