This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer File: D36546790928F44FF74C564231471FA1D8D2A97B.cer (raw, json) Hash identifier: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ= Subject key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 7F04CC9E05C9631AA9616E95484AF9BC602BF085 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 08 Nov 2025 18:40:26 +0000 Certificate not after: Sat 07 Nov 2026 18:45:26 +0000 Subordinate resources: IP: 2a06:1283:bd40::/42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:04:cc:9e:05:c9:63:1a:a9:61:6e:95:48:4a:f9:bc:60:2b:f0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Nov 8 18:40:26 2025 GMT Not After : Nov 7 18:45:26 2026 GMT Subject: CN=D36546790928F44FF74C564231471FA1D8D2A97B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:29:84:83:7a:3b:bc:87:72:99:69:00:e0: fc:fb:4f:f2:62:00:14:1a:be:36:03:f7:fb:da:9e: ae:48:99:70:31:e0:b4:27:94:d5:73:70:8e:6e:56: 78:16:bd:6a:c6:3d:7f:ef:fe:55:18:05:7a:07:72: 67:f9:55:27:65:a2:18:32:7e:aa:f0:f1:38:6f:89: 0c:fa:36:0c:e4:c8:71:4c:d6:4d:83:78:67:aa:e2: d4:25:05:94:f7:fc:3c:92:89:f7:bf:97:60:39:07: 94:e9:82:62:56:32:3e:74:51:3e:79:e6:de:c6:93: 4f:9a:c5:cc:61:1f:16:35:6c:7f:71:1e:6f:86:2d: 2e:6b:e0:3d:da:d2:46:67:c5:a4:ed:86:a2:a9:66: 38:08:80:95:60:34:37:89:c1:7e:4f:5b:7e:72:af: 6e:b3:f8:c7:97:fe:52:1d:b5:8b:89:a1:d1:a7:20: d8:b2:57:f7:22:e1:68:1e:72:f0:61:a6:98:7c:bc: be:24:ed:d2:dc:e1:6a:be:77:02:32:9e:1e:2d:1f: 51:01:24:57:ec:97:4b:7f:7a:af:62:87:8e:fd:e8: ff:c6:4d:ad:0f:4a:b0:13:b2:5f:e4:73:d1:df:54: 62:63:68:0d:45:bc:be:73:bb:7b:12:a8:63:07:b6: 7e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:bd40::/42 Signature Algorithm: sha256WithRSAEncryption 25:d7:fc:3c:da:b6:22:c7:76:87:87:4f:50:f9:eb:06:57:d6: 09:d5:d5:40:86:94:a5:07:84:71:72:24:71:af:ee:23:b1:61: c8:8f:8a:f6:bf:d3:4c:e8:72:18:1b:2b:99:13:30:37:8d:d2: 4d:13:66:30:f1:c7:50:a3:2e:8b:c6:16:2b:69:8f:c9:4a:f3: 6a:b7:fc:96:70:d9:3f:21:2e:d9:f5:5a:65:66:88:1b:15:18: 93:02:46:ab:38:7e:df:b1:30:97:79:a4:fd:4a:b3:d1:5b:65: 15:e7:7e:4f:b2:c5:fe:3e:84:93:a8:4e:d3:33:52:4e:b2:c5: e0:f7:88:52:cb:fc:e2:cf:ce:9c:b2:22:86:58:2a:fd:95:98: 3c:5c:c1:d4:d9:d9:6f:ec:68:c2:5b:54:11:0d:74:e6:73:15: 2d:11:33:fc:e7:81:a8:89:a5:4a:1b:ec:94:e8:1f:de:a6:63: 08:7e:7b:85:e4:d2:06:21:10:84:50:9d:cc:aa:87:ad:88:3f: d1:5b:fd:2b:01:e1:84:e0:a6:e0:1d:9b:9d:96:47:72:b7:2b: c7:47:62:9e:82:9e:9b:c0:9e:60:ef:38:06:27:71:01:ca:c6: 97:b9:be:3a:68:8a:6a:09:b0:bb:60:ec:22:4f:60:21:fd:74: 00:95:1b:81 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUfwTMngXJYxqpYW6VSEr5vGAr8IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTExMDgxODQwMjZaFw0yNjExMDcxODQ1MjZaMDMxMTAvBgNV BAMTKEQzNjU0Njc5MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXvCmEg3o7vIdymWkA4Pz7T/Ji ABQavjYD9/vanq5ImXAx4LQnlNVzcI5uVngWvWrGPX/v/lUYBXoHcmf5VSdlohgy fqrw8ThviQz6NgzkyHFM1k2DeGeq4tQlBZT3/DySife/l2A5B5TpgmJWMj50UT55 5t7Gk0+axcxhHxY1bH9xHm+GLS5r4D3a0kZnxaTthqKpZjgIgJVgNDeJwX5PW35y r26z+MeX/lIdtYuJodGnINiyV/ci4WgecvBhpph8vL4k7dLc4Wq+dwIynh4tH1EB JFfsl0t/eq9ih4796P/GTa0PSrATsl/kc9HfVGJjaA1FvL5zu3sSqGMHtn7VAgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTZUZ5CSj0T/dM VkIxRx+h2NKpezAfBgNVHSMEGDAWgBTVTUQ7Z8HMXqG1RG6gZDysOnqLLDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS80L0Q1NEQ0NDNC NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9iODg0NDMxOC0zNWQ3LTQ4MmUtYmJkNS1iNjI0 Y2YwYjIwNDEvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2 MjRjZjBiMjA0MS8xL0QzNjU0Njc5MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhE MkE5N0IubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBioGEoO9QDANBgkqhkiG9w0B AQsFAAOCAQEAJdf8PNq2Isd2h4dPUPnrBlfWCdXVQIaUpQeEcXIkca/uI7FhyI+K 9r/TTOhyGBsrmRMwN43STRNmMPHHUKMui8YWK2mPyUrzarf8lnDZPyEu2fVaZWaI GxUYkwJGqzh+37Ewl3mk/Uqz0VtlFed+T7LF/j6Ek6hO0zNSTrLF4PeIUsv84s/O nLIihlgq/ZWYPFzB1NnZb+xowltUEQ105nMVLREz/OeBqImlShvslOgf3qZjCH57 heTSBiEQhFCdzKqHrYg/0Vv9KwHhhOCm4B2bnZZHcrcrx0dinoKem8CeYO84Bidx AcrGl7m+OmiKagmwu2DsIk9gIf10AJUbgQ== -----END CERTIFICATE-----Generated at Thu Dec 4 09:03:43 2025 by rpki-client