This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer File: 4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer (raw, json) Hash identifier: 1avcs6qlFaJYeW2suSDPfVBLS3sD76CVKWnTX7xFK40= Subject key identifier: 4C:A5:07:9D:51:12:F1:5E:E2:6C:BC:BB:B0:24:00:EA:57:22:8E:8F Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 409F52D1855C418671F4E2ED9EEA705FF8DBC8A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft caRepository: rsync://rpki.blw.moe/repo/AS51087/0/ Notify URL: https://rpki.blw.moe/rrdp/notification.xml Certificate not before: Sat 20 Dec 2025 03:07:29 +0000 Certificate not after: Sat 19 Dec 2026 03:12:29 +0000 Subordinate resources: IP: 2a14:7580:f800::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9f:52:d1:85:5c:41:86:71:f4:e2:ed:9e:ea:70:5f:f8:db:c8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 20 03:07:29 2025 GMT Not After : Dec 19 03:12:29 2026 GMT Subject: CN=4CA5079D5112F15EE26CBCBBB02400EA57228E8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:93:56:50:c1:e3:76:96:56:92:2b:d7:63: f1:66:91:5b:eb:e6:94:61:60:35:30:70:7b:72:42: 53:63:8b:15:23:47:da:c9:2d:52:ea:40:c3:3e:37: c1:c6:3c:47:f1:ff:a5:9b:40:3a:38:b0:7f:80:0d: 12:d1:c5:bc:3a:f8:f7:15:92:ab:7e:cf:fb:a7:4f: 76:fc:0b:72:c7:e2:77:64:9b:5b:8b:71:bc:86:52: 8b:4f:31:74:73:77:4b:34:4f:85:db:00:7f:a7:d3: ae:31:0a:e7:5e:aa:f6:d2:b8:e7:4b:cf:63:58:c6: b9:a6:a3:57:98:22:45:a1:05:ea:84:6a:c6:6d:31: be:66:da:61:99:33:9e:ad:77:f6:71:fd:3a:5c:4c: 30:e4:bd:70:e8:2c:83:f1:2b:6d:79:b8:71:9f:bd: 41:ad:02:a9:ef:e6:f7:3d:03:c3:e3:3a:40:31:5d: 5e:8a:09:01:22:39:04:92:ee:cf:91:d1:69:6e:82: 27:0b:43:6b:25:90:a5:c8:3b:dd:18:34:e1:e6:f5: c7:8c:00:64:2b:f7:56:11:b0:a3:cb:bf:1a:a2:91: 17:a8:56:69:fb:47:d2:59:9d:e5:41:ed:ec:4b:ac: 50:54:60:70:f9:11:c7:18:1a:b5:e8:31:2b:23:9a: 3e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:A5:07:9D:51:12:F1:5E:E2:6C:BC:BB:B0:24:00:EA:57:22:8E:8F X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rpki.blw.moe/repo/AS51087/0/ RPKI Manifest - URI:rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft RPKI Notify - URI:https://rpki.blw.moe/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f800::/40 Signature Algorithm: sha256WithRSAEncryption 5e:18:42:74:7e:85:d5:c2:e1:c5:51:ab:dc:1b:e2:a9:9b:c0: bb:64:8c:0e:e5:8c:3e:ef:1f:62:01:32:d2:0f:2a:33:80:d9: f0:b3:40:c0:78:19:c7:ab:fe:c3:24:84:80:3c:e0:af:fc:fa: b8:b8:67:45:45:de:bc:36:82:ee:ce:ad:36:7a:c8:41:31:d9: 49:75:3a:0d:23:f0:74:a8:89:0d:ae:11:d2:42:a5:05:3c:71: 7f:1c:ac:5d:17:3b:54:a7:fa:8c:f5:5f:4b:eb:73:23:20:37: 02:13:b5:4e:60:4b:7e:9b:8d:98:63:18:f0:ef:4b:e8:75:8e: 6e:a3:53:61:2d:f2:a8:48:8e:34:66:c9:cf:42:80:3e:eb:2e: 38:5a:20:ae:11:7b:06:81:d7:a9:39:9b:c6:bc:f0:88:5f:0f: e3:c6:46:c2:97:e1:43:c5:cc:c0:ca:31:af:f1:b9:0a:c9:23: 30:43:ad:cf:c1:91:c5:03:61:5f:1b:e0:dc:91:a9:10:ba:91: de:a1:7e:d6:85:06:bf:a8:f2:5c:9e:f8:ec:32:53:d5:5a:77: 72:86:7a:66:5e:39:b1:be:a0:cf:f0:dd:f7:72:a8:0c:30:52: 67:29:1d:c8:69:02:fd:9e:86:58:5d:ee:d9:9d:4e:ad:11:ae: 10:67:f9:b9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUQJ9S0YVcQYZx9OLtnupwX/jbyKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMjAwMzA3MjlaFw0yNjEyMTkwMzEyMjlaMDMxMTAvBgNV BAMTKDRDQTUwNzlENTExMkYxNUVFMjZDQkNCQkIwMjQwMEVBNTcyMjhFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3k5NWUMHjdpZWkivXY/FmkVvr 5pRhYDUwcHtyQlNjixUjR9rJLVLqQMM+N8HGPEfx/6WbQDo4sH+ADRLRxbw6+PcV kqt+z/unT3b8C3LH4ndkm1uLcbyGUotPMXRzd0s0T4XbAH+n064xCudeqvbSuOdL z2NYxrmmo1eYIkWhBeqEasZtMb5m2mGZM56td/Zx/TpcTDDkvXDoLIPxK215uHGf vUGtAqnv5vc9A8PjOkAxXV6KCQEiOQSS7s+R0WlugicLQ2slkKXIO90YNOHm9ceM AGQr91YRsKPLvxqikReoVmn7R9JZneVB7exLrFBUYHD5EccYGrXoMSsjmj7tAgMB AAGjggJ7MIICdzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMpQedURLxXuJs vLuwJADqVyKOjzAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCB2AYIKwYBBQUHAQsEgcswgcgwMAYI KwYBBQUHMAWGJHJzeW5jOi8vcnBraS5ibHcubW9lL3JlcG8vQVM1MTA4Ny8wLzBc BggrBgEFBQcwCoZQcnN5bmM6Ly9ycGtpLmJsdy5tb2UvcmVwby9BUzUxMDg3LzAv NENBNTA3OUQ1MTEyRjE1RUUyNkNCQ0JCQjAyNDAwRUE1NzIyOEU4Ri5tZnQwNgYI KwYBBQUHMA2GKmh0dHBzOi8vcnBraS5ibHcubW9lL3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAOBAIAAjAIAwYAKhR1gPgwDQYJKoZIhvcNAQELBQADggEBAF4YQnR+hdXC4cVR q9wb4qmbwLtkjA7ljD7vH2IBMtIPKjOA2fCzQMB4Gcer/sMkhIA84K/8+ri4Z0VF 3rw2gu7OrTZ6yEEx2Ul1Og0j8HSoiQ2uEdJCpQU8cX8crF0XO1Sn+oz1X0vrcyMg NwITtU5gS36bjZhjGPDvS+h1jm6jU2Et8qhIjjRmyc9CgD7rLjhaIK4RewaB16k5 m8a88IhfD+PGRsKX4UPFzMDKMa/xuQrJIzBDrc/BkcUDYV8b4NyRqRC6kd6hftaF Br+o8lye+OwyU9Vad3KGemZeObG+oM/w3fdyqAwwUmcpHchpAv2ehlhd7tmdTq0R rhBn+bk= -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:23 2025 by rpki-client