This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.cer
File:                     6CBB5872C1432E2E2EB073D795852B3C3508301E.cer (raw, json)
Hash identifier:          aUe6wenVbT4PBkWmmhokArka/STtyRgYs3gLyhoHFJw=
Subject key identifier:   6C:BB:58:72:C1:43:2E:2E:2E:B0:73:D7:95:85:2B:3C:35:08:30:1E
Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
Certificate issuer:       /CN=B149F23A3E99C4760297DD7104B400C835D86D19
Certificate serial:       58E8BAC16F07604B47B9920D9AB71DC5971E25C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 13 Dec 2025 14:15:10 +0000
Certificate not after:    Sat 12 Dec 2026 14:20:10 +0000
Subordinate resources:    IP: 2a14:7583:f400::/44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 11:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e8:ba:c1:6f:07:60:4b:47:b9:92:0d:9a:b7:1d:c5:97:1e:25:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19
        Validity
            Not Before: Dec 13 14:15:10 2025 GMT
            Not After : Dec 12 14:20:10 2026 GMT
        Subject: CN=6CBB5872C1432E2E2EB073D795852B3C3508301E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:05:0b:76:d2:18:74:d0:07:39:aa:b1:f7:
                    36:ba:09:bc:5e:db:e7:7c:78:86:86:e9:0f:3b:d9:
                    07:e6:9b:37:5d:09:41:91:6a:48:a4:92:64:13:76:
                    96:de:f9:ad:3a:be:5b:70:b6:36:78:40:f9:ae:b7:
                    58:eb:c3:cf:25:0c:fa:55:e8:6d:0f:fc:e1:d0:11:
                    86:29:ce:97:ef:ff:89:e3:c7:82:8f:cc:ca:cd:58:
                    5c:fb:8d:2f:43:ba:f6:a5:66:a2:f1:66:60:63:c3:
                    9e:50:e1:e0:bb:e8:72:54:10:4f:1c:89:4a:7f:17:
                    f5:50:a9:b3:76:c7:62:d6:9c:48:72:ea:8c:7b:5c:
                    55:e3:25:c2:79:f9:01:fa:d8:0c:dd:77:91:b8:a5:
                    ec:5a:21:18:d3:7a:4b:75:d0:39:9b:a1:b6:c6:f0:
                    c8:0e:1d:02:6f:3f:ba:fa:c0:2f:ae:e2:cb:0b:30:
                    f7:14:bb:ab:3d:5f:65:ac:ab:88:d6:6e:2c:9d:5d:
                    46:7c:63:7b:5e:90:14:27:3c:8b:5f:55:81:ae:b4:
                    84:1b:ab:a1:d9:27:16:23:13:30:c3:c0:3c:ff:dc:
                    ff:2e:b6:a7:2e:ef:a5:39:53:65:fe:fe:b0:fe:80:
                    91:5f:29:74:f5:1b:ee:b7:ac:c2:b2:4f:27:26:4d:
                    04:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:BB:58:72:C1:43:2E:2E:2E:B0:73:D7:95:85:2B:3C:35:08:30:1E
            X509v3 Authority Key Identifier:
                keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f400::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:36:cd:77:dd:f3:1b:c2:51:30:72:fa:0a:cc:0a:13:63:
         b4:f4:a9:61:cd:99:bd:c5:56:eb:00:8f:18:23:0d:d0:5d:ce:
         79:bd:b8:16:6b:c5:37:16:06:b1:e9:30:4a:c5:a4:38:4d:23:
         8e:bd:61:0c:0d:f2:44:91:6a:70:e4:db:c9:bc:eb:a7:8c:38:
         e8:12:86:d9:f3:5c:3a:f6:e4:36:be:ab:fe:1d:23:3c:69:2e:
         d6:8f:91:38:d2:14:33:bb:13:08:fb:8c:9e:85:44:f0:d1:02:
         a1:66:3a:e6:96:1b:c8:9f:5a:ac:68:b3:b2:e9:de:45:00:4c:
         78:de:7a:52:80:70:ba:2f:c1:01:f6:0d:ce:8e:bd:8a:b3:47:
         16:b1:9d:ec:51:1e:61:3e:17:22:4b:f2:81:c8:60:f2:ed:0a:
         65:92:a6:cb:59:3e:47:3c:1d:32:01:5d:5f:c0:3b:ab:86:a4:
         18:b6:56:21:be:61:15:92:27:40:8d:d7:42:7f:af:7a:d3:dc:
         54:c3:1f:ee:90:e5:c2:04:50:43:e6:d8:cc:24:c8:6b:cc:db:
         66:a9:3b:48:da:98:f2:4b:ed:4a:f8:41:e8:97:9c:9d:43:93:
         b0:c7:4e:d6:25:fd:2b:13:a8:20:e5:9b:22:f2:5a:e5:8b:b1:
         5e:34:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----