This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
File:                     87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer (raw, json)
Hash identifier:          zC8qHIRZw68KmzSHUlAeH401vM9Yre8zhPuAN5g4yck=
Subject key identifier:   87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       67C906E147A5F71B7CA503DFC4EFCB61F1053A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 18 Dec 2025 07:24:56 +0000
Certificate not after:    Thu 17 Dec 2026 07:29:56 +0000
Subordinate resources:    IP: 2a14:7581:9900::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c9:06:e1:47:a5:f7:1b:7c:a5:03:df:c4:ef:cb:61:f1:05:3a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Dec 18 07:24:56 2025 GMT
            Not After : Dec 17 07:29:56 2026 GMT
        Subject: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:93:62:2f:ec:fd:d1:10:4a:dc:2e:cf:3e:
                    ff:76:73:9a:1c:65:17:68:ca:67:0d:83:c4:02:f2:
                    4c:25:70:95:07:27:69:02:4b:7a:4a:e0:de:7f:f6:
                    95:9a:b7:ca:7b:b7:c0:c9:42:05:24:bb:33:95:48:
                    64:28:81:62:12:47:5c:31:8c:ea:21:8e:6f:a5:a4:
                    21:0d:71:2e:44:75:d2:37:e2:11:91:18:01:79:11:
                    85:88:9b:8f:3c:36:d5:7b:89:04:3c:3b:4c:01:0e:
                    1f:21:cd:6c:c1:c1:19:1e:cb:29:70:d9:fe:9c:74:
                    f9:43:68:e3:15:79:48:01:55:bc:56:63:bc:ad:4d:
                    b8:c7:cf:11:a6:e6:f7:68:b7:fe:87:ee:af:8e:1d:
                    c0:ed:63:b2:63:b2:27:84:9c:99:a8:a8:29:bd:ef:
                    c8:f1:48:6f:a2:c6:7a:10:42:6b:f6:bb:38:52:ca:
                    c2:dd:85:bd:13:29:1d:8d:48:af:de:4c:6d:8c:60:
                    e2:cd:c2:74:04:a4:24:8a:30:2a:78:e1:86:e4:ad:
                    53:f9:fe:be:82:da:ff:b5:96:4b:d1:71:03:5a:44:
                    40:64:39:c8:a8:ed:82:d3:d0:de:dc:9d:3c:ec:53:
                    41:ae:aa:61:73:67:11:5f:01:11:f7:fe:a2:1a:64:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9900::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:85:9e:57:b4:99:82:8c:cc:02:a1:0f:89:ef:6c:bb:0b:cb:
         3d:43:c7:02:06:fc:d4:f2:56:8b:a8:f3:af:ab:be:b1:42:f3:
         32:7d:83:dc:71:6d:41:d6:fd:12:1f:59:43:7e:a4:c1:a7:c3:
         a0:aa:0a:04:d7:03:7d:7e:af:17:ce:7c:fc:11:db:ec:9c:13:
         c9:fa:b8:a6:5a:61:33:ca:53:36:6a:96:c4:d9:a4:20:d4:e5:
         3a:40:03:9a:b9:0e:31:49:e4:34:1c:04:58:54:bf:d2:68:63:
         bf:a5:77:3b:70:99:61:5f:14:17:cf:16:8e:8f:76:9d:91:22:
         af:2f:85:ac:6e:04:2f:f2:2f:aa:d0:67:e7:be:7d:7c:cc:8f:
         1f:3e:91:d4:0d:52:72:4b:45:2e:58:c7:34:8e:99:aa:4f:52:
         bb:00:a4:a8:91:59:19:b3:8b:c4:81:7f:4e:86:f7:d6:2b:a5:
         e4:87:a6:20:96:66:22:af:a2:3b:c8:7d:5c:68:d0:01:1a:0f:
         65:6a:84:b5:af:e8:02:64:48:da:50:fb:bf:64:49:cc:d1:7b:
         35:55:6b:04:de:5d:da:cc:56:50:3a:90:4d:9e:3a:de:66:56:
         25:f7:28:95:56:fc:03:92:42:19:1c:cf:6b:ad:45:bc:2a:c5:
         68:30:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----