This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer File: 892C2C5990DF4D7045BB55A011F473261F0643F6.cer (raw, json) Hash identifier: PN94kvxun8JdCnkInAOcwl/WdFeSXANvNXjk8BR0GGs= Subject key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 77C19645FB396B93B3147C1BAD03AC0C0548BB32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 31 Jan 2026 06:21:19 +0000 Certificate not after: Sat 30 Jan 2027 06:26:19 +0000 Subordinate resources: IP: 2a14:7581:6000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c1:96:45:fb:39:6b:93:b3:14:7c:1b:ad:03:ac:0c:05:48:bb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 31 06:21:19 2026 GMT Not After : Jan 30 06:26:19 2027 GMT Subject: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:4d:06:8c:2a:6f:a1:35:7f:4f:87:33:e0: e6:38:2d:7e:a1:20:f2:d7:b7:55:ac:9d:75:09:0c: 43:72:c4:a8:44:60:d9:f2:ed:7d:1f:aa:e7:b4:03: 72:db:22:aa:3d:6a:d9:e5:a3:85:79:a4:30:26:f2: 7f:17:be:6b:4b:d9:ef:9b:0c:de:37:14:66:20:89: ae:0a:76:6e:63:2a:3f:3f:54:20:8e:00:9a:52:46: 6e:42:94:99:90:83:4e:ec:e6:7e:8b:93:f2:22:2f: 1f:73:ad:f1:b3:c7:33:2e:5e:bc:8d:67:64:f9:dc: d8:37:3c:c1:e8:43:bf:a9:76:c3:4c:df:6d:55:42: d5:ba:c9:a4:dc:0d:60:0b:9d:94:83:22:37:6b:c9: 40:fc:0e:5b:6d:52:05:78:7a:4b:ed:70:7b:f2:9e: cb:57:72:3d:db:6a:ec:fd:8a:d7:5f:4e:1a:f0:e8: 4d:06:c2:d2:70:66:f6:a9:2d:fd:27:ef:e8:92:75: 17:5f:a2:99:72:2d:63:de:eb:1c:cb:ef:f2:20:ea: 8b:c9:97:2d:57:ee:51:80:c3:ed:99:59:ae:7f:24: 2c:5b:93:d2:13:b3:d9:ff:a5:a7:19:7d:5e:ec:c5: cc:c5:93:98:de:28:5b:4b:f1:cd:53:2d:82:4d:4f: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6000::/36 Signature Algorithm: sha256WithRSAEncryption 82:56:e2:80:c0:c5:c0:ec:30:5e:38:69:49:82:51:56:86:9f: 13:4d:dc:c3:96:1e:3c:08:e8:61:62:ce:ce:bd:f2:b3:e7:3d: 18:ba:86:16:b4:77:96:73:90:d9:88:66:20:75:88:48:a7:af: 64:f3:ef:37:ea:22:ea:42:f8:ec:7c:e3:d0:0b:32:fa:67:6f: 4d:9a:19:1e:fb:3d:b5:89:88:14:8b:89:08:d8:53:c0:76:22: 21:96:bd:5f:ab:36:10:cd:4e:a2:c1:ad:8c:9f:f4:7b:79:e3: e5:b9:63:de:e9:7a:41:a0:83:82:d6:8d:a6:a5:fc:ec:9c:3c: 36:ac:76:40:e5:78:7e:97:85:91:a2:96:c6:2c:d0:20:6c:68: 4a:b8:a5:8a:0d:6b:a3:c9:55:47:e5:44:13:04:86:13:2e:04: ac:e1:92:17:94:dd:f1:2e:33:e3:7b:20:e2:57:32:fe:19:50: ec:c6:d7:80:5c:0e:bc:67:0a:6e:e5:b8:53:6e:10:0e:c0:37: 6d:d5:7e:8d:8c:ed:6b:a1:92:98:89:9b:e1:7a:2d:fa:38:3b: d4:a7:f4:85:ba:a8:50:2a:a6:dd:ac:4e:a4:1c:ef:cb:c8:12: 45:46:65:95:80:10:c8:de:83:d2:b6:ac:02:c0:c7:57:77:d4: 15:ff:3e:b5 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUd8GWRfs5a5OzFHwbrQOsDAVIuzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMzEwNjIxMTlaFw0yNzAxMzAwNjI2MTlaMDMxMTAvBgNV BAMTKDg5MkMyQzU5OTBERjRENzA0NUJCNTVBMDExRjQ3MzI2MUYwNjQzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AU0GjCpvoTV/T4cz4OY4LX6h IPLXt1WsnXUJDENyxKhEYNny7X0fque0A3LbIqo9atnlo4V5pDAm8n8XvmtL2e+b DN43FGYgia4Kdm5jKj8/VCCOAJpSRm5ClJmQg07s5n6Lk/IiLx9zrfGzxzMuXryN Z2T53Ng3PMHoQ7+pdsNM321VQtW6yaTcDWALnZSDIjdryUD8DlttUgV4ekvtcHvy nstXcj3bauz9itdfThrw6E0GwtJwZvapLf0n7+iSdRdfoplyLWPe6xzL7/Ig6ovJ ly1X7lGAw+2ZWa5/JCxbk9ITs9n/pacZfV7sxczFk5jeKFtL8c1TLYJNTwz1AgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJLCxZkN9NcEW7 VaAR9HMmHwZD9jAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5MDVkLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS83MWJlZGY2Yy1jYzkxLTRiZjAtOWQ2ZS03ZTliM2NiOTkwNWQv MS84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAxMUY0NzMyNjFGMDY0M0Y2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWBYDANBgkqhkiG9w0BAQsFAAOCAQEAglbi gMDFwOwwXjhpSYJRVoafE03cw5YePAjoYWLOzr3ys+c9GLqGFrR3lnOQ2YhmIHWI SKevZPPvN+oi6kL47Hzj0Asy+mdvTZoZHvs9tYmIFIuJCNhTwHYiIZa9X6s2EM1O osGtjJ/0e3nj5blj3ul6QaCDgtaNpqX87Jw8Nqx2QOV4fpeFkaKWxizQIGxoSril ig1ro8lVR+VEEwSGEy4ErOGSF5Td8S4z43sg4lcy/hlQ7MbXgFwOvGcKbuW4U24Q DsA3bdV+jYzta6GSmImb4Xot+jg71Kf0hbqoUCqm3axOpBzvy8gSRUZllYAQyN6D 0rasAsDHV3fUFf8+tQ== -----END CERTIFICATE-----Generated at Mon Feb 2 12:41:43 2026 by rpki-client