This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer File: cCHXUovnE6S6LLTbXljWTYgutVU.cer (raw, json) Hash identifier: MVKqdR5UDaOyuWapawEq3USoIVn4o6BvL5ZtWqT/+RI= Subject key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F807504FC9C05FD46206D8899F5B293 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212219 IP: 80.253.246.0/24 IP: 91.151.88.0/23 IP: 91.151.95.0/24 IP: 212.108.107.0/24 IP: 213.142.148.0/24 IP: 213.142.151.0/24 IP: 213.142.159.0/24 IP: 2a0f:bf00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:75:04:fc:9c:05:fd:46:20:6d:88:99:f5:b2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:8a:e4:19:68:de:31:20:97:3d:00:38:ea: 29:ce:86:51:61:f5:e3:d9:51:be:6c:f7:11:98:1f: 3e:95:5e:32:14:10:06:07:a2:8a:ff:7b:a7:92:47: e0:e6:3a:7e:fc:1b:f5:df:51:9e:12:93:cf:80:b0: 03:0d:46:b6:62:19:ac:6e:b8:ad:37:14:8f:dc:93: d6:ee:aa:dc:4a:10:84:90:c1:11:c1:18:d9:12:c8: 80:fd:b3:37:ed:53:11:d0:4b:b2:64:76:78:6d:e3: 75:e3:bb:32:bc:de:93:5c:3d:cc:7b:68:b4:55:45: 14:46:79:f3:91:04:41:3a:f6:1b:70:12:f9:60:57: ff:31:98:d0:66:2e:28:1c:cc:80:18:eb:56:64:f3: 32:7e:91:c7:86:13:82:63:fd:a2:8b:7e:7d:26:ba: c0:e5:57:f2:57:8c:98:73:7b:68:eb:fe:98:25:0f: a9:9c:4f:33:ef:fd:2e:5b:6e:4e:e3:14:06:1b:5a: 49:81:80:33:0b:14:69:e3:3e:0d:03:a6:17:66:83: df:1a:b2:19:62:4e:6b:49:69:e6:48:4a:8a:5c:2b: 39:9a:1a:b0:b2:01:b7:19:95:64:8f:d9:23:a1:f2: 51:a3:92:75:11:f4:91:6b:c2:70:73:70:59:d2:08: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.246.0/24 91.151.88.0/23 91.151.95.0/24 212.108.107.0/24 213.142.148.0/24 213.142.151.0/24 213.142.159.0/24 IPv6: 2a0f:bf00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212219 Signature Algorithm: sha256WithRSAEncryption 0d:9d:54:58:e2:5a:39:a5:dd:d5:71:60:d9:81:bc:7f:95:57: 31:dd:6f:03:ca:fa:6f:bf:2d:e6:61:de:e8:5a:72:df:3b:ac: 08:d4:84:f5:33:f9:90:50:bf:50:da:3f:48:7a:24:78:f9:a4: ea:8b:6d:c0:b7:aa:30:d3:a0:9d:7d:ab:49:c0:25:99:c8:7c: ce:18:c0:33:24:9d:58:95:c3:7d:fa:9c:59:7b:cc:c7:9a:28: e2:a1:db:1f:4f:90:eb:04:3e:67:25:c0:d3:ce:11:2c:cb:60: ef:1f:03:58:e9:cb:12:da:44:07:20:48:a4:d6:3d:0e:54:cc: 19:7a:5f:8c:3f:a9:09:b1:8b:81:a4:d2:19:07:93:60:ef:b9: dc:8c:7e:8a:38:0d:9e:35:08:79:53:96:46:04:8a:58:9a:12: a3:75:3d:ed:82:ae:2c:8f:10:0e:fd:ef:1b:d2:09:ea:22:bb: 8c:05:e2:d9:68:0f:8b:bd:ea:c0:19:36:76:e9:14:d7:54:80: 70:cf:ab:31:9f:0f:4f:b8:49:d8:a3:5a:98:a8:2b:a3:09:da: 2d:20:f6:7c:38:bf:c2:3e:1e:b8:23:bf:c4:31:d8:f7:3a:34: ee:a5:5b:96:55:37:cf:58:8a:b3:9a:85:8f:8a:d1:5f:ab:ed: d9:91:a0:72 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt/gHUE/JwF/UYgbYiZ9bKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDIxZDc1MjhiZTcxM2E0YmEyY2I0ZGI1ZTU4ZDY0ZDg4MmViNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveOK5Blo3jEglz0AOOopzoZRYfXj 2VG+bPcRmB8+lV4yFBAGB6KK/3unkkfg5jp+/Bv131GeEpPPgLADDUa2Yhmsbrit NxSP3JPW7qrcShCEkMERwRjZEsiA/bM37VMR0EuyZHZ4beN147syvN6TXD3Me2i0 VUUURnnzkQRBOvYbcBL5YFf/MZjQZi4oHMyAGOtWZPMyfpHHhhOCY/2ii359JrrA 5VfyV4yYc3to6/6YJQ+pnE8z7/0uW25O4xQGG1pJgYAzCxRp4z4NA6YXZoPfGrIZ Yk5rSWnmSEqKXCs5mhqwsgG3GZVkj9kjofJRo5J1EfSRa8Jwc3BZ0gjdtwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFHAh11KL5xOkuiy0215Y1k2ILrVVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzAxYjBj MC0xYjg3LTRkNmYtOWU5MC05MjgxZjBkMjNkYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMDFiMGMw LTFiODctNGQ2Zi05ZTkwLTkyODFmMGQyM2RiZi8xL2NDSFhVb3ZuRTZTNkxMVGJY bGpXVFlndXRWVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQAUP32AwQBW5dYAwQAW5dfAwQA1GxrAwQA1Y6U AwQA1Y6XAwQA1Y6fMA0EAgACMAcDBQMqD78AMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM8+zANBgkqhkiG9w0BAQsFAAOCAQEADZ1UWOJaOaXd1XFg2YG8f5VXMd1v A8r6b78t5mHe6Fpy3zusCNSE9TP5kFC/UNo/SHokePmk6ottwLeqMNOgnX2rScAl mch8zhjAMySdWJXDffqcWXvMx5oo4qHbH0+Q6wQ+ZyXA084RLMtg7x8DWOnLEtpE ByBIpNY9DlTMGXpfjD+pCbGLgaTSGQeTYO+53Ix+ijgNnjUIeVOWRgSKWJoSo3U9 7YKuLI8QDv3vG9IJ6iK7jAXi2WgPi73qwBk2dukU11SAcM+rMZ8PT7hJ2KNamKgr ownaLSD2fDi/wj4euCO/xDHY9zo07qVbllU3z1iKs5qFj4rRX6vt2ZGgcg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:05 2026 by rpki-client