This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.cer File: F968DCAEB06DC8F26E0E5B9735B0022903D73C76.cer (raw, json) Hash identifier: a9Q+reDXL5LDO4/RArru5qwg/DRAUP4w8XxQyixt/cg= Subject key identifier: F9:68:DC:AE:B0:6D:C8:F2:6E:0E:5B:97:35:B0:02:29:03:D7:3C:76 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 08461B060AF823992C099E3421C4829AFA0BD8F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 13 Dec 2025 07:14:12 +0000 Certificate not after: Sat 12 Dec 2026 07:19:12 +0000 Subordinate resources: IP: 2a0f:1cc5:f00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:46:1b:06:0a:f8:23:99:2c:09:9e:34:21:c4:82:9a:fa:0b:d8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 13 07:14:12 2025 GMT Not After : Dec 12 07:19:12 2026 GMT Subject: CN=F968DCAEB06DC8F26E0E5B9735B0022903D73C76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:cc:c4:8c:c0:9d:26:5f:f0:51:2c:ef:c7: 5e:08:47:81:21:e5:39:ee:0a:0e:d5:e7:42:39:31: 9c:ce:80:62:c2:ed:6d:52:79:0a:b4:f6:9b:8a:7c: bc:04:3d:69:a6:1b:3a:cc:ec:51:36:76:69:8e:0a: ea:e5:52:b0:c8:8b:b6:a5:2b:07:85:bb:51:62:87: 72:5c:83:43:9f:9d:a8:d4:70:2c:9e:c3:32:8f:b9: fd:b0:a5:c8:83:38:75:32:c0:3d:9b:51:4c:c8:6a: 23:6b:53:13:9a:2c:4a:57:af:b9:b7:5f:59:56:13: ab:bf:5e:9a:f2:d2:c7:13:0a:b0:eb:1b:d6:b8:cd: 2f:cf:65:df:0b:d6:e8:b2:be:49:a7:78:4a:2d:0e: 5f:77:03:48:82:13:97:b4:5f:df:33:a4:27:36:47: ac:0c:fe:86:ed:1a:a4:4f:27:65:b4:be:c9:a7:dd: 8f:c6:8d:64:5d:65:bd:85:e1:f5:49:f3:9f:ae:62: 13:1f:84:2f:cb:9a:b5:b2:9c:93:9e:54:ca:db:aa: 52:eb:33:5c:1f:b4:64:09:f7:2c:7c:bb:4f:ca:19: 8b:46:6d:f0:f9:7d:de:02:43:83:89:88:c6:f4:41: 05:b4:86:bd:e9:d1:df:a9:c2:7d:a4:17:2d:41:c8: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:68:DC:AE:B0:6D:C8:F2:6E:0E:5B:97:35:B0:02:29:03:D7:3C:76 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:f00::/40 Signature Algorithm: sha256WithRSAEncryption 45:a9:41:da:76:79:53:ba:f7:49:b3:21:e8:32:26:3d:02:0d: 80:fb:3b:11:76:87:c2:61:26:a8:99:0b:1a:5a:22:d9:92:35: bb:fb:4f:45:58:de:1f:6c:98:55:18:06:31:d4:cb:71:0f:97: ff:83:e5:58:68:00:06:4a:e6:08:f9:e5:1e:83:40:ad:81:d2: 06:fe:b1:69:ca:ba:da:c1:bf:64:93:8a:04:e8:b9:a4:25:64: 4f:a3:6d:f0:32:2e:58:ee:cc:55:b5:72:09:a7:4b:c1:59:97: 17:b1:23:d0:34:7d:b9:2f:27:38:fd:73:7d:99:33:87:f5:93: 05:ec:34:8c:53:d2:99:fc:dd:fe:a0:5e:38:54:e3:32:64:45: 64:58:bb:70:88:97:77:1d:a8:f7:db:b4:95:cf:33:1e:45:2e: d4:d5:35:51:cd:62:f9:bd:79:8a:07:a3:c7:c3:2e:9a:f8:3c: d8:05:3d:ce:55:8d:31:5e:79:cc:9f:b2:05:fa:11:be:92:34: 40:0b:61:72:2a:3c:91:08:44:dc:a3:1d:42:e6:de:05:89:aa: ae:75:ef:03:c7:3d:45:5d:87:7d:8b:41:cb:74:df:87:0f:89: 0a:a6:49:bc:04:10:14:da:b6:04:b8:4e:d1:6d:07:5b:f0:62: cc:65:17:62 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUCEYbBgr4I5ksCZ40IcSCmvoL2PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTMwNzE0MTJaFw0yNjEyMTIwNzE5MTJaMDMxMTAvBgNV BAMTKEY5NjhEQ0FFQjA2REM4RjI2RTBFNUI5NzM1QjAwMjI5MDNENzNDNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjGMzEjMCdJl/wUSzvx14IR4Eh 5TnuCg7V50I5MZzOgGLC7W1SeQq09puKfLwEPWmmGzrM7FE2dmmOCurlUrDIi7al KweFu1Fih3Jcg0OfnajUcCyewzKPuf2wpciDOHUywD2bUUzIaiNrUxOaLEpXr7m3 X1lWE6u/Xpry0scTCrDrG9a4zS/PZd8L1uiyvkmneEotDl93A0iCE5e0X98zpCc2 R6wM/obtGqRPJ2W0vsmn3Y/GjWRdZb2F4fVJ85+uYhMfhC/LmrWynJOeVMrbqlLr M1wftGQJ9yx8u0/KGYtGbfD5fd4CQ4OJiMb0QQW0hr3p0d+pwn2kFy1ByPjXAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5aNyusG3I8m4O W5c1sAIpA9c8djAfBgNVHSMEGDAWgBR1qDjgLGGAD3PTAZ3gpR9We2S8DjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC83NUE4MzhFMDJDNjE4MDBGNzNEMzAxOURF MEE1MUY1NjdCNjRCQzBFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGFnNDRD eGhnQTl6MHdHZDRLVWZWbnRrdkE0LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMWIyMjc1OWMtZDA5Ny00ZmFhLTlkY2UtZGQ0NmMxZDMwZWM4LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8xYjIyNzU5Yy1kMDk3LTRmYWEtOWRjZS1kZDQ2YzFkMzBlYzgv MS9GOTY4RENBRUIwNkRDOEYyNkUwRTVCOTczNUIwMDIyOTAzRDczQzc2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqDxzFDzANBgkqhkiG9w0BAQsFAAOCAQEARalB 2nZ5U7r3SbMh6DImPQINgPs7EXaHwmEmqJkLGloi2ZI1u/tPRVjeH2yYVRgGMdTL cQ+X/4PlWGgABkrmCPnlHoNArYHSBv6xacq62sG/ZJOKBOi5pCVkT6Nt8DIuWO7M VbVyCadLwVmXF7Ej0DR9uS8nOP1zfZkzh/WTBew0jFPSmfzd/qBeOFTjMmRFZFi7 cIiXdx2o99u0lc8zHkUu1NU1Uc1i+b15igejx8Mumvg82AU9zlWNMV55zJ+yBfoR vpI0QAthcio8kQhE3KMdQubeBYmqrnXvA8c9RV2HfYtBy3Tfhw+JCqZJvAQQFNq2 BLhO0W0HW/BizGUXYg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:02:18 2025 by rpki-client