This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer (raw, json) Hash identifier: YH+Nfeq3b6MHqkOWyMmA/KvD7OjNQkgNI9yV3O42nDI= Subject key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 70535A74722B6BAB2C2C191587564CE3A8CCEE75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 05:24:18 +0000 Certificate not after: Fri 11 Dec 2026 05:29:18 +0000 Subordinate resources: IP: 2a14:7580:ff40::/44 IP: 2a14:7581:9900::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:53:5a:74:72:2b:6b:ab:2c:2c:19:15:87:56:4c:e3:a8:cc:ee:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 12 05:24:18 2025 GMT Not After : Dec 11 05:29:18 2026 GMT Subject: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:93:62:2f:ec:fd:d1:10:4a:dc:2e:cf:3e: ff:76:73:9a:1c:65:17:68:ca:67:0d:83:c4:02:f2: 4c:25:70:95:07:27:69:02:4b:7a:4a:e0:de:7f:f6: 95:9a:b7:ca:7b:b7:c0:c9:42:05:24:bb:33:95:48: 64:28:81:62:12:47:5c:31:8c:ea:21:8e:6f:a5:a4: 21:0d:71:2e:44:75:d2:37:e2:11:91:18:01:79:11: 85:88:9b:8f:3c:36:d5:7b:89:04:3c:3b:4c:01:0e: 1f:21:cd:6c:c1:c1:19:1e:cb:29:70:d9:fe:9c:74: f9:43:68:e3:15:79:48:01:55:bc:56:63:bc:ad:4d: b8:c7:cf:11:a6:e6:f7:68:b7:fe:87:ee:af:8e:1d: c0:ed:63:b2:63:b2:27:84:9c:99:a8:a8:29:bd:ef: c8:f1:48:6f:a2:c6:7a:10:42:6b:f6:bb:38:52:ca: c2:dd:85:bd:13:29:1d:8d:48:af:de:4c:6d:8c:60: e2:cd:c2:74:04:a4:24:8a:30:2a:78:e1:86:e4:ad: 53:f9:fe:be:82:da:ff:b5:96:4b:d1:71:03:5a:44: 40:64:39:c8:a8:ed:82:d3:d0:de:dc:9d:3c:ec:53: 41:ae:aa:61:73:67:11:5f:01:11:f7:fe:a2:1a:64: 44:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff40::/44 2a14:7581:9900::/40 Signature Algorithm: sha256WithRSAEncryption 58:05:5e:71:4a:03:1c:27:4d:d6:8f:bd:e9:72:b5:25:44:f9: 86:2f:ea:68:de:22:55:e1:81:69:5b:c1:fd:8f:1f:74:cb:6e: 72:9c:56:f4:2b:b2:fc:7f:a0:4d:cf:66:74:c5:99:f6:93:ff: 61:cd:6c:a0:49:5a:be:27:11:3b:1d:af:26:de:89:78:47:ef: cc:29:0b:9a:0e:59:bc:be:30:2f:ef:a1:ac:5d:75:4f:26:b9: ad:a6:b8:7d:24:12:9b:fc:f4:af:4d:9f:d8:11:c8:58:11:34: 24:1b:2a:b5:2b:db:c3:31:52:30:38:8e:61:fd:66:f5:e8:70: 0d:1f:76:b9:29:78:c8:b8:35:4d:bf:1c:99:85:70:9e:14:c0: 89:df:3e:b1:8b:83:ad:4d:aa:6b:6d:3f:13:fa:a9:bb:24:f5: b4:f0:39:8e:1f:f6:92:71:fb:73:b8:4f:69:57:2d:97:1a:b5: a9:a9:de:34:19:07:c8:b4:0d:44:f9:bb:4d:38:4e:f1:9e:73: 14:26:22:94:84:b9:b5:e4:01:d2:74:ae:55:a6:e8:bd:6c:b5: e4:26:78:7f:e2:f6:50:5a:10:13:dd:1d:ee:2b:bb:a4:99:b7: 05:71:d9:1d:b1:a2:7d:a8:ed:a2:35:3c:cf:86:92:90:65:33: b3:b8:c0:4e -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUcFNadHIra6ssLBkVh1ZM46jM7nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTIwNTI0MThaFw0yNjEyMTEwNTI5MThaMDMxMTAvBgNV BAMTKDg3QTRDODRENDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCespNiL+z90RBK3C7PPv92c5oc ZRdoymcNg8QC8kwlcJUHJ2kCS3pK4N5/9pWat8p7t8DJQgUkuzOVSGQogWISR1wx jOohjm+lpCENcS5EddI34hGRGAF5EYWIm488NtV7iQQ8O0wBDh8hzWzBwRkeyylw 2f6cdPlDaOMVeUgBVbxWY7ytTbjHzxGm5vdot/6H7q+OHcDtY7JjsieEnJmoqCm9 78jxSG+ixnoQQmv2uzhSysLdhb0TKR2NSK/eTG2MYOLNwnQEpCSKMCp44YbkrVP5 /r6C2v+1lkvRcQNaREBkOcio7YLT0N7cnTzsU0GuqmFzZxFfARH3/qIaZETtAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHpMhNQ2bbsVqQ kKVaotzrqHI5RTAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMwMWRhLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEv MS84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1QUEyRENFQkE4NzIzOTQ1Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgACMBEDBwQqFHWA/0ADBgAqFHWBmTANBgkqhkiG9w0BAQsF AAOCAQEAWAVecUoDHCdN1o+96XK1JUT5hi/qaN4iVeGBaVvB/Y8fdMtucpxW9Cuy /H+gTc9mdMWZ9pP/Yc1soElavicROx2vJt6JeEfvzCkLmg5ZvL4wL++hrF11Tya5 raa4fSQSm/z0r02f2BHIWBE0JBsqtSvbwzFSMDiOYf1m9ehwDR92uSl4yLg1Tb8c mYVwnhTAid8+sYuDrU2qa20/E/qpuyT1tPA5jh/2knH7c7hPaVctlxq1qaneNBkH yLQNRPm7TThO8Z5zFCYilIS5teQB0nSuVabovWy15CZ4f+L2UFoQE90d7iu7pJm3 BXHZHbGifajtojU8z4aSkGUzs7jATg== -----END CERTIFICATE-----Generated at Sat Dec 13 08:20:06 2025 by rpki-client