This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer File: 9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer (raw, json) Hash identifier: GyYlO6y/5stBR9aILJdlNVp9hP0kn9XBPaFOqxjAXx4= Subject key identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 491783684D716EEFFF1385C88C3A8D31EE8813E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft caRepository: rsync://rpki.gxt.network/repo/gxt-as44822/1/ Notify URL: https://rpki.gxt.network/rrdp/notification.xml Certificate not before: Mon 10 Nov 2025 13:01:53 +0000 Certificate not after: Mon 09 Nov 2026 13:06:53 +0000 Subordinate resources: IP: 2a14:7580:3000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:17:83:68:4d:71:6e:ef:ff:13:85:c8:8c:3a:8d:31:ee:88:13:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 10 13:01:53 2025 GMT Not After : Nov 9 13:06:53 2026 GMT Subject: CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:c9:3a:f2:32:5d:0a:76:e1:19:a4:6b:8e: f0:7c:e9:34:8d:7d:25:53:02:3c:7b:8e:ab:9e:f0: 7a:70:0a:96:89:7e:64:af:7e:c6:57:0b:5e:29:0e: a1:0b:01:f4:fd:0a:95:a4:e2:ce:e6:46:27:d5:54: 98:18:73:f5:33:1f:d3:b6:ca:87:d5:99:ef:a5:b3: 2d:19:0b:ef:bd:6d:3d:f9:4c:7e:8b:23:e7:d0:26: 59:59:1e:f9:5c:93:ea:d5:76:c8:8e:fd:60:ef:e5: 49:d0:f2:0e:15:33:64:2c:e9:6c:f7:6f:97:f9:4b: e2:10:a4:e4:d0:40:76:a2:09:6a:46:26:bf:a9:44: 04:90:e0:d0:10:0f:77:10:bd:20:98:35:35:40:40: 80:30:c5:48:b0:2c:c6:b7:f8:fb:27:c1:00:21:7a: 47:c7:58:54:49:85:7c:d4:74:c4:a9:dd:7c:95:bb: f1:5d:b8:e6:6d:92:30:ea:e6:28:15:8c:6a:5e:31: 5f:5f:12:9b:70:b1:dc:0c:2d:bf:20:e1:41:f0:03: 8a:8f:c7:f1:cb:c3:00:cf:df:f4:5a:1e:a0:45:fd: 4d:3d:1c:1d:17:94:70:3d:07:8d:d8:1d:a2:ec:50: b1:f1:0a:91:fb:4c:41:97:70:5d:f5:95:da:bb:fc: bd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/ RPKI Manifest - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft RPKI Notify - URI:https://rpki.gxt.network/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:3000::/36 Signature Algorithm: sha256WithRSAEncryption 71:fe:5f:4e:82:e4:f5:c6:ee:42:13:cb:55:d4:a9:d4:b0:1e: 85:3e:fc:fc:ab:9a:24:66:d4:76:27:a4:58:16:b1:44:b3:e9: f0:bb:7b:4f:35:3a:73:ed:f9:33:8b:34:38:7d:0f:9a:50:32: 77:63:60:fb:29:b8:2a:8e:0a:89:94:f9:41:2e:e1:31:c2:86: 9d:9d:e6:bb:00:98:4e:d0:29:96:48:03:2e:bb:c2:da:21:4a: b5:01:dd:8c:05:dc:39:c5:26:cf:d4:da:23:33:8d:e2:54:40: 40:a4:51:db:67:88:c6:7d:2c:47:6d:14:d1:c1:3a:b1:94:1b: 23:5a:43:30:0b:f2:e6:ef:b9:bc:8d:93:02:46:2f:3d:39:de: f3:bf:72:91:ff:b5:ca:f7:71:57:03:93:33:83:3c:9f:fa:d9: f8:40:a0:57:49:43:04:bc:68:1b:83:4f:ae:5f:06:05:c7:b5: 5c:76:ce:b3:88:f4:d9:53:78:4c:38:76:07:ec:fc:98:52:ca: 73:0c:1e:85:35:f9:60:1a:a3:83:4b:bd:d2:74:d3:d4:b3:65: 1f:de:4e:4a:63:92:dc:32:a7:47:ba:a6:ed:64:6e:2e:50:85: a4:a3:bf:a1:4e:15:e0:e4:bb:72:b5:8c:ef:d2:25:b9:68:be: 1f:ef:1b:65 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUSReDaE1xbu//E4XIjDqNMe6IE+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMTAxMzAxNTNaFw0yNjExMDkxMzA2NTNaMDMxMTAvBgNV BAMTKDk0OTVBODE2MjZGQ0Y2RTc5Q0FGQjBGQzcyNjZDNUE3NzBCNDU3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpsk68jJdCnbhGaRrjvB86TSN fSVTAjx7jque8HpwCpaJfmSvfsZXC14pDqELAfT9CpWk4s7mRifVVJgYc/UzH9O2 yofVme+lsy0ZC++9bT35TH6LI+fQJllZHvlck+rVdsiO/WDv5UnQ8g4VM2Qs6Wz3 b5f5S+IQpOTQQHaiCWpGJr+pRASQ4NAQD3cQvSCYNTVAQIAwxUiwLMa3+PsnwQAh ekfHWFRJhXzUdMSp3XyVu/FduOZtkjDq5igVjGpeMV9fEptwsdwMLb8g4UHwA4qP x/HLwwDP3/RaHqBF/U09HB0XlHA9B43YHaLsULHxCpH7TEGXcF31ldq7/L1/AgMB AAGjggKPMIICizAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUlagWJvz255yv sPxyZsWncLRX8zAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCB7AYIKwYBBQUHAQsEgd8wgdwwOAYI KwYBBQUHMAWGLHJzeW5jOi8vcnBraS5neHQubmV0d29yay9yZXBvL2d4dC1hczQ0 ODIyLzEvMGQGCCsGAQUFBzAKhlhyc3luYzovL3Jwa2kuZ3h0Lm5ldHdvcmsvcmVw by9neHQtYXM0NDgyMi8xLzk0OTVBODE2MjZGQ0Y2RTc5Q0FGQjBGQzcyNjZDNUE3 NzBCNDU3RjMubWZ0MDoGCCsGAQUFBzANhi5odHRwczovL3Jwa2kuZ3h0Lm5ldHdv cmsvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqFHWAMDANBgkqhkiG9w0B AQsFAAOCAQEAcf5fToLk9cbuQhPLVdSp1LAehT78/KuaJGbUdiekWBaxRLPp8Lt7 TzU6c+35M4s0OH0PmlAyd2Ng+ym4Ko4KiZT5QS7hMcKGnZ3muwCYTtAplkgDLrvC 2iFKtQHdjAXcOcUmz9TaIzON4lRAQKRR22eIxn0sR20U0cE6sZQbI1pDMAvy5u+5 vI2TAkYvPTne879ykf+1yvdxVwOTM4M8n/rZ+ECgV0lDBLxoG4NPrl8GBce1XHbO s4j02VN4TDh2B+z8mFLKcwwehTX5YBqjg0u90nTT1LNlH95OSmOS3DKnR7qm7WRu LlCFpKO/oU4V4OS7crWM79IluWi+H+8bZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 04:22:47 2025 by rpki-client