This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer (raw, json) Hash identifier: XwmNjAmBs4GZS1njhSDMs8UQsN4GO0ss0uF2niLUesU= Subject key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 79DDD517CA7FDAFBA87D9F8895DC6B07BE4E80EB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 08 Nov 2025 18:29:16 +0000 Certificate not after: Sat 07 Nov 2026 18:34:16 +0000 Subordinate resources: IP: 2a06:1283:8000::/36 IP: 2a06:1283:bd00::/40 IP: 2a06:1283:c110::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:dd:d5:17:ca:7f:da:fb:a8:7d:9f:88:95:dc:6b:07:be:4e:80:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Nov 8 18:29:16 2025 GMT Not After : Nov 7 18:34:16 2026 GMT Subject: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:3a:71:51:12:f5:73:10:0d:b8:d3:f5:18: 53:51:44:83:de:ad:17:fe:50:a7:60:3f:73:44:9b: 67:9c:92:96:34:39:90:cb:26:35:07:3e:38:2d:4e: 1b:a7:38:cf:f1:d4:ad:b5:45:9e:ca:30:59:98:df: d5:63:95:f8:e1:ff:45:94:9d:26:3b:cb:9b:01:de: e2:ad:75:9a:98:30:6b:7b:45:46:6f:3d:50:87:92: fc:8f:a9:ac:2f:05:ea:19:b5:dd:61:ec:70:db:80: 21:34:10:7e:0c:e9:be:4c:e0:24:14:fc:fd:bc:89: 3c:2f:cf:3f:4d:84:9b:92:6a:ec:cf:d8:3b:7a:67: 63:e4:93:e2:e4:da:c2:f7:d3:20:da:9d:db:48:a7: 37:b5:55:88:f9:e1:e9:1b:bb:4a:ec:d0:dc:53:8a: 80:a1:52:78:07:e7:99:7e:59:7a:ff:9f:14:58:dc: 14:1c:16:f4:e8:8e:db:20:70:43:f9:66:d4:7b:44: 0b:5f:27:c7:a6:93:1d:ac:d7:97:2b:4a:41:5d:bd: 56:64:2d:c2:28:1e:e9:e8:db:bd:6c:a2:58:e0:f7: f2:72:ca:99:57:6c:9a:50:79:97:1a:a6:11:cf:ed: 1b:67:2e:1d:77:69:7c:3a:0d:4c:5b:91:70:0d:2a: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8000::/36 2a06:1283:bd00::/40 2a06:1283:c110::/44 Signature Algorithm: sha256WithRSAEncryption 39:cf:d1:07:d6:4b:56:34:8d:74:fc:bf:50:90:b9:2e:db:65: f6:20:94:21:56:07:c8:6e:f7:5d:e7:1b:df:53:34:24:37:3b: 59:c1:74:c2:f0:0c:1e:1f:b2:5e:81:a5:c1:c0:84:40:ca:ad: 2e:7f:cd:3d:e3:10:3b:1a:11:94:d5:13:f3:7d:f1:2f:68:f6: e4:9d:e2:a9:bb:ea:92:c6:ad:31:ce:dd:81:2e:da:e0:53:91: be:97:d9:d0:24:bd:da:20:8a:75:d8:3b:22:a4:6a:62:ed:28: 8d:3c:c9:04:8b:45:26:2f:f2:bb:05:b7:75:8a:94:c8:2d:e1: a7:cd:eb:47:f0:29:21:11:4d:1c:33:c6:14:c5:34:b6:f9:78: c8:2a:bd:33:ce:9f:20:a1:c1:01:1f:f1:da:d3:2c:53:33:5c: e5:73:b8:6d:7b:ca:11:57:7c:b5:99:02:d4:5c:e1:7c:60:71: f5:83:61:42:70:95:53:a6:51:69:06:bb:5d:8a:6b:66:4a:5a: 8f:bb:d8:98:c6:1f:d9:63:a5:12:37:9e:ae:a3:12:c0:96:f2: 9d:af:e1:96:dc:f1:9a:2c:3f:d9:9e:0d:a4:12:cb:90:2a:16: 14:40:7e:f3:e4:5d:ca:0d:56:0a:15:10:ad:5d:63:df:3c:ff: 1f:d9:0b:60 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIUed3VF8p/2vuofZ+IldxrB75OgOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNTExMDgxODI5MTZaFw0yNjExMDcxODM0MTZaMDMxMTAvBgNV BAMTKDJENkQ4QjE3QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6NzpxURL1cxANuNP1GFNRRIPe rRf+UKdgP3NEm2eckpY0OZDLJjUHPjgtThunOM/x1K21RZ7KMFmY39Vjlfjh/0WU nSY7y5sB3uKtdZqYMGt7RUZvPVCHkvyPqawvBeoZtd1h7HDbgCE0EH4M6b5M4CQU /P28iTwvzz9NhJuSauzP2Dt6Z2Pkk+Lk2sL30yDandtIpze1VYj54ekbu0rs0NxT ioChUngH55l+WXr/nxRY3BQcFvTojtsgcEP5ZtR7RAtfJ8emkx2s15crSkFdvVZk LcIoHuno271soljg9/JyyplXbJpQeZcaphHP7RtnLh13aXw6DUxbkXANKmkLAgMB AAGjggMkMIIDIDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtbYsXtjwJjKIt ixPqHo3cQ6r1EzAfBgNVHSMEGDAWgBRIB8EYvTSJNLXMWbPop6jBTynD+zAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC80ODA3QzExOEJEMzQ4OTM0QjVDQzU5QjNF OEE3QThDMTRGMjlDM0ZCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy80ODA3QzExOEJEMzQ4OTM0QjVD QzU5QjNFOEE3QThDMTRGMjlDM0ZCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzYv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIv Ni8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNFQTFFOEREQzQzQUFGNTEzLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMgYIKwYBBQUH AQcBAf8EIzAhMB8EAgACMBkDBgQqBhKDgAMGACoGEoO9AwcEKgYSg8EQMA0GCSqG SIb3DQEBCwUAA4IBAQA5z9EH1ktWNI10/L9QkLku22X2IJQhVgfIbvdd5xvfUzQk NztZwXTC8AweH7JegaXBwIRAyq0uf8094xA7GhGU1RPzffEvaPbkneKpu+qSxq0x zt2BLtrgU5G+l9nQJL3aIIp12DsipGpi7SiNPMkEi0UmL/K7Bbd1ipTILeGnzetH 8CkhEU0cM8YUxTS2+XjIKr0zzp8gocEBH/Ha0yxTM1zlc7hte8oRV3y1mQLUXOF8 YHH1g2FCcJVTplFpBrtdimtmSlqPu9iYxh/ZY6USN56uoxLAlvKdr+GW3PGaLD/Z ng2kEsuQKhYUQH7z5F3KDVYKFRCtXWPfPP8f2Qtg -----END CERTIFICATE-----Generated at Sat Nov 22 21:53:46 2025 by rpki-client