This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/514B8293389DEFDD9849D045DD45ECCF576747FA.cer File: 514B8293389DEFDD9849D045DD45ECCF576747FA.cer (raw, json) Hash identifier: pqfJ77hj0XuEro/xmw3auziFdy1SKlEtalpLUNWPzbc= Subject key identifier: 51:4B:82:93:38:9D:EF:DD:98:49:D0:45:DD:45:EC:CF:57:67:47:FA Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 0CAE0911943C19A49491264FA2B15F40B59D3D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 14 Dec 2025 08:52:05 +0000 Certificate not after: Sun 13 Dec 2026 08:57:05 +0000 Subordinate resources: IP: 2a0f:1cc5:1600::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ae:09:11:94:3c:19:a4:94:91:26:4f:a2:b1:5f:40:b5:9d:3d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 14 08:52:05 2025 GMT Not After : Dec 13 08:57:05 2026 GMT Subject: CN=514B8293389DEFDD9849D045DD45ECCF576747FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:52:95:74:7d:53:85:b5:ca:a6:fa:b1:0b:27: 9e:e8:59:a1:05:cf:58:91:27:0b:48:25:6b:51:e6: f4:cd:3d:2e:5b:1d:ab:ce:28:4f:a2:7b:97:1d:c5: c2:1b:d5:dc:5a:3e:1e:f3:e2:95:58:c0:64:15:77: 56:2a:7b:f3:4c:8c:66:8d:0b:68:23:df:d5:6f:cc: 52:f5:36:bd:84:51:3b:3b:0b:29:d9:1f:09:9d:8e: e3:99:02:bc:7d:25:7a:e2:a8:9c:8b:87:37:ed:93: dd:b2:39:86:4c:0a:19:6d:a9:3d:f2:86:db:85:bb: 93:6c:7b:ad:20:b4:53:a4:33:84:5b:9b:4a:9f:fd: 4b:26:27:66:00:ac:56:bb:b5:df:87:67:ca:9c:93: 5e:46:7c:a6:2a:a1:32:16:7c:ed:97:0e:0e:90:72: 64:bf:dd:6f:73:49:45:7f:ef:80:2b:2f:51:69:10: 35:b3:69:bf:5d:dd:e2:16:ff:9f:9f:00:dc:58:cd: 0e:dc:c9:7f:c2:ad:a8:58:5b:51:fc:3b:6d:94:41: fb:2f:75:12:7c:e3:82:7b:00:f6:63:b6:4b:32:95: 11:33:ff:0b:46:cd:2a:6c:00:48:4e:06:3b:3a:2b: 4c:8c:92:be:0c:ba:dc:9a:31:9a:6c:bf:64:29:32: 6e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:4B:82:93:38:9D:EF:DD:98:49:D0:45:DD:45:EC:CF:57:67:47:FA X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1600::/40 Signature Algorithm: sha256WithRSAEncryption 6c:95:bb:05:6c:9b:78:70:59:69:b1:06:fa:93:17:0b:25:d3: 86:ab:00:90:c4:6c:5b:a7:3a:8b:d2:c7:de:fc:bb:ba:d9:36: 64:36:c0:23:6b:5d:f1:de:54:76:31:df:8c:ba:a0:7d:c9:a7: 4b:2e:8b:ba:48:f6:9c:ce:ec:ae:17:4e:7c:49:4b:84:e7:a9: 56:92:fb:e5:b6:d6:9c:0f:42:dc:4b:bb:ef:4f:cc:c2:23:62: 3f:bf:5a:ac:18:71:e0:61:5d:8e:a5:cb:5f:9c:7c:d2:7e:6a: 4f:37:4f:6d:05:9f:46:5f:21:0f:5d:d8:da:5e:a6:b3:91:b6: 21:ae:41:1c:b4:c7:5a:c3:ab:70:ac:1c:48:78:5f:fa:f0:0c: 96:ab:b5:d8:2f:32:5c:93:1d:29:28:c6:ff:7b:ec:14:2a:4b: 99:f3:a5:fc:cd:a4:a3:54:aa:5a:04:94:ee:da:60:11:8e:f9: d5:cf:fc:92:fb:7d:99:2f:4c:99:31:d5:64:7b:b8:af:40:85: 37:83:a6:7c:e6:38:4d:f1:f4:76:85:b8:7e:1e:62:ec:22:45: a5:27:ed:46:35:17:87:a0:15:73:04:b6:17:e3:f7:d0:a6:9d: 1b:6a:8b:cc:e4:a7:50:19:b0:44:51:e4:ab:57:1d:36:f4:ad: 09:d7:94:8d -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUDK4JEZQ8GaSUkSZPorFfQLWdPTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTQwODUyMDVaFw0yNjEyMTMwODU3MDVaMDMxMTAvBgNV BAMTKDUxNEI4MjkzMzg5REVGREQ5ODQ5RDA0NURENDVFQ0NGNTc2NzQ3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrUpV0fVOFtcqm+rELJ57oWaEF z1iRJwtIJWtR5vTNPS5bHavOKE+ie5cdxcIb1dxaPh7z4pVYwGQVd1Yqe/NMjGaN C2gj39VvzFL1Nr2EUTs7CynZHwmdjuOZArx9JXriqJyLhzftk92yOYZMChltqT3y htuFu5Nse60gtFOkM4Rbm0qf/UsmJ2YArFa7td+HZ8qck15GfKYqoTIWfO2XDg6Q cmS/3W9zSUV/74ArL1FpEDWzab9d3eIW/5+fANxYzQ7cyX/CrahYW1H8O22UQfsv dRJ844J7APZjtksylREz/wtGzSpsAEhOBjs6K0yMkr4MutyaMZpsv2QpMm6ZAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRS4KTOJ3v3ZhJ 0EXdRezPV2dH+jAfBgNVHSMEGDAWgBR1qDjgLGGAD3PTAZ3gpR9We2S8DjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC83NUE4MzhFMDJDNjE4MDBGNzNEMzAxOURF MEE1MUY1NjdCNjRCQzBFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGFnNDRD eGhnQTl6MHdHZDRLVWZWbnRrdkE0LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFmYWIyLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8wMTU3NjQ3Yy05MWQ2LTRhMDQtOGE5MS1kMTUzODVkMWZhYjIv Mi81MTRCODI5MzM4OURFRkREOTg0OUQwNDVERDQ1RUNDRjU3Njc0N0ZBLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqDxzFFjANBgkqhkiG9w0BAQsFAAOCAQEAbJW7 BWybeHBZabEG+pMXCyXThqsAkMRsW6c6i9LH3vy7utk2ZDbAI2td8d5UdjHfjLqg fcmnSy6Lukj2nM7srhdOfElLhOepVpL75bbWnA9C3Eu770/MwiNiP79arBhx4GFd jqXLX5x80n5qTzdPbQWfRl8hD13Y2l6ms5G2Ia5BHLTHWsOrcKwcSHhf+vAMlqu1 2C8yXJMdKSjG/3vsFCpLmfOl/M2ko1SqWgSU7tpgEY751c/8kvt9mS9MmTHVZHu4 r0CFN4OmfOY4TfH0doW4fh5i7CJFpSftRjUXh6AVcwS2F+P30KadG2qLzOSnUBmw RFHkq1cdNvStCdeUjQ== -----END CERTIFICATE-----Generated at Fri Dec 19 05:02:05 2025 by rpki-client