This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer File: Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer (raw, json) Hash identifier: vedNu17FHgRvjI463z+Y9zIrYbESKxwkg5QZ147fLWY= Subject key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910123F929799B0520E4908BCD06230 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.150.148.0/22 IP: 2a03:ace0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:12:3f:92:97:99:b0:52:0e:49:08:bc:d0:62:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:4a:8d:3c:1f:0f:00:a1:2d:16:0d:84:c4: f4:8f:0b:28:fa:cf:4a:79:58:79:57:4f:4a:d9:b9: 3f:88:91:7a:4c:b1:21:78:74:46:dc:03:47:61:8b: e5:7a:cf:a6:e6:3d:9a:61:18:78:7e:66:fb:9b:23: 10:28:9a:02:bc:49:fc:db:ad:f2:c8:58:52:8b:fd: fe:ee:32:32:0e:66:09:df:c6:83:0c:15:54:d3:b9: bb:e4:96:5c:ae:a9:75:2d:e2:77:73:d9:6c:2c:82: d5:32:89:e3:56:df:96:76:c6:99:ff:b5:f3:26:bf: f7:2d:80:a8:f1:46:77:f1:99:96:ba:6e:73:fb:79: b4:d4:33:52:4a:6e:03:d7:65:35:f9:cb:ee:d9:31: fc:94:3f:e7:6e:26:ca:fa:ec:bf:85:e1:2b:91:44: 73:0e:b4:6a:61:f2:6f:dd:9b:5e:43:38:d0:de:5a: 67:d2:88:3d:d3:bd:d9:66:67:23:59:41:f7:01:e5: 61:07:cf:ec:20:16:7e:e2:ee:12:ac:59:d2:f6:84: 89:fe:66:5a:29:0b:f6:44:7a:b9:e8:71:47:52:74: f0:c2:21:84:e1:62:12:33:d9:7c:d2:73:e5:b2:b5: 26:01:3d:87:8c:38:57:54:75:61:d6:36:f0:4f:2b: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.148.0/22 IPv6: 2a03:ace0::/32 Signature Algorithm: sha256WithRSAEncryption 77:fe:d1:4a:a2:80:a6:2e:d2:f5:7b:b7:84:7a:ea:e0:ba:1a: 6a:f3:76:80:33:ac:ec:a0:5a:2c:7c:6b:9e:19:0c:0b:67:49: f5:a4:7e:3e:54:19:f0:6f:9d:5b:b1:7d:77:f2:40:f7:18:6c: 22:0d:85:4a:de:65:9d:04:19:91:58:ba:c3:95:49:aa:42:e4: 4e:f6:ab:ff:95:49:86:41:44:e5:61:1f:eb:40:9d:f5:43:81: b4:1b:a6:e9:a6:74:a0:97:2c:09:5a:54:85:48:04:6d:c8:dd: 5e:d1:66:80:c4:86:30:de:42:9b:2b:7b:9f:2b:19:c2:67:39: 54:c4:19:f7:e9:e2:c9:0d:9c:11:ac:de:69:2c:36:4d:f7:4e: 83:9a:fa:09:7f:50:e9:25:9e:53:bb:7a:3d:ad:80:79:4d:ea: 88:99:d1:57:06:f5:2d:11:1c:75:73:62:28:1b:ec:e3:43:90: d4:72:fe:d3:6d:b4:20:cf:74:3d:51:d9:90:86:cb:9d:ea:73: af:3e:1a:ac:90:92:20:98:38:a2:00:33:f0:a2:d1:bd:e7:b9: 0d:21:bd:40:94:30:aa:1f:62:26:29:b3:3d:4a:de:6e:c8:bc: 2a:f8:49:86:80:07:a2:0c:bf:2b:86:0a:4f:bb:1f:b8:19:59: ef:1e:02:b1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EBI/kpeZsFIOSQi80GIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTFmZGI4MGVmZjViY2UxNjU0YWM4YzZiOTIyZTc4MWZkMmQzNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrxKjTwfDwChLRYNhMT0jwso+s9K eVh5V09K2bk/iJF6TLEheHRG3ANHYYvles+m5j2aYRh4fmb7myMQKJoCvEn8263y yFhSi/3+7jIyDmYJ38aDDBVU07m75JZcrql1LeJ3c9lsLILVMonjVt+WdsaZ/7Xz Jr/3LYCo8UZ38ZmWum5z+3m01DNSSm4D12U1+cvu2TH8lD/nbibK+uy/heErkURz DrRqYfJv3ZteQzjQ3lpn0og9073ZZmcjWUH3AeVhB8/sIBZ+4u4SrFnS9oSJ/mZa KQv2RHq56HFHUnTwwiGE4WISM9l80nPlsrUmAT2HjDhXVHVh1jbwTyuNNQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAof24Dv9bzhZUrIxrki54H9LTalMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2FkNTVl NC1jMGM5LTQzMTktOGJkOC0wNGJjODdhMjllNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvYWQ1NWU0 LWMwYzktNDMxOS04YmQ4LTA0YmM4N2EyOWU0ZC8xL0NoX2JnT18xdk9GbFNzakd1 U0xuZ2YwdE5xVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZaUMA0EAgACMAcDBQAqA6zgMA0GCSqGSIb3 DQEBCwUAA4IBAQB3/tFKooCmLtL1e7eEeurguhpq83aAM6zsoFosfGueGQwLZ0n1 pH4+VBnwb51bsX138kD3GGwiDYVK3mWdBBmRWLrDlUmqQuRO9qv/lUmGQUTlYR/r QJ31Q4G0G6bppnSglywJWlSFSARtyN1e0WaAxIYw3kKbK3ufKxnCZzlUxBn36eLJ DZwRrN5pLDZN906DmvoJf1DpJZ5Tu3o9rYB5TeqImdFXBvUtERx1c2IoG+zjQ5DU cv7TbbQgz3Q9UdmQhsud6nOvPhqskJIgmDiiADPwotG957kNIb1AlDCqH2ImKbM9 St5uyLwq+EmGgAeiDL8rhgpPux+4GVnvHgKx -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:43 2026 by rpki-client