This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer (raw, json) Hash identifier: Si02zEBJsIBYYTpeMUkOLGQtUiT4I422qramryHmFZ4= Subject key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834B75D049AB80F2D90E04AB280DC5E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57498 IP: 91.221.74.0/23 IP: 91.227.42.0/24 IP: 194.187.30.0/23 IP: 2001:678:b8c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b7:5d:04:9a:b8:0f:2d:90:e0:4a:b2:80:dc:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6821c8ff0437f7edd829166fde03446f86109d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d0:8a:ff:78:df:4a:6e:d1:79:28:56:a2:ef: 81:57:3a:d4:6f:d5:65:e1:81:2a:1e:24:48:a6:8a: 6d:85:1f:f8:e7:d3:a6:10:25:d1:60:46:c3:a6:45: 3c:48:1a:9a:27:12:22:94:ab:cb:f3:6a:b5:d4:07: 05:3f:53:ed:cc:70:ef:eb:f5:a0:85:1f:14:b7:02: ec:71:0c:b3:1e:d5:ae:82:68:f4:11:12:44:ab:4a: a3:86:37:fb:cd:9f:dc:24:54:20:63:4b:3e:36:b4: 6c:04:a1:61:de:a7:15:8f:0d:c0:4c:31:76:f4:fb: 16:3e:b1:45:78:3d:7b:21:c5:01:a1:d7:45:96:49: 1f:f4:7b:b5:ba:17:0a:f8:c2:a6:73:d2:8e:27:b3: 19:d5:f0:71:9b:65:d1:7e:6f:3e:e5:f7:02:26:ec: c1:14:3a:c7:83:40:3b:3a:09:ea:cf:84:74:74:64: 39:08:77:60:38:ad:d6:e0:1d:34:4c:62:f4:5d:64: d4:c3:b1:5e:3f:f1:9e:26:43:e5:86:f8:3b:fb:1b: a8:e6:4c:9e:84:54:fd:ca:d7:a1:fa:16:af:cb:6e: 06:b3:cb:3f:35:7d:ba:b4:27:8d:df:21:38:7b:b2: c3:b3:57:87:1e:3a:e9:a0:93:f8:bc:cd:e9:81:69: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.74.0/23 91.227.42.0/24 194.187.30.0/23 IPv6: 2001:678:b8c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57498 Signature Algorithm: sha256WithRSAEncryption 19:24:47:40:5e:3c:60:9a:e8:c7:fb:75:f8:bc:36:61:ab:11: 1a:ab:d0:5c:40:f7:38:3c:63:ab:75:5b:18:3e:1a:f5:2e:28: 2b:0c:9c:bd:2e:88:04:30:84:d9:2f:61:82:29:f1:19:35:c1: 00:94:76:62:de:83:38:d3:6e:ea:c6:09:fb:97:42:9a:e0:66: e7:bf:6a:90:e2:e0:90:e1:5c:49:38:bf:86:da:84:a7:b9:c1: fd:6b:be:e5:28:3c:4a:b0:ab:39:cb:83:cf:62:72:c5:a4:4b: fc:19:84:69:d5:a1:e9:d1:2b:e0:76:29:3f:00:0d:af:76:c5: d8:06:fc:c8:3a:d6:0f:96:eb:cf:1a:6a:2f:25:9b:5e:9a:34: 55:9f:03:10:75:14:9e:d3:c1:70:95:2c:87:01:b7:96:69:cf: df:f4:1a:54:f5:c6:0e:75:df:63:9f:da:b6:83:35:30:5f:3b: 39:ea:86:7f:b3:9d:ca:9e:6c:30:45:01:bb:33:a2:df:5d:57: f8:8d:14:9e:f0:bd:f0:49:92:05:67:53:fc:5e:1e:3d:46:87: 83:6e:86:06:bd:ed:7f:d0:73:6d:96:23:19:95:4b:88:bf:f0: 06:b0:18:5a:e2:8f:f8:4f:19:ec:5a:88:a8:00:4b:52:77:a6: 32:63:cf:35 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt4NLddBJq4Dy2Q4EqygNxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODIxYzhmZjA0MzdmN2VkZDgyOTE2NmZkZTAzNDQ2Zjg2MTA5ZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tCK/3jfSm7ReShWou+BVzrUb9Vl 4YEqHiRIpopthR/459OmECXRYEbDpkU8SBqaJxIilKvL82q11AcFP1PtzHDv6/Wg hR8UtwLscQyzHtWugmj0ERJEq0qjhjf7zZ/cJFQgY0s+NrRsBKFh3qcVjw3ATDF2 9PsWPrFFeD17IcUBoddFlkkf9Hu1uhcK+MKmc9KOJ7MZ1fBxm2XRfm8+5fcCJuzB FDrHg0A7Ognqz4R0dGQ5CHdgOK3W4B00TGL0XWTUw7FeP/GeJkPlhvg7+xuo5kye hFT9yteh+havy24Gs8s/NX26tCeN3yE4e7LDs1eHHjrpoJP4vM3pgWlCsQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFGghyP8EN/ft2CkWb94DRG+GEJ2AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzEzYjE0 NC1iZTE2LTQ5MjItYTk4My0yNWFlOTI5M2Y2YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvMTNiMTQ0 LWJlMTYtNDkyMi1hOTgzLTI1YWU5MjkzZjZiNC8xL2FDSElfd1EzOS0zWUtSWnYz Z05FYjRZUW5ZQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQBW91KAwQAW+MqAwQBwrseMA8EAgACMAkDBwAg AQZ4C4wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOCaMA0GCSqGSIb3DQEBCwUA A4IBAQAZJEdAXjxgmujH+3X4vDZhqxEaq9BcQPc4PGOrdVsYPhr1LigrDJy9LogE MITZL2GCKfEZNcEAlHZi3oM4027qxgn7l0Ka4Gbnv2qQ4uCQ4VxJOL+G2oSnucH9 a77lKDxKsKs5y4PPYnLFpEv8GYRp1aHp0Svgdik/AA2vdsXYBvzIOtYPluvPGmov JZtemjRVnwMQdRSe08FwlSyHAbeWac/f9BpU9cYOdd9jn9q2gzUwXzs56oZ/s53K nmwwRQG7M6LfXVf4jRSe8L3wSZIFZ1P8Xh49RoeDboYGve1/0HNtliMZlUuIv/AG sBha4o/4TxnsWoioAEtSd6YyY881 -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:38 2026 by rpki-client