This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer File: chgSXs-7IR7fwt4EcvlkqobL6Z4.cer (raw, json) Hash identifier: gv9x2MlH2zM9X3Fb4KX7a10V60Nn4wYguVI3e2kUtk8= Subject key identifier: 72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6704211240FD87542078838AE6F6A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41521 IP: 194.124.253.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:70:42:11:24:0f:d8:75:42:07:88:38:ae:6f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7218125ecfbb211edfc2de0472f964aa86cbe99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:78:1e:cc:e6:62:fb:12:e0:6f:ec:d2:a1:17: 43:2b:f9:fb:30:17:d4:4d:84:c0:19:cc:95:0e:1c: dc:bf:57:da:d9:45:ee:36:f3:62:36:cc:28:de:39: d6:2e:f1:bb:c8:e3:4d:d0:c8:da:08:2c:4f:41:8e: 7a:68:c9:87:05:b1:91:46:83:7b:bc:75:1b:03:23: e6:ff:eb:9a:0d:ad:ce:35:a3:96:48:4f:ed:be:c4: 1e:b8:8f:7f:5e:f1:22:cf:ef:a1:ae:af:a5:43:ee: 2d:05:16:8c:c6:09:be:32:27:38:be:d4:86:30:8e: fd:ba:bd:99:7c:1a:a9:e6:c6:5b:f0:a5:7a:c8:61: bc:ca:5c:ab:30:f6:50:69:dc:c4:47:94:10:b0:55: 46:aa:2d:9e:98:af:9d:02:ba:83:cf:3c:86:f5:fa: 1e:c0:50:ad:e6:16:5c:ea:ab:fc:9b:59:15:d2:52: 7e:ff:3a:61:ff:47:f1:31:5b:70:8e:9d:09:e6:b8: b8:83:55:35:0e:16:76:92:bc:c8:ab:9b:d9:a9:de: 61:ec:45:be:af:ca:0b:4b:b5:d8:50:76:89:63:43: 26:ed:26:67:77:60:be:01:70:a0:7b:43:9d:12:10: d7:a0:25:76:d5:e0:4f:ab:3c:a0:12:68:5c:2e:b0: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.253.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41521 Signature Algorithm: sha256WithRSAEncryption 05:ad:b0:a8:c1:da:db:da:46:96:d6:2b:66:33:70:c0:07:b5: 6f:06:a4:07:83:43:e4:2e:4a:1c:4a:40:1f:fd:c6:b5:b7:38: e9:a8:0b:85:4e:5b:71:45:c2:8f:7b:0e:06:2d:cd:be:36:cc: 36:c3:ed:38:77:7b:6e:55:03:6a:f4:64:24:66:84:b3:40:14: ac:09:1e:58:05:52:68:17:63:5a:42:3e:0f:be:41:8c:f2:23: db:0a:2f:60:75:75:49:43:98:cd:2a:97:d0:a2:f6:70:68:5e: 71:a3:39:8a:cf:bc:ef:4a:9f:1a:cb:15:5c:83:78:32:75:e4: d9:97:cc:94:e9:eb:ed:05:dc:b9:37:50:9d:b8:25:0d:0d:2d: a5:30:e4:a7:02:07:b5:64:ca:f2:3d:50:32:1e:0b:2b:88:aa: b0:e5:22:5d:41:53:1f:91:25:0d:01:3e:c5:bc:65:b1:49:70: 1d:e8:42:10:93:e3:cd:e1:46:33:5a:5b:b1:42:99:4f:52:ba: a4:fd:da:2d:cf:61:a3:64:7f:ca:40:f5:b6:b0:da:06:19:c6: 9b:b1:c4:d7:3a:34:a7:a7:cb:47:e9:c3:1e:94:66:8f:d0:ef: 62:e8:44:0d:59:e4:42:6e:59:79:2d:0f:8c:9c:8a:0a:35:ca: 2a:eb:6a:18 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xnBCESQP2HVCB4g4rm9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjE4MTI1ZWNmYmIyMTFlZGZjMmRlMDQ3MmY5NjRhYTg2Y2JlOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmngezOZi+xLgb+zSoRdDK/n7MBfU TYTAGcyVDhzcv1fa2UXuNvNiNswo3jnWLvG7yONN0MjaCCxPQY56aMmHBbGRRoN7 vHUbAyPm/+uaDa3ONaOWSE/tvsQeuI9/XvEiz++hrq+lQ+4tBRaMxgm+Mic4vtSG MI79ur2ZfBqp5sZb8KV6yGG8ylyrMPZQadzER5QQsFVGqi2emK+dArqDzzyG9foe wFCt5hZc6qv8m1kV0lJ+/zph/0fxMVtwjp0J5ri4g1U1DhZ2krzIq5vZqd5h7EW+ r8oLS7XYUHaJY0Mm7SZnd2C+AXCge0OdEhDXoCV21eBPqzygEmhcLrC/3QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHIYEl7PuyEe38LeBHL5ZKqGy+meMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzM3ZTVj Yi1kOWVlLTQ1ZDMtOTVhYi0wZGIwZmQ3NGRiMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMzdlNWNi LWQ5ZWUtNDVkMy05NWFiLTBkYjBmZDc0ZGIzMi8xL2NoZ1NYcy03SVI3Znd0NEVj dmxrcW9iTDZaNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwnz9MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCiMTANBgkqhkiG9w0BAQsFAAOCAQEABa2wqMHa29pGltYrZjNwwAe1bwakB4ND 5C5KHEpAH/3Gtbc46agLhU5bcUXCj3sOBi3NvjbMNsPtOHd7blUDavRkJGaEs0AU rAkeWAVSaBdjWkI+D75BjPIj2wovYHV1SUOYzSqX0KL2cGhecaM5is+870qfGssV XIN4MnXk2ZfMlOnr7QXcuTdQnbglDQ0tpTDkpwIHtWTK8j1QMh4LK4iqsOUiXUFT H5ElDQE+xbxlsUlwHehCEJPjzeFGM1pbsUKZT1K6pP3aLc9ho2R/ykD1trDaBhnG m7HE1zo0p6fLR+nDHpRmj9DvYuhEDVnkQm5ZeS0PjJyKCjXKKutqGA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:26:57 2026 by rpki-client