This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer File: immKFPthpoevCmP3xlXAAfZwEoI.cer (raw, json) Hash identifier: 0ex5VUvRzvZbH/+0arQPD0oMOhKbLzbScmlE/8yA7n4= Subject key identifier: 8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8263618706233CD6636C7D6EB04F6D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34730 IP: 195.238.245.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:63:61:87:06:23:3c:d6:63:6c:7d:6e:b0:4f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a698a14fb61a687af0a63f7c655c001f6701282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:f0:d7:4d:e7:66:d9:6c:37:2c:58:6b:8e: 63:0a:75:e6:ef:08:c3:7a:a7:3a:50:58:87:3c:36: 19:d5:44:f4:40:b0:a1:ce:27:f3:64:61:fb:9f:6f: 78:84:da:f7:ae:2c:06:96:77:8f:e9:8e:2e:ca:4c: 9c:fb:72:e2:1f:cf:67:9c:7c:e5:7f:bc:d3:39:d3: ad:b3:c2:92:5e:11:99:a2:02:c5:38:de:e8:86:87: 27:20:a1:76:16:43:20:88:d4:a9:f9:d4:c9:2a:74: c7:e6:51:46:6c:1c:5d:f3:5a:54:7f:84:76:ce:a0: 3a:a6:0d:77:62:fa:6d:a7:72:13:8c:11:90:f7:31: ae:34:50:e8:51:8e:90:87:b0:3d:59:fb:f8:48:d7: cb:9a:dd:6d:e9:1b:59:4a:1f:e3:cd:69:78:4d:f9: 7b:6b:62:c7:1c:00:96:38:d6:0c:60:19:d1:90:f9: 7b:4f:9a:d6:21:11:be:03:42:00:12:41:33:e8:53: e3:c4:ce:11:45:8c:e2:b5:da:df:25:28:10:ae:25: 51:64:d7:96:fa:06:b9:25:99:22:04:83:f5:8f:e9: 58:9b:86:21:6a:3c:e8:c9:37:5c:1e:c9:27:86:64: 2c:6f:25:00:9d:47:42:85:3e:b3:ef:35:5f:e4:31: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.238.245.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34730 Signature Algorithm: sha256WithRSAEncryption 0f:7d:0f:7c:c8:84:9e:dc:a2:f3:d0:cc:83:b6:60:64:53:31: b8:c3:b5:78:76:74:45:1f:64:e0:67:ad:d6:b6:6a:87:34:8a: 4c:08:ea:13:34:d4:f3:e1:81:24:a7:66:c4:bf:bb:ec:a0:2d: 32:91:18:e0:72:94:2b:b8:fb:7e:03:62:73:8b:98:9e:8c:4d: 1b:a8:f9:cd:36:79:04:3d:de:29:88:98:9b:0a:81:a2:1d:c8: 89:5d:82:3d:d4:4d:4e:55:52:e8:3e:05:c2:b4:bd:5c:d2:4a: 6a:fe:fd:99:e0:b4:61:3c:9b:eb:2d:05:c3:26:88:0f:1c:e5: cc:57:f9:b9:29:ca:4e:d5:11:f6:e0:74:36:d6:6d:0f:d4:90: 09:30:19:3a:dd:b2:1f:2b:65:27:27:a6:13:39:d1:f9:ae:80: 74:a8:21:dc:db:e0:54:ee:e1:fc:e1:23:4b:85:ff:e1:58:8c: 7a:22:f3:71:67:5a:12:1f:62:f8:79:90:7b:80:50:fe:a9:90: a3:b5:59:19:1f:75:0a:9b:db:ec:6c:9b:fe:56:d1:fa:75:6b: b8:31:e7:57:21:34:dc:92:44:55:f7:d7:bd:f0:d1:27:5b:63: 35:45:96:bc:91:85:29:a8:8e:53:32:5c:fa:b1:cf:ac:a4:ce: 80:e9:1f:8d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gmNhhwYjPNZjbH1usE9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTY5OGExNGZiNjFhNjg3YWYwYTYzZjdjNjU1YzAwMWY2NzAxMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymDw103nZtlsNyxYa45jCnXm7wjD eqc6UFiHPDYZ1UT0QLChzifzZGH7n294hNr3riwGlneP6Y4uykyc+3LiH89nnHzl f7zTOdOts8KSXhGZogLFON7ohocnIKF2FkMgiNSp+dTJKnTH5lFGbBxd81pUf4R2 zqA6pg13Yvptp3ITjBGQ9zGuNFDoUY6Qh7A9Wfv4SNfLmt1t6RtZSh/jzWl4Tfl7 a2LHHACWONYMYBnRkPl7T5rWIRG+A0IAEkEz6FPjxM4RRYzitdrfJSgQriVRZNeW +ga5JZkiBIP1j+lYm4YhajzoyTdcHsknhmQsbyUAnUdChT6z7zVf5DGsmQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIppihT7YaaHrwpj98ZVwAH2cBKCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzMzZDIy Ni03YzQzLTRjODMtOTRhZC0yMTgyODlkODFjNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvMzNkMjI2 LTdjNDMtNGM4My05NGFkLTIxODI4OWQ4MWM1My8xL2ltbUtGUHRocG9ldkNtUDN4 bFhBQWZad0VvSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw+71MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCHqjANBgkqhkiG9w0BAQsFAAOCAQEAD30PfMiEntyi89DMg7ZgZFMxuMO1eHZ0 RR9k4Get1rZqhzSKTAjqEzTU8+GBJKdmxL+77KAtMpEY4HKUK7j7fgNic4uYnoxN G6j5zTZ5BD3eKYiYmwqBoh3IiV2CPdRNTlVS6D4FwrS9XNJKav79meC0YTyb6y0F wyaIDxzlzFf5uSnKTtUR9uB0NtZtD9SQCTAZOt2yHytlJyemEznR+a6AdKgh3Nvg VO7h/OEjS4X/4ViMeiLzcWdaEh9i+HmQe4BQ/qmQo7VZGR91Cpvb7Gyb/lbR+nVr uDHnVyE03JJEVffXvfDRJ1tjNUWWvJGFKaiOUzJc+rHPrKTOgOkfjQ== -----END CERTIFICATE-----Generated at Wed Jan 7 10:43:00 2026 by rpki-client