This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer File: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (raw, json) Hash identifier: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0= Subject key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 63B8445D875278B4FBE13938CA561092FAEBBE1E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 17 Nov 2025 21:58:09 +0000 Certificate not after: Mon 16 Nov 2026 22:03:09 +0000 Subordinate resources: IP: 2a06:1283:8900::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b8:44:5d:87:52:78:b4:fb:e1:39:38:ca:56:10:92:fa:eb:be:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Nov 17 21:58:09 2025 GMT Not After : Nov 16 22:03:09 2026 GMT Subject: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:e2:9a:04:da:56:e4:42:45:2a:3f:3e:b9: 27:83:7e:fa:11:8d:e5:77:4b:cd:a5:03:cc:ed:43: 41:bb:c2:6a:36:57:ba:24:1d:23:dd:88:bc:7f:e2: 11:38:cb:5a:a3:97:c8:6c:90:12:b2:5c:e7:bc:94: e2:96:4a:74:55:79:97:13:2e:44:59:c9:0e:55:fa: b2:51:5d:ff:c0:5a:8e:b7:ab:c2:e9:85:2d:e2:3c: cd:8d:73:ba:85:88:92:17:93:6f:f6:d1:1b:9a:d6: 67:e2:da:af:98:42:58:0f:e3:c1:d1:34:86:cc:4c: 33:6a:75:54:4e:69:85:9f:aa:42:a9:a5:d6:10:be: 2d:dc:3d:fc:f0:f4:40:ee:b7:85:e1:f8:07:bc:4a: 0f:8e:31:ac:bd:bf:ad:88:5a:0b:cb:9a:90:b3:78: 1e:1a:55:cc:44:ef:c0:de:12:4d:1e:34:31:ca:f3: bf:5f:04:31:c6:6b:68:c4:b0:a1:b1:67:89:d6:29: 1a:f4:7b:8c:bf:bb:4b:cf:0a:70:db:67:53:42:c2: 54:dd:a5:34:24:3f:54:86:53:bb:35:eb:a2:f0:79: b3:22:d9:f1:d9:29:84:d4:8e:a9:09:0f:94:f9:f8: a7:fd:32:75:b5:1d:04:33:16:ce:3e:06:6d:d5:b7: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8900::/40 Signature Algorithm: sha256WithRSAEncryption 15:8b:6f:01:52:2d:8d:5a:60:28:39:e0:5e:ba:56:71:ce:0a: 23:b6:51:47:f9:79:58:3e:c1:96:f9:29:95:77:b8:b4:60:cb: 59:d8:1e:b6:9e:3e:15:40:a2:3f:83:cd:22:6a:60:59:4f:2c: 26:b4:11:77:df:04:a6:b2:9f:be:12:29:54:87:6b:5c:87:b9: 59:13:0d:7c:ed:45:96:21:ae:70:4d:a6:4e:00:54:b0:f8:8a: a8:15:00:56:2a:07:bf:f7:c9:b4:cb:14:85:dd:29:38:d1:24: 3c:d4:04:51:23:f7:f6:74:5b:a8:67:28:52:bd:4c:e7:38:78: b2:a9:7b:8e:5d:6e:a2:59:13:75:ba:46:fd:20:94:7f:36:bc: b2:d9:06:cb:cd:6c:72:22:bc:de:11:5d:f9:a7:a8:e4:5a:9b: 52:58:32:b8:81:73:9e:7b:c0:fc:d0:bf:9f:b2:8b:e8:8e:d5: 67:64:13:17:a3:0c:7c:e0:7f:76:ed:97:da:b6:a0:2c:6b:ed: 3d:49:98:63:07:4d:2b:93:15:23:f7:02:c7:63:d3:1c:19:8d: d2:a2:50:13:7e:bc:51:1b:5a:f3:63:80:98:85:07:36:62:db: 84:d2:68:1b:0c:28:77:b1:d8:46:9f:7f:3f:a8:6f:49:b8:ed: 98:64:7a:3d -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUY7hEXYdSeLT74Tk4ylYQkvrrvh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTExMTcyMTU4MDlaFw0yNjExMTYyMjAzMDlaMDMxMTAvBgNV BAMTKDVGQkJEMEYzRDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+eKaBNpW5EJFKj8+uSeDfvoR jeV3S82lA8ztQ0G7wmo2V7okHSPdiLx/4hE4y1qjl8hskBKyXOe8lOKWSnRVeZcT LkRZyQ5V+rJRXf/AWo63q8LphS3iPM2Nc7qFiJIXk2/20Rua1mfi2q+YQlgP48HR NIbMTDNqdVROaYWfqkKppdYQvi3cPfzw9EDut4Xh+Ae8Sg+OMay9v62IWgvLmpCz eB4aVcxE78DeEk0eNDHK879fBDHGa2jEsKGxZ4nWKRr0e4y/u0vPCnDbZ1NCwlTd pTQkP1SGU7s166LwebMi2fHZKYTUjqkJD5T5+Kf9MnW1HQQzFs4+Bm3Vt7FjAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfu9Dz17geiv2Z 5aNLZ4NN080TyTAfBgNVHSMEGDAWgBTVTUQ7Z8HMXqG1RG6gZDysOnqLLDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS80L0Q1NEQ0NDNC NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYw MzUzZjY5NDIvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1 NjAzNTNmNjk0Mi8xLzVGQkJEMEYzRDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDND RDEzQzkubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoGEoOJMA0GCSqGSIb3DQEB CwUAA4IBAQAVi28BUi2NWmAoOeBeulZxzgojtlFH+XlYPsGW+SmVd7i0YMtZ2B62 nj4VQKI/g80iamBZTywmtBF33wSmsp++EilUh2tch7lZEw187UWWIa5wTaZOAFSw +IqoFQBWKge/98m0yxSF3Sk40SQ81ARRI/f2dFuoZyhSvUznOHiyqXuOXW6iWRN1 ukb9IJR/Nryy2QbLzWxyIrzeEV35p6jkWptSWDK4gXOee8D80L+fsovojtVnZBMX owx84H927ZfatqAsa+09SZhjB00rkxUj9wLHY9McGY3SolATfrxRG1rzY4CYhQc2 YtuE0mgbDCh3sdhGn38/qG9JuO2YZHo9 -----END CERTIFICATE-----Generated at Thu Dec 4 08:27:56 2025 by rpki-client