This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer File: AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer (raw, json) Hash identifier: t7o8VSy2pBqoiCPsDAmDRmwAhfuVZ1ebkWc/z3uUsM4= Subject key identifier: AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 5571F8DE2A10D6586D7C71A9FB6593FB413B3C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 23 Dec 2025 15:45:36 +0000 Certificate not after: Tue 22 Dec 2026 15:50:36 +0000 Subordinate resources: IP: 2a0f:1cc5:1000::/40 IP: 2a0f:1cc5:2f00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:71:f8:de:2a:10:d6:58:6d:7c:71:a9:fb:65:93:fb:41:3b:3c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 23 15:45:36 2025 GMT Not After : Dec 22 15:50:36 2026 GMT Subject: CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c6:53:68:62:ed:7c:df:d9:79:55:1f:2c:4c: 79:b2:f0:73:bd:e9:ac:a5:72:69:da:c0:47:57:dd: 91:f3:f2:8c:8b:e3:73:30:c6:06:36:ef:29:4a:a4: 06:7b:d0:6b:e3:53:c6:a5:9c:ed:5b:c2:09:d2:59: b7:4b:6a:84:4f:50:1e:00:19:2c:53:51:7e:81:d1: 8f:ff:85:6d:4f:9a:20:86:af:e5:d2:b6:d0:a0:f2: 2b:ed:b7:cf:be:96:d5:18:ca:75:e0:b1:07:89:27: 0e:ab:84:c5:bb:52:e1:0e:0a:04:e7:24:1a:96:53: 0e:d2:5c:0b:d8:57:00:10:bb:65:c5:31:03:58:fa: 2a:e9:36:4f:5a:dd:4b:79:47:2c:d3:ef:dc:18:63: ca:33:b7:7e:8c:31:a1:dd:a3:0b:36:a3:4b:90:ff: 54:51:00:c7:ae:f5:9b:44:4b:5d:65:81:04:70:e6: c0:db:a4:68:c2:09:f0:d8:ed:7d:3f:70:43:d9:c1: a8:ef:77:68:a5:2a:a4:2e:85:76:85:43:a2:78:6e: 2e:5d:ae:21:8c:d6:a1:ca:98:c1:f9:c8:44:30:a8: 33:a8:59:85:f9:71:67:de:b1:1a:ca:64:91:64:88: 29:bb:d9:5d:e5:17:fb:6a:38:0c:de:af:92:a0:37: d1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1000::/40 2a0f:1cc5:2f00::/40 Signature Algorithm: sha256WithRSAEncryption 4f:b4:df:0d:57:a9:b0:c1:d1:57:9e:c4:c5:b6:57:0f:82:17: 4e:de:19:b6:f2:4a:7e:d3:e6:d3:f8:b1:29:d1:2a:1a:8c:50: f8:69:93:0e:f9:0f:5d:7a:90:9c:3d:59:21:8c:de:52:d6:7d: 8a:67:1d:11:03:b5:4c:09:81:8e:a4:95:35:2f:d9:51:31:36: c6:2b:eb:c8:55:20:d7:96:66:d8:fa:ef:fa:36:ee:65:75:73: 95:e5:54:da:81:ef:fe:bc:b2:d5:be:eb:e8:64:f9:c1:22:7f: 0e:ea:b6:7b:56:f4:6e:72:c9:a3:cc:12:16:19:fa:4d:88:e1: 24:0e:a8:6b:3e:3c:aa:64:69:d7:8c:21:e9:92:6c:56:88:46: 83:99:1c:0b:a3:9b:c9:c8:8c:db:dd:c4:d5:17:ce:17:ae:38: 60:3a:75:fb:8a:0c:92:ea:5b:39:39:68:7a:89:ba:a9:c5:3f: 3a:54:dc:2c:52:d5:78:67:7f:52:b9:61:c3:9a:31:e8:ad:3d: 46:0a:54:81:22:ae:94:e5:0e:56:62:87:07:da:4e:ca:8f:92: 97:2c:b9:39:a5:1c:c1:16:94:26:3f:79:aa:6e:cf:5b:6b:d0: 9c:3a:2d:7d:54:38:09:70:5b:45:d6:97:bb:1c:1d:6c:73:94: 04:99:b4:1d -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUVXH43ioQ1lhtfHGp+2WT+0E7PIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMjMxNTQ1MzZaFw0yNjEyMjIxNTUwMzZaMDMxMTAvBgNV BAMTKEFFRUFFRUZGMUMxQzI2QjFBMDA4QzIyQzg0M0FCNDVEQ0FEMTU3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmxlNoYu1839l5VR8sTHmy8HO9 6aylcmnawEdX3ZHz8oyL43MwxgY27ylKpAZ70GvjU8alnO1bwgnSWbdLaoRPUB4A GSxTUX6B0Y//hW1PmiCGr+XSttCg8ivtt8++ltUYynXgsQeJJw6rhMW7UuEOCgTn JBqWUw7SXAvYVwAQu2XFMQNY+irpNk9a3Ut5RyzT79wYY8ozt36MMaHdows2o0uQ /1RRAMeu9ZtES11lgQRw5sDbpGjCCfDY7X0/cEPZwajvd2ilKqQuhXaFQ6J4bi5d riGM1qHKmMH5yEQwqDOoWYX5cWfesRrKZJFkiCm72V3lF/tqOAzer5KgN9GxAgMB AAGjggLrMIIC5zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSu6u7/HBwmsaAI wiyEOrRdytFX7TAfBgNVHSMEGDAWgBR1qDjgLGGAD3PTAZ3gpR9We2S8DjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC83NUE4MzhFMDJDNjE4MDBGNzNEMzAxOURF MEE1MUY1NjdCNjRCQzBFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGFnNDRD eGhnQTl6MHdHZDRLVWZWbnRrdkE0LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1ZWZjLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMv Mi9BRUVBRUVGRjFDMUMyNkIxQTAwOEMyMkM4NDNBQjQ1RENBRDE1N0VELm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqDxzFEAMGACoPHMUvMA0GCSqGSIb3DQEBCwUA A4IBAQBPtN8NV6mwwdFXnsTFtlcPghdO3hm28kp+0+bT+LEp0SoajFD4aZMO+Q9d epCcPVkhjN5S1n2KZx0RA7VMCYGOpJU1L9lRMTbGK+vIVSDXlmbY+u/6Nu5ldXOV 5VTage/+vLLVvuvoZPnBIn8O6rZ7VvRucsmjzBIWGfpNiOEkDqhrPjyqZGnXjCHp kmxWiEaDmRwLo5vJyIzb3cTVF84XrjhgOnX7igyS6ls5OWh6ibqpxT86VNwsUtV4 Z39SuWHDmjHorT1GClSBIq6U5Q5WYocH2k7Kj5KXLLk5pRzBFpQmP3mqbs9ba9Cc Oi19VDgJcFtF1pe7HB1sc5QEmbQd -----END CERTIFICATE-----Generated at Wed Dec 24 10:44:49 2025 by rpki-client