This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.cer File: 728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.cer (raw, json) Hash identifier: x2G6ZmQBzhW2fLa4nGde3gj+SgCuEb/VUHDhOpOsxyc= Subject key identifier: 72:8A:DA:CF:C0:AC:11:B4:A0:FB:4C:53:F0:8C:CB:29:0C:FA:CD:B9 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 36D0620F7F5053622AB1E61675DFD33608BD9E7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 17 Dec 2025 19:43:27 +0000 Certificate not after: Wed 16 Dec 2026 19:48:27 +0000 Subordinate resources: IP: 2a14:7583::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d0:62:0f:7f:50:53:62:2a:b1:e6:16:75:df:d3:36:08:bd:9e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 17 19:43:27 2025 GMT Not After : Dec 16 19:48:27 2026 GMT Subject: CN=728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:81:07:d1:b9:27:82:a2:5b:5f:cb:49:72: be:24:35:34:fe:50:c9:0c:b5:0f:cc:1d:e1:9c:3b: f1:1a:e4:ca:b6:48:ce:3c:55:20:6e:48:f8:dc:d4: 81:1a:cc:88:29:96:4c:a5:00:9d:0b:19:94:6f:d7: 4a:0a:10:ec:17:c7:49:78:73:2e:9b:7c:5a:b1:19: 6a:a2:59:cb:10:47:c8:17:10:16:47:c1:67:93:ea: 72:c3:ee:ca:9a:d9:5c:13:63:ef:fe:e6:e0:37:6e: 04:6f:ac:67:23:d6:9e:af:0a:76:c7:46:2e:a1:14: e0:c4:a2:7d:2a:a6:a9:52:c9:85:24:72:0a:c0:ad: 20:44:19:b0:09:06:0a:19:3c:1c:75:df:66:ed:ab: 5c:5d:4d:ed:ec:13:19:56:75:29:e2:02:9b:ee:3a: 46:88:c8:cd:13:5d:b5:59:15:c5:94:ae:1b:ac:64: 40:14:73:76:f5:8e:74:00:23:1e:5b:e9:78:4f:c8: 1c:34:f5:3b:cb:bf:f3:5f:52:c7:5c:13:e0:06:0e: fc:8a:32:a4:54:c6:54:fa:ef:c2:a4:74:b5:73:80: e1:b5:2b:eb:58:c0:53:89:11:2f:34:e2:23:1b:d3: 24:bc:a2:5b:be:b1:02:92:bd:e2:3b:72:7f:9e:eb: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:8A:DA:CF:C0:AC:11:B4:A0:FB:4C:53:F0:8C:CB:29:0C:FA:CD:B9 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583::/36 Signature Algorithm: sha256WithRSAEncryption 12:4c:59:34:41:3f:3c:73:02:87:95:48:52:ec:81:8e:bc:2e: 05:ba:33:7b:7b:dd:cb:20:eb:e9:0c:8b:36:6e:5a:4e:31:15: 26:ad:ab:79:2e:7a:2c:43:8c:66:7b:d6:d4:d8:b4:d9:ad:5e: e3:41:53:c8:89:90:cd:49:e0:09:02:8b:22:a2:75:da:a3:82: 76:9e:6e:99:2e:44:94:de:55:85:ce:42:40:e6:af:66:72:ca: 08:a0:98:a1:6b:79:99:1e:27:62:74:fa:ce:fb:50:ae:e3:22: 8f:39:f8:24:45:fa:ba:73:59:d9:ef:a2:6d:ce:9b:df:94:fc: 36:b4:7d:40:98:e8:69:ed:32:e6:0e:68:8d:df:d3:6a:c3:c9: 59:f7:e7:e9:9d:41:db:6c:e1:e5:15:52:24:29:42:18:e7:ca: 76:cf:ad:e1:33:74:1d:5e:7a:71:77:bd:3b:17:75:52:57:5a: 61:f5:0f:80:77:da:6a:16:47:a8:4a:91:a9:a1:ec:26:a8:f5: 27:40:8d:cf:ec:cc:da:0f:2e:3e:72:77:7e:22:c2:6c:ce:0f: c2:5e:ad:86:97:79:3d:ad:e2:d3:43:20:f6:85:b1:ea:1b:69: fb:bd:4d:7d:a7:7b:54:2e:e2:ce:ff:64:e6:d3:8d:8a:08:1a: 29:76:74:ac -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUNtBiD39QU2IqseYWdd/TNgi9nn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTcxOTQzMjdaFw0yNjEyMTYxOTQ4MjdaMDMxMTAvBgNV BAMTKDcyOEFEQUNGQzBBQzExQjRBMEZCNEM1M0YwOENDQjI5MENGQUNEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwq4EH0bkngqJbX8tJcr4kNTT+ UMkMtQ/MHeGcO/Ea5Mq2SM48VSBuSPjc1IEazIgplkylAJ0LGZRv10oKEOwXx0l4 cy6bfFqxGWqiWcsQR8gXEBZHwWeT6nLD7sqa2VwTY+/+5uA3bgRvrGcj1p6vCnbH Ri6hFODEon0qpqlSyYUkcgrArSBEGbAJBgoZPBx132btq1xdTe3sExlWdSniApvu OkaIyM0TXbVZFcWUrhusZEAUc3b1jnQAIx5b6XhPyBw09TvLv/NfUsdcE+AGDvyK MqRUxlT678KkdLVzgOG1K+tYwFOJES804iMb0yS8olu+sQKSveI7cn+e6+k/AgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRyitrPwKwRtKD7 TFPwjMspDPrNuTAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvOTg0MTg1YjctMDM0My00YTY0LWFhMzQtODJmNjFlYzBkZmRjLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS85ODQxODViNy0wMzQzLTRhNjQtYWEzNC04MmY2MWVjMGRmZGMv MC83MjhBREFDRkMwQUMxMUI0QTBGQjRDNTNGMDhDQ0IyOTBDRkFDREI5Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWDADANBgkqhkiG9w0BAQsFAAOCAQEAEkxZ NEE/PHMCh5VIUuyBjrwuBboze3vdyyDr6QyLNm5aTjEVJq2reS56LEOMZnvW1Ni0 2a1e40FTyImQzUngCQKLIqJ12qOCdp5umS5ElN5Vhc5CQOavZnLKCKCYoWt5mR4n YnT6zvtQruMijzn4JEX6unNZ2e+ibc6b35T8NrR9QJjoae0y5g5ojd/TasPJWffn 6Z1B22zh5RVSJClCGOfKds+t4TN0HV56cXe9Oxd1UldaYfUPgHfaahZHqEqRqaHs Jqj1J0CNz+zM2g8uPnJ3fiLCbM4Pwl6thpd5Pa3i00Mg9oWx6htp+71Nfad7VC7i zv9k5tONiggaKXZ0rA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:55:02 2025 by rpki-client