This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer File: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer (raw, json) Hash identifier: b3gh39rnom8L7TahZLYoexvTFieOpJ3nHE2Mu7RZqwU= Subject key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 6D9E72F9A82B22B394C731A9589DE16C0352691A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 14:41:04 +0000 Certificate not after: Fri 18 Dec 2026 14:46:04 +0000 Subordinate resources: IP: 2a14:7580:ff40::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9e:72:f9:a8:2b:22:b3:94:c7:31:a9:58:9d:e1:6c:03:52:69:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 19 14:41:04 2025 GMT Not After : Dec 18 14:46:04 2026 GMT Subject: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:a4:02:43:cd:ef:83:cd:58:31:d7:e9:e7: 9e:d0:f6:f8:e3:e4:72:e3:ec:f4:60:da:2d:8c:a6: df:f2:ce:4a:ef:92:5e:b5:4d:e2:80:8e:7c:6f:c9: 6d:31:70:38:c0:de:33:aa:aa:a2:5c:51:ed:42:b6: 05:f0:b9:fe:8f:d6:cb:2b:10:c8:04:56:11:67:98: 5c:09:a5:17:9c:e7:f2:79:64:c9:6e:66:ff:cb:90: dc:40:f8:62:29:b1:1c:45:1f:49:fd:6d:8b:9a:22: 45:3b:15:fe:68:19:02:97:e0:e5:ab:ac:79:2b:00: 36:98:95:d1:b8:57:fe:e2:33:56:e2:6b:45:01:04: 75:3a:3c:1b:ce:f1:f8:be:9c:2a:57:ed:e9:0a:05: 85:ee:13:f3:6f:63:50:e6:3e:53:bf:e5:00:4c:a8: 5c:ba:bf:6c:38:1f:ec:ed:a9:57:6f:81:a2:59:9b: c2:03:08:0a:8d:5b:b3:c7:f9:1e:4e:0d:9c:3e:20: 5c:2f:fc:0a:9d:af:09:a4:fd:d5:fc:77:b0:4e:a4: 71:17:8c:a6:ef:9e:15:40:ab:c2:da:e9:32:0f:47: ef:c7:9f:9a:fb:eb:47:ad:80:d3:99:b4:1a:0e:d3: 6a:26:69:af:57:93:54:36:96:79:4e:7f:2e:52:2c: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff40::/44 Signature Algorithm: sha256WithRSAEncryption 8c:2d:43:d6:7c:f9:74:65:8f:2f:89:6e:09:de:cb:cf:9f:66: 1c:6e:08:76:a6:83:09:68:41:26:9d:c7:56:cb:14:c0:6e:67: da:74:95:00:38:5b:d6:1c:7a:a6:93:65:53:fb:03:ce:de:11: 27:8f:2a:0a:08:2a:35:ee:b5:5c:ce:77:ca:35:a1:b3:df:e4: 00:89:9c:8b:ee:f7:a3:e5:de:74:16:a5:1b:28:98:3f:e4:74: 05:9f:21:cc:e5:f5:10:84:b1:6e:62:74:bc:fc:2c:ac:c7:25: b5:42:26:55:24:df:7f:d5:74:70:1f:0b:69:a7:fa:e4:e3:92: 1c:30:d3:2a:04:09:f5:8e:e5:a0:1a:09:82:26:35:b4:b4:50: 04:e1:28:ec:2e:48:1c:76:47:f5:b3:be:f8:55:64:9f:f3:35: 96:f6:fc:3e:dc:5c:18:8e:c9:35:53:df:bd:5d:8c:f1:76:02: 0b:d6:f5:01:73:f0:cf:eb:a2:33:cd:51:65:26:11:cb:b1:95: 88:21:4d:af:d5:7b:11:5e:ee:98:f4:13:73:31:2f:dd:5d:72: 5f:e6:b0:25:97:25:18:6c:2f:b5:0f:12:4a:e4:20:65:40:3d: 3b:c5:6a:0f:f5:20:8a:c8:2c:b8:fe:39:97:f5:b7:a0:a0:e5: 3a:c4:f9:c4 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUbZ5y+agrIrOUxzGpWJ3hbANSaRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTkxNDQxMDRaFw0yNjEyMTgxNDQ2MDRaMDMxMTAvBgNV BAMTKEJCMEIwMjgwNkFFM0MzNEY0NTNBREVEREUzNkFERjQzMkZDREY5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSa6QCQ83vg81YMdfp557Q9vjj 5HLj7PRg2i2Mpt/yzkrvkl61TeKAjnxvyW0xcDjA3jOqqqJcUe1CtgXwuf6P1ssr EMgEVhFnmFwJpRec5/J5ZMluZv/LkNxA+GIpsRxFH0n9bYuaIkU7Ff5oGQKX4OWr rHkrADaYldG4V/7iM1bia0UBBHU6PBvO8fi+nCpX7ekKBYXuE/NvY1DmPlO/5QBM qFy6v2w4H+ztqVdvgaJZm8IDCAqNW7PH+R5ODZw+IFwv/Aqdrwmk/dX8d7BOpHEX jKbvnhVAq8La6TIPR+/Hn5r760etgNOZtBoO02omaa9Xk1Q2lnlOfy5SLJEFAgMB AAGjggLkMIIC4DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7CwKAauPDT0U6 3t3jat9DL835xDAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2ZDE1LzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUv Mi9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERFMzZBREY0MzJGQ0RGOUM0Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQqFHWA/0AwDQYJKoZIhvcNAQELBQADggEBAIwt Q9Z8+XRljy+Jbgney8+fZhxuCHamgwloQSadx1bLFMBuZ9p0lQA4W9YceqaTZVP7 A87eESePKgoIKjXutVzOd8o1obPf5ACJnIvu96Pl3nQWpRsomD/kdAWfIczl9RCE sW5idLz8LKzHJbVCJlUk33/VdHAfC2mn+uTjkhww0yoECfWO5aAaCYImNbS0UATh KOwuSBx2R/WzvvhVZJ/zNZb2/D7cXBiOyTVT371djPF2AgvW9QFz8M/rojPNUWUm EcuxlYghTa/VexFe7pj0E3MxL91dcl/msCWXJRhsL7UPEkrkIGVAPTvFag/1IIrI LLj+OZf1t6Cg5TrE+cQ= -----END CERTIFICATE-----Generated at Sun Dec 21 09:42:08 2025 by rpki-client