This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer (raw, json) Hash identifier: GjWBaY3Rj/1a6ju9gFyZtS2hvAxxdqC9Utisry2k460= Subject key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9A3D0AC8DA67C1D2E76ED6795151 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12906 AS: 62381 AS: 202679 IP: 185.37.80.0/22 IP: 185.138.60.0/22 IP: 188.65.0.0/21 IP: 2a00:eea0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9a:3d:0a:c8:da:67:c1:d2:e7:6e:d6:79:51:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08759158de234b754b7150f21933096c1094aac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:a8:25:de:89:7b:53:5b:01:d1:5c:e8:b9: 69:46:5b:75:2e:9c:a3:21:8e:13:d4:d7:8d:45:1d: c4:ba:67:a1:48:ef:5b:9b:fa:20:69:c7:3b:62:16: 23:d9:e3:92:59:3e:56:a7:c6:fd:8b:1c:17:f9:32: f1:1b:d2:16:88:1f:1b:01:f7:44:6b:57:c6:ad:02: 99:46:3f:e1:bc:b8:df:da:6f:d9:cc:db:29:14:0a: b0:76:f7:01:2d:e0:0a:17:c4:c5:73:40:1d:70:46: da:b9:56:26:21:e2:59:b1:1a:d9:ad:16:ea:ef:03: 0d:9b:7a:ea:a4:50:f7:d9:92:e8:09:51:43:20:51: 18:db:b5:fb:4c:b4:ba:39:6b:d6:7d:cd:a1:72:cb: 84:2d:45:b4:e0:e9:03:96:8b:50:51:e0:3c:77:67: e0:6c:80:e7:c7:77:46:e4:2e:30:3d:d6:c3:9a:dd: f6:35:89:d6:47:92:c2:3e:d2:8e:f7:c0:36:8a:46: dd:69:a2:6e:98:e5:bd:8e:0b:7e:2c:5e:c7:36:4a: a9:28:88:78:df:5f:d5:14:02:04:7b:80:f1:9a:07: 05:46:9d:89:46:84:b8:2e:1a:27:a0:6c:34:c9:ed: f4:e4:32:3a:dd:67:b2:88:a9:b4:71:db:75:56:99: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.80.0/22 185.138.60.0/22 188.65.0.0/21 IPv6: 2a00:eea0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12906 62381 202679 Signature Algorithm: sha256WithRSAEncryption 80:00:ee:50:db:f0:67:d7:35:38:e6:4d:17:64:af:63:54:f2: 82:53:06:24:b9:c1:a7:73:37:e4:3b:74:b5:11:5b:96:c7:b3: df:9e:a1:db:7a:95:2a:77:5b:03:9e:60:e4:c5:0d:c0:82:14: e1:12:4d:77:84:a9:10:c9:8b:a0:b4:e4:f1:4e:08:e7:11:e5: e2:ee:d1:77:a3:22:29:44:8d:af:41:c7:c0:03:fa:0e:7d:a7: 71:47:6c:d7:ad:a0:88:9b:57:08:c3:53:a6:c8:13:bb:ec:4d: 2f:08:3a:fb:f8:ca:55:bb:91:84:c5:9b:f2:93:fc:0f:24:f8: a6:8b:49:92:8a:ad:f9:a5:39:bd:44:48:e7:b8:ac:30:73:27: 64:58:5e:44:9a:8b:77:ff:db:f1:48:84:53:fe:d5:7a:5b:f5: 0d:fa:84:03:b3:81:4d:dd:ac:e5:8b:a9:a1:49:b9:4b:13:ec: 7b:18:a1:db:2c:14:c0:f3:d4:f6:c9:2b:72:5d:50:7e:c3:08: 5e:f0:42:ab:47:3f:ab:80:d4:b9:e1:0d:c5:7e:f7:1e:87:40: e7:25:70:45:bd:90:af:56:b5:21:09:01:fe:36:19:8e:00:a9: bf:c3:bb:be:67:bd:96:10:03:4c:76:2c:a9:dc:1b:fe:d0:d5: e8:a1:d7:98 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt6W5o9CsjaZ8HS527WeVFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODc1OTE1OGRlMjM0Yjc1NGI3MTUwZjIxOTMzMDk2YzEwOTRhYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjWoJd6Je1NbAdFc6LlpRlt1Lpyj IY4T1NeNRR3EumehSO9bm/ogacc7YhYj2eOSWT5Wp8b9ixwX+TLxG9IWiB8bAfdE a1fGrQKZRj/hvLjf2m/ZzNspFAqwdvcBLeAKF8TFc0AdcEbauVYmIeJZsRrZrRbq 7wMNm3rqpFD32ZLoCVFDIFEY27X7TLS6OWvWfc2hcsuELUW04OkDlotQUeA8d2fg bIDnx3dG5C4wPdbDmt32NYnWR5LCPtKO98A2ikbdaaJumOW9jgt+LF7HNkqpKIh4 31/VFAIEe4DxmgcFRp2JRoS4LhonoGw0ye305DI63WeyiKm0cdt1VpkyiQIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFAh1kVjeI0t1S3FQ8hkzCWwQlKrEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzZhNzAz Mi1lODBlLTRiYTctYjcyNC1jZDllY2NmOTNiMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNmE3MDMy LWU4MGUtNGJhNy1iNzI0LWNkOWVjY2Y5M2IzMS8xL0NIV1JXTjRqUzNWTGNWRHlH VE1KYkJDVXFzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuSVQAwQCuYo8AwQDvEEAMA0EAgACMAcDBQMq AO6gMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAjJqAgMA860CAwMXtzANBgkqhkiG 9w0BAQsFAAOCAQEAgADuUNvwZ9c1OOZNF2SvY1TyglMGJLnBp3M35Dt0tRFblsez 356h23qVKndbA55g5MUNwIIU4RJNd4SpEMmLoLTk8U4I5xHl4u7Rd6MiKUSNr0HH wAP6Dn2ncUds162giJtXCMNTpsgTu+xNLwg6+/jKVbuRhMWb8pP8DyT4potJkoqt +aU5vURI57isMHMnZFheRJqLd//b8UiEU/7Velv1DfqEA7OBTd2s5YupoUm5SxPs exih2ywUwPPU9skrcl1QfsMIXvBCq0c/q4DUueENxX73HodA5yVwRb2Qr1a1IQkB /jYZjgCpv8O7vme9lhADTHYsqdwb/tDV6KHXmA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:17 2026 by rpki-client