This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
File:                     B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer (raw, json)
Hash identifier:          R3C6nta0H4BiE3WLWCAJkU+inEbP25YLe2f1xvmhyCo=
Subject key identifier:   B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       1D18EC9F3B7FDE59C0378977263F02E5675F1F65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 19 Dec 2025 14:45:06 +0000
Certificate not after:    Fri 18 Dec 2026 14:50:06 +0000
Subordinate resources:    IP: 2a14:7581:9900::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:18:ec:9f:3b:7f:de:59:c0:37:89:77:26:3f:02:e5:67:5f:1f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Dec 19 14:45:06 2025 GMT
            Not After : Dec 18 14:50:06 2026 GMT
        Subject: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:85:5f:f9:bd:cf:39:ca:25:f5:8d:8f:7a:
                    e0:0d:f2:09:d0:9f:79:f1:88:35:0b:ef:33:b8:ad:
                    92:32:44:b8:dd:9f:1c:4e:5c:92:62:b6:1f:c1:48:
                    52:43:d7:20:9b:f8:cd:40:b5:11:52:de:bc:45:a7:
                    ab:2c:66:7f:e7:1d:c7:04:63:55:24:1e:e2:70:ac:
                    6d:3a:7c:e2:f3:e3:9a:4b:47:f4:39:1b:63:6b:e1:
                    d6:9b:89:9d:83:85:e2:d2:cd:b5:dd:90:13:d2:2c:
                    48:fc:a5:1b:cf:66:b6:e0:6e:c5:83:2a:d8:eb:ed:
                    fe:5b:cc:a8:5e:e2:12:a6:ea:e0:16:c6:7e:3c:82:
                    1d:fe:05:20:14:d5:0a:8b:25:5e:63:91:18:6b:42:
                    6d:7c:04:d2:b7:b1:b7:a2:b0:88:06:c5:7f:e2:51:
                    d1:44:68:7f:7d:1e:3c:57:1d:c2:30:b1:61:86:2f:
                    54:59:89:77:7a:80:1c:6a:cf:5a:71:21:ce:20:d3:
                    8b:1c:90:71:9c:78:a4:5b:c8:d7:ab:08:15:e3:8c:
                    f6:74:63:b1:89:fb:a3:fe:6e:f7:f6:a4:94:18:55:
                    e7:78:11:97:1e:2d:4f:be:04:e2:4a:46:04:00:b2:
                    a0:ec:2d:ce:60:cf:de:b9:93:1c:53:cd:5f:01:e4:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9900::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:09:d9:62:62:ac:a1:03:3f:c5:d3:44:03:f5:84:e2:a9:30:
         2c:79:5d:4b:a1:6e:af:cf:7a:70:ea:f8:04:80:8d:c2:1a:95:
         f6:60:65:fb:58:99:0e:8c:db:ab:5c:bd:66:8f:52:d8:67:96:
         7c:b5:38:bc:75:ae:2e:76:b2:43:fd:1d:c6:eb:4e:d7:95:7a:
         1d:fd:2b:3c:67:1f:5c:b0:8d:9f:76:2f:17:5c:c6:87:b7:84:
         06:f4:52:bb:36:35:54:7c:cb:2a:28:66:f9:15:ec:ca:50:fe:
         4a:89:a9:4d:59:34:24:90:eb:4f:c9:0c:5f:b8:f2:d1:9c:e4:
         8f:30:e4:2d:7c:b8:32:e3:21:ad:04:f4:18:d5:e6:57:e9:70:
         bd:88:7e:08:e1:f9:38:fa:a6:11:75:ab:0b:9e:aa:ce:8c:fd:
         85:d9:60:bf:6e:91:6e:57:74:35:89:68:7f:d4:6b:c5:4e:ac:
         f4:79:a4:9a:ae:e7:d5:4b:ca:9b:69:dc:ee:c7:1b:e9:e4:57:
         ca:54:5e:8d:22:8c:f2:dd:b8:d4:63:7c:ce:fe:0a:62:a9:45:
         f1:43:75:ba:f0:eb:9a:bf:ba:3e:06:12:5e:e6:94:61:39:9d:
         34:fe:57:a5:e0:11:a6:f5:f3:5d:f6:a1:91:78:82:e6:2f:d5:
         33:c9:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----