This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer (raw, json) Hash identifier: /In65h9zxvAWTVqz0jgyoDe1Ilb1NsgZaa3vqpCUgXY= Subject key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7F64E86EC699F846048DAE787CDF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12312 IP: 62.26.0.0/15 IP: 62.144.0.0/16 IP: 62.246.0.0/16 IP: 79.140.176.0/20 IP: 80.83.96.0/20 IP: 185.210.52.0/23 IP: 194.112.16.0/20 IP: 195.52.0.0/16 IP: 195.63.0.0/17 IP: 195.63.192.0/18 IP: 195.78.160.0/19 IP: 195.185.0.0/16 IP: 212.172.0.0/16 IP: 2001:4090::/29 IP: 2a01:5c8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f6:4e:86:ec:69:9f:84:60:48:da:e7:87:cd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:ab:e6:e3:10:82:ca:54:c3:27:d1:1a:d3: eb:73:06:82:e6:00:9c:b7:f8:89:4b:f7:65:df:d3: a7:56:8f:16:d7:ec:fb:5d:4d:20:1c:71:69:8f:b7: 38:50:d1:2b:af:99:e2:46:ae:8c:41:f3:9d:ff:7e: 6d:65:73:be:0b:24:42:e4:78:22:31:9a:b7:dc:a1: 54:e0:86:68:76:ba:df:29:23:a9:b8:2c:d7:37:bb: 87:4f:e7:6a:70:59:98:3f:1d:5a:f9:26:cc:c2:7f: 28:95:e2:da:79:ab:ee:40:67:71:91:ab:12:32:75: 1e:d4:1e:23:52:d5:92:82:c6:3c:b6:52:06:18:a3: 40:ea:97:09:09:c3:1f:43:ba:53:1a:f3:b2:5d:e6: 38:dc:0a:f2:9c:31:dd:35:03:ad:8a:79:98:7b:99: 04:1e:9c:60:83:80:44:9f:ad:74:46:8b:f2:6b:d7: 8d:4c:ce:ed:71:49:f7:14:d1:36:29:9f:88:04:25: 84:c6:29:51:70:d4:26:2e:1b:6e:ee:2d:4f:e9:b1: 10:18:95:5a:ba:7d:86:6e:ff:6c:34:c5:84:87:b0: 3d:04:5a:ab:fc:c0:d5:18:6f:4a:24:dd:96:12:f2: f4:9e:66:f8:2c:53:12:97:7d:59:41:d6:65:09:cc: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.26.0.0/15 62.144.0.0/16 62.246.0.0/16 79.140.176.0/20 80.83.96.0/20 185.210.52.0/23 194.112.16.0/20 195.52.0.0/16 195.63.0.0/17 195.63.192.0/18 195.78.160.0/19 195.185.0.0/16 212.172.0.0/16 IPv6: 2001:4090::/29 2a01:5c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12312 Signature Algorithm: sha256WithRSAEncryption a3:5a:2f:7e:ac:e2:60:db:50:00:0c:38:ed:8f:0b:4b:f8:7a: e5:19:be:ec:f5:87:95:6d:23:3e:b0:d1:9b:c2:f9:44:12:47: 7d:0e:d0:b4:24:49:d2:95:ef:70:f3:59:09:f2:a0:6e:e3:0b: 90:ca:5e:9a:9e:72:28:42:a8:70:26:88:7f:68:e3:e5:39:f9: 56:5e:af:30:62:32:ed:71:3f:86:bc:74:77:82:9d:75:01:58: ef:27:46:b0:d0:39:85:81:6e:9f:f2:eb:fe:8c:13:db:c6:66: bc:16:f2:f9:26:a6:de:08:a4:a6:2b:14:e2:1b:2b:93:39:d9: 4d:c0:4b:f8:07:96:a6:b9:1e:bf:5f:26:fa:7d:69:aa:bf:a2: e4:e2:99:eb:a0:28:ba:ae:2a:e6:2f:c6:85:1b:00:37:c0:66: c8:7f:6f:d0:3d:df:3e:81:a6:68:a5:29:56:39:5d:de:97:2f: d0:9d:36:cd:c9:7f:6c:da:6d:96:ec:01:59:af:52:51:f8:99: 7d:3c:aa:fe:4b:e2:92:e7:2a:2c:29:c5:1d:55:36:ed:f7:af: 27:34:f3:39:0d:4b:c9:22:a4:80:dc:44:bd:b7:ea:ee:df:45: 3a:24:5d:d8:88:2f:d7:f7:09:a7:c1:64:c4:63:d3:66:61:36: c8:e6:9e:f2 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZt6x/ZOhuxpn4RgSNrnh83zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTFkNzJhYzA4MjZlMDliYzBkMTdkZGVlOGJhODdkOTczMWRkNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAWr5uMQgspUwyfRGtPrcwaC5gCc t/iJS/dl39OnVo8W1+z7XU0gHHFpj7c4UNErr5niRq6MQfOd/35tZXO+CyRC5Hgi MZq33KFU4IZodrrfKSOpuCzXN7uHT+dqcFmYPx1a+SbMwn8oleLaeavuQGdxkasS MnUe1B4jUtWSgsY8tlIGGKNA6pcJCcMfQ7pTGvOyXeY43ArynDHdNQOtinmYe5kE Hpxgg4BEn610Rovya9eNTM7tcUn3FNE2KZ+IBCWExilRcNQmLhtu7i1P6bEQGJVa un2Gbv9sNMWEh7A9BFqr/MDVGG9KJN2WEvL0nmb4LFMSl31ZQdZlCcx/fQIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFAodcqwIJuCbwNF93ui6h9lzHdQTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzYzNDFk YS0yYjM0LTRkNDUtOWMxNy05NTgxMTJhNDg5YTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvNjM0MWRh LTJiMzQtNGQ0NS05YzE3LTk1ODExMmE0ODlhNC8xL0NoMXlyQWdtNEp2QTBYM2U2 THFIMlhNZDFCTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHcGCCsGAQUF BwEHAQH/BGgwZjBOBAIAATBIAwMBPhoDAwA+kAMDAD72AwQET4ywAwQEUFNgAwQB udI0AwQEwnAQAwMAwzQDBAfDPwADBAbDP8ADBAXDTqADAwDDuQMDANSsMBQEAgAC MA4DBQMgAUCQAwUAKgEFyDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIwGDANBgkq hkiG9w0BAQsFAAOCAQEAo1ovfqziYNtQAAw47Y8LS/h65Rm+7PWHlW0jPrDRm8L5 RBJHfQ7QtCRJ0pXvcPNZCfKgbuMLkMpemp5yKEKocCaIf2jj5Tn5Vl6vMGIy7XE/ hrx0d4KddQFY7ydGsNA5hYFun/Lr/owT28ZmvBby+Sam3gikpisU4hsrkznZTcBL +AeWprkev18m+n1pqr+i5OKZ66Aouq4q5i/GhRsAN8BmyH9v0D3fPoGmaKUpVjld 3pcv0J02zcl/bNptluwBWa9SUfiZfTyq/kvikucqLCnFHVU27fevJzTzOQ1LySKk gNxEvbfq7t9FOiRd2Igv1/cJp8FkxGPTZmE2yOae8g== -----END CERTIFICATE-----Generated at Mon Jan 26 17:00:20 2026 by rpki-client