This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer File: ChCKKMcHsOXCwubCE31Fh5EUu5I.cer (raw, json) Hash identifier: nikkRJsTnvrcEpVepD1TfJGWWsgeOTdvxYzHM871tlo= Subject key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12A94773D6B5676E3B675E3B2ECCE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204946 IP: 2001:678:b0c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a9:47:73:d6:b5:67:6e:3b:67:5e:3b:2e:cc:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:43:8d:59:8b:1f:10:e8:27:98:a4:1e:2d: c5:6f:91:5a:e7:6b:18:34:a5:57:24:e1:37:fd:ca: 63:3c:ef:31:f5:f8:9f:04:d9:8a:af:4b:5a:4c:2b: 65:c6:ba:80:c0:3e:6a:8f:ba:1f:5d:d5:90:cf:27: ee:e3:3f:27:d3:17:e0:0b:fd:7d:39:53:af:84:04: da:37:9a:5a:e5:e5:4e:1e:30:08:e0:06:94:74:d5: a2:81:b9:f4:ff:ea:79:3a:87:3f:1c:36:58:80:66: b9:87:cc:e4:38:13:75:01:7b:20:b4:46:de:b8:c4: 87:c5:be:61:a6:e9:cb:49:9f:41:2b:48:8e:04:e2: d1:90:08:d6:a3:0e:f8:b1:d1:1c:85:e8:aa:e8:8b: 7d:57:76:61:78:c9:c8:0b:eb:04:40:c0:90:3f:22: c8:f3:ee:a2:e8:58:71:ea:d4:84:86:44:e2:3d:3c: b0:f3:4a:23:cf:d0:a9:8e:b7:6a:f8:c4:af:82:4a: a0:cf:4d:ea:26:4d:02:90:15:3e:b8:99:64:8a:5d: 11:35:fe:b1:4c:58:0a:ab:ba:42:9e:51:87:ee:75: f9:96:2c:b2:84:7c:15:79:9f:31:95:b8:76:1d:fe: 55:65:ed:f8:d7:2c:6f:cc:d9:fb:67:56:e4:cd:7e: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b0c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204946 Signature Algorithm: sha256WithRSAEncryption 13:27:fe:2e:37:2e:dc:da:50:3a:13:01:96:50:f2:75:06:1f: 47:de:49:5f:9d:7a:9a:28:0c:ac:4d:f0:4b:53:f2:96:f0:93: 74:49:31:35:56:d5:f2:17:f9:55:89:e6:7f:a8:6f:dc:e8:0e: 65:8b:55:c1:b1:f8:62:2a:84:aa:57:95:fa:49:83:c0:b2:16: ab:2b:e8:b3:bf:58:25:d1:f4:3f:7d:9d:ca:55:0f:d4:97:0b: b2:87:7b:c5:d7:ee:00:2d:00:f7:bf:b4:7f:5e:c3:6a:2b:92: 17:d0:c2:95:80:ce:9e:06:fe:5a:76:00:df:28:47:15:50:17: eb:cd:ab:9e:4d:c6:d5:d4:b1:b6:af:7b:2e:9e:f8:4c:1a:6d: 9e:35:b6:48:0e:6a:d8:33:4f:b5:d8:7a:19:12:35:a8:67:cb: 32:f7:df:9f:23:e8:e9:35:28:d9:20:a1:1e:a4:47:c3:88:63: a2:5e:c2:6c:d7:ab:34:0e:af:77:f3:6f:6e:84:fb:c4:ad:49: c0:12:62:54:07:ec:fb:fa:00:36:5a:de:f0:d5:3d:b9:da:b3: ae:ef:c3:32:b9:d9:bd:54:ee:c3:5f:d0:f9:0d:b4:52:2a:2d: 27:ac:b4:ca:fc:e4:d3:49:6d:10:8f:c2:b1:1d:4e:e0:3f:2f: 9a:45:56:60 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8EqlHc9a1Z247Z147LszmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTEwOGEyOGM3MDdiMGU1YzJjMmU2YzIxMzdkNDU4NzkxMTRiYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJVDjVmLHxDoJ5ikHi3Fb5Fa52sY NKVXJOE3/cpjPO8x9fifBNmKr0taTCtlxrqAwD5qj7ofXdWQzyfu4z8n0xfgC/19 OVOvhATaN5pa5eVOHjAI4AaUdNWigbn0/+p5Ooc/HDZYgGa5h8zkOBN1AXsgtEbe uMSHxb5hpunLSZ9BK0iOBOLRkAjWow74sdEcheiq6It9V3ZheMnIC+sEQMCQPyLI 8+6i6Fhx6tSEhkTiPTyw80ojz9Cpjrdq+MSvgkqgz03qJk0CkBU+uJlkil0RNf6x TFgKq7pCnlGH7nX5liyyhHwVeZ8xlbh2Hf5VZe341yxvzNn7Z1bkzX5YkwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFAoQiijHB7DlwsLmwhN9RYeRFLuSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzEzOWQy My04MDJkLTQyMjQtODMyZS0xZjg1ODE0MjE3NjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMTM5ZDIz LTgwMmQtNDIyNC04MzJlLTFmODU4MTQyMTc2MC8xL0NoQ0tLTWNIc09YQ3d1YkNF MzFGaDVFVXU1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAsMMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMgkjANBgkqhkiG9w0BAQsFAAOCAQEAEyf+Ljcu3NpQOhMBllDydQYfR95J X516migMrE3wS1PylvCTdEkxNVbV8hf5VYnmf6hv3OgOZYtVwbH4YiqEqleV+kmD wLIWqyvos79YJdH0P32dylUP1JcLsod7xdfuAC0A97+0f17DaiuSF9DClYDOngb+ WnYA3yhHFVAX682rnk3G1dSxtq97Lp74TBptnjW2SA5q2DNPtdh6GRI1qGfLMvff nyPo6TUo2SChHqRHw4hjol7CbNerNA6vd/NvboT7xK1JwBJiVAfs+/oANlre8NU9 udqzru/DMrnZvVTuw1/Q+Q20UiotJ6y0yvzk00ltEI/CsR1O4D8vmkVWYA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:34 2026 by rpki-client