This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer (raw, json) Hash identifier: XkXKlkmppD6eLu0q660eD9LVJZgwHwQxMjPIM0zS+wU= Subject key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 472DA53560893DF0D432B5205D7AAF5C372F93A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 23 Dec 2025 03:05:59 +0000 Certificate not after: Tue 22 Dec 2026 03:10:59 +0000 Subordinate resources: IP: 2a14:7581:9f20::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2d:a5:35:60:89:3d:f0:d4:32:b5:20:5d:7a:af:5c:37:2f:93:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 23 03:05:59 2025 GMT Not After : Dec 22 03:10:59 2026 GMT Subject: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:5d:58:c4:8f:70:86:47:61:eb:d1:6d:2c: 4e:31:2d:6e:b2:7e:18:b0:52:1c:29:50:6b:fb:e1: b1:5f:da:06:12:8f:cd:e4:fb:0d:e3:2c:f4:9c:b8: 20:fb:8e:13:8c:5b:af:d4:22:31:65:b3:4b:23:16: dc:ad:e8:46:e4:fa:04:cf:2d:97:28:12:88:5e:4f: fe:30:5b:29:42:cb:03:84:8f:8b:79:d0:ab:dc:05: 68:3f:a0:62:ea:8a:4d:40:cb:02:47:32:c0:0a:69: 96:4f:0c:0c:a1:b0:19:23:b5:23:6f:10:2e:b3:a8: 13:0e:30:8a:bb:0d:8c:44:f4:e1:97:73:d6:c4:fd: d0:44:cf:01:73:ff:b6:ca:f1:a2:b0:1a:f4:82:ae: 41:25:74:8d:54:03:e5:1e:12:d2:e7:dc:a8:01:65: d2:4a:e6:39:e8:36:d5:97:47:29:32:00:7a:ff:e6: b2:f0:8a:7f:1c:02:ce:f0:36:20:02:4a:40:34:e0: c9:ee:48:d2:13:f1:99:89:e1:ea:37:56:95:12:a8: c8:03:ff:7b:2d:74:d0:e1:98:dd:d2:e3:af:60:08: a0:dc:b2:df:7e:2a:ed:1a:f5:0a:c8:f7:f0:17:2e: 4f:68:6c:6f:ee:db:29:31:5b:1d:59:4d:a5:07:eb: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9f20::/44 Signature Algorithm: sha256WithRSAEncryption 36:91:24:ed:f0:ff:23:e3:3d:65:ea:e0:5f:88:24:e4:23:3e: 06:66:2a:ed:19:c6:c2:f1:8f:e2:3e:99:bd:e8:ad:35:93:80: 6d:e0:7c:55:b9:bc:4e:56:f4:0b:b5:0e:05:30:38:b0:1b:f7: 14:45:7b:e3:f1:60:9f:de:a2:bf:c9:7e:f7:5b:fa:87:f5:2c: e7:79:74:63:32:70:8e:fe:6e:85:f0:2d:90:90:d3:e0:01:d2: 53:72:64:3d:99:7a:42:45:a1:69:32:94:ce:10:80:e0:e8:dc: 9d:92:d6:d8:92:0a:a9:cc:fd:4b:07:e2:1a:18:2c:fc:c8:8a: ff:90:aa:d3:e5:1c:a3:c5:9c:d2:41:32:f8:15:7f:e5:19:53: 0b:5f:43:47:30:f9:63:ed:1f:fa:03:91:12:22:ee:8a:07:5e: 33:b3:28:49:5d:dd:c4:b6:9b:55:8c:40:d8:90:d1:2e:cc:fc: 2c:0f:24:37:12:be:c2:17:d7:6a:af:63:62:6a:62:53:7b:62: b1:46:e8:14:68:77:8d:76:78:55:25:df:74:fb:a3:d0:38:65: ba:14:ea:3b:02:e8:fb:b9:11:e9:cc:c5:fb:9b:73:43:a8:00: 9d:3e:19:06:9f:ab:7f:7d:c9:32:9b:ca:ff:1a:92:33:e7:b8: cc:b5:a2:64 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIURy2lNWCJPfDUMrUgXXqvXDcvk6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMjMwMzA1NTlaFw0yNjEyMjIwMzEwNTlaMDMxMTAvBgNV BAMTKDQwNTBBMTdCQUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjX11YxI9whkdh69FtLE4xLW6y fhiwUhwpUGv74bFf2gYSj83k+w3jLPScuCD7jhOMW6/UIjFls0sjFtyt6Ebk+gTP LZcoEoheT/4wWylCywOEj4t50KvcBWg/oGLqik1AywJHMsAKaZZPDAyhsBkjtSNv EC6zqBMOMIq7DYxE9OGXc9bE/dBEzwFz/7bK8aKwGvSCrkEldI1UA+UeEtLn3KgB ZdJK5jnoNtWXRykyAHr/5rLwin8cAs7wNiACSkA04MnuSNIT8ZmJ4eo3VpUSqMgD /3stdNDhmN3S469gCKDcst9+Ku0a9QrI9/AXLk9obG/u2ykxWx1ZTaUH63xjAgMB AAGjggLkMIIC4DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRAUKF7rhxfN2PU Wjjc/qzg/iIr1jAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUyMWI3LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9jODZiNjViMS00NWU5LTRmYjItYWRjNS04N2JhNzExZTIxYjcv MS80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhEQ0ZFQUNFMEZFMjIyQkQ2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQqFHWBnyAwDQYJKoZIhvcNAQELBQADggEBADaR JO3w/yPjPWXq4F+IJOQjPgZmKu0ZxsLxj+I+mb3orTWTgG3gfFW5vE5W9Au1DgUw OLAb9xRFe+PxYJ/eor/Jfvdb+of1LOd5dGMycI7+boXwLZCQ0+AB0lNyZD2ZekJF oWkylM4QgODo3J2S1tiSCqnM/UsH4hoYLPzIiv+QqtPlHKPFnNJBMvgVf+UZUwtf Q0cw+WPtH/oDkRIi7ooHXjOzKEld3cS2m1WMQNiQ0S7M/CwPJDcSvsIX12qvY2Jq YlN7YrFG6BRod412eFUl33T7o9A4ZboU6jsC6Pu5EenMxfubc0OoAJ0+GQafq399 yTKbyv8akjPnuMy1omQ= -----END CERTIFICATE-----Generated at Tue Dec 23 12:27:39 2025 by rpki-client