This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
File:                     6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer (raw, json)
Hash identifier:          W+HO8geKxnrsSrA4saAs5TYSPA0bVhZHBTNxns4Da/E=
Subject key identifier:   6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       42287D465120A77E3EA88C533F9B8024313A94E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Fri 19 Dec 2025 21:19:12 +0000
Certificate not after:    Fri 18 Dec 2026 21:24:12 +0000
Subordinate resources:    IP: 2a11:f2c0:ffa0::/44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 23:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:28:7d:46:51:20:a7:7e:3e:a8:8c:53:3f:9b:80:24:31:3a:94:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Dec 19 21:19:12 2025 GMT
            Not After : Dec 18 21:24:12 2026 GMT
        Subject: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:01:e4:45:ee:61:34:d3:97:ae:e9:01:7c:
                    69:0e:7b:f0:21:44:eb:1c:0c:92:66:0e:6d:5c:3b:
                    05:2b:2a:58:73:7a:fa:a9:1d:9a:a6:bf:56:f4:58:
                    cd:a7:07:19:50:3e:28:26:73:b8:52:3b:46:45:ca:
                    01:8e:cb:5a:89:9f:c4:69:11:85:48:3a:3b:8f:97:
                    4a:9b:25:45:40:01:a3:ce:f9:ab:55:83:55:21:37:
                    8a:4c:e4:1a:4e:92:e4:d6:c9:cf:cb:b8:15:a7:f8:
                    08:17:77:31:7d:0b:84:cb:11:03:80:55:e3:09:f0:
                    63:40:28:ac:1e:28:21:64:aa:04:f2:9d:9d:da:6a:
                    a2:d8:a9:4c:50:71:66:23:7a:86:9c:be:7b:a1:9c:
                    15:07:ee:fa:e0:7a:94:b1:24:4d:e6:e1:7a:5a:08:
                    9c:b1:a9:20:7c:7b:9d:3d:3b:61:63:12:df:c0:12:
                    5e:04:04:51:13:1d:58:3d:cd:e4:8c:68:50:0e:8e:
                    b9:d3:e4:be:f4:b4:f6:bc:9d:8b:2b:b9:ae:b2:4d:
                    db:d7:a9:75:11:e5:18:ba:f0:2f:4a:7a:4f:0c:18:
                    d5:f1:3f:6f:66:b6:fe:75:d9:ba:ca:64:e5:3b:32:
                    f0:52:87:66:3e:74:14:79:ae:a4:fd:e8:89:b2:3c:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffa0::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:94:ef:4f:62:ce:64:bb:a9:a0:10:bd:18:cd:72:fb:59:bc:
         5a:d0:8d:eb:e5:9c:99:7d:0f:3a:bd:85:ae:63:d3:b8:38:25:
         47:38:ab:45:69:31:de:f2:81:ec:7f:3c:15:97:0f:9b:a3:ec:
         47:b2:b7:ba:1b:b7:e0:97:a2:82:ec:00:a5:71:f9:c4:b0:29:
         31:83:58:ec:63:d4:16:17:0b:47:c5:63:0e:9d:80:08:56:37:
         83:d0:f5:33:e4:88:1b:26:c0:e6:e1:45:b4:f8:63:8c:95:f6:
         c6:fd:d8:0a:10:7e:bc:a8:21:52:d1:70:b1:4d:23:a2:e9:e5:
         bc:d1:00:c3:5f:9e:e2:1f:69:b8:1d:af:50:6a:a5:25:a6:38:
         cc:84:4d:03:7e:3c:19:24:d2:57:d8:b0:fa:ae:02:fc:f9:46:
         65:58:09:cc:e9:22:6a:0a:2a:73:92:f5:6b:ad:d8:4c:d3:13:
         15:b9:99:6d:41:9c:89:e1:a9:10:a7:6a:ef:ca:fb:18:77:18:
         66:19:34:dc:16:5d:10:2f:c9:48:f2:57:2a:33:8b:bf:a4:f8:
         39:2d:54:b3:dd:26:9a:e2:f4:7c:ca:e0:ca:34:4b:4f:be:e9:
         47:90:da:ba:be:eb:af:a6:1e:37:8e:a2:73:0a:b9:d7:14:90:
         4c:ba:52:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----