This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer File: 9B848163C7049122702E8D37941241ED5ADD94D9.cer (raw, json) Hash identifier: HnI7ivTw4toW5FQXumtgmWpfnCWS+PQCiFEhzeA3v+A= Subject key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 66DFC89DAA529AB6531C658CDD33EFEC0693B113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 03 Jan 2026 07:40:11 +0000 Certificate not after: Sat 02 Jan 2027 07:45:11 +0000 Subordinate resources: IP: 2a14:7583::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:df:c8:9d:aa:52:9a:b6:53:1c:65:8c:dd:33:ef:ec:06:93:b1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 3 07:40:11 2026 GMT Not After : Jan 2 07:45:11 2027 GMT Subject: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:5f:2d:0c:79:cb:cf:1c:c9:af:0e:84:a9: db:f3:21:39:45:46:58:69:48:00:14:ca:e6:4f:6d: 63:0e:d2:96:a0:fe:27:d4:7f:6b:0c:12:02:60:2a: ac:e7:cf:6f:40:13:27:9f:b5:b2:91:12:93:57:b6: d6:79:2f:8b:f8:d6:b6:1d:9f:28:ed:d2:92:bf:13: 22:35:8e:1b:0d:e5:e5:ee:4f:7b:21:eb:96:32:68: f1:4f:ac:08:0c:f4:38:b2:c6:05:f5:07:3b:3b:71: 00:71:81:a9:47:88:54:3c:a2:f2:95:b4:fc:8d:34: 39:29:36:ef:a6:72:d1:de:ed:df:84:8a:8f:16:60: e5:df:c8:3a:33:f6:31:18:fb:52:48:54:82:8d:14: 9e:46:e9:d4:1f:22:9f:b1:a5:cf:7c:13:2d:5b:10: ec:6c:d1:3c:01:60:27:d8:9e:3c:5f:cd:38:5e:17: 61:4a:18:5c:10:5f:de:dc:96:67:df:8f:bb:df:99: 7a:1a:dc:49:5c:ca:1d:aa:cc:f5:69:2e:4d:32:27: d2:ae:89:5e:04:0a:ab:f9:7e:61:26:bb:0f:23:c0: 0b:55:45:d3:9c:26:3e:35:6a:3c:92:25:e7:34:33: 8b:13:50:70:f7:af:ef:f4:5d:19:ea:65:7f:13:12: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583::/36 Signature Algorithm: sha256WithRSAEncryption 0d:dd:6f:f3:4c:46:f1:56:be:99:f3:2d:24:43:18:34:99:f8: cf:89:0a:09:a0:54:30:96:de:5c:11:72:ff:b1:67:8b:59:98: 2f:ca:03:60:b2:b2:79:50:61:fd:13:12:da:b9:e9:d8:41:41: 2a:d0:77:5a:34:ec:3e:42:34:94:b9:9c:40:a9:6f:29:e1:dc: e0:90:81:cb:1f:c4:f5:d8:b4:53:a3:a2:67:e6:15:7a:1e:d2: 5a:ec:6c:80:7f:c3:69:77:e3:b1:b7:f6:39:23:62:01:e3:88: f4:45:78:af:59:21:4a:5c:b1:6f:ec:0c:19:0c:bb:6f:f0:60: 04:28:44:68:51:57:21:f3:4b:3e:10:c0:e6:ad:2c:e8:90:92: 67:1b:5b:85:cb:c1:5f:19:85:c9:24:11:d0:78:9e:2e:2f:e3: 58:86:f5:7d:1d:71:0d:fb:df:6b:dc:0e:37:cd:83:d6:f3:38: 9d:d0:2c:95:d8:8d:03:9e:41:b7:32:48:57:34:41:b1:75:a6: cd:f9:e9:ed:34:5c:bf:29:d2:bd:49:90:e5:f3:b3:fd:e2:a9: af:71:b1:6d:20:c8:f4:d6:93:0f:69:a3:a2:74:d2:ee:62:dd: 66:3c:d6:c7:34:3a:0c:d0:4d:7d:a4:9c:a9:06:27:8c:c3:55: 02:0f:54:42 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUZt/InapSmrZTHGWM3TPv7AaTsRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDMwNzQwMTFaFw0yNzAxMDIwNzQ1MTFaMDMxMTAvBgNV BAMTKDlCODQ4MTYzQzcwNDkxMjI3MDJFOEQzNzk0MTI0MUVENUFERDk0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmV8tDHnLzxzJrw6EqdvzITlF RlhpSAAUyuZPbWMO0pag/ifUf2sMEgJgKqznz29AEyeftbKREpNXttZ5L4v41rYd nyjt0pK/EyI1jhsN5eXuT3sh65YyaPFPrAgM9DiyxgX1Bzs7cQBxgalHiFQ8ovKV tPyNNDkpNu+mctHe7d+Eio8WYOXfyDoz9jEY+1JIVIKNFJ5G6dQfIp+xpc98Ey1b EOxs0TwBYCfYnjxfzTheF2FKGFwQX97clmffj7vfmXoa3Elcyh2qzPVpLk0yJ9Ku iV4ECqv5fmEmuw8jwAtVRdOcJj41ajySJec0M4sTUHD3r+/0XRnqZX8TEr0LAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbhIFjxwSRInAu jTeUEkHtWt2U2TAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmViMzRiLzMv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIv My85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5NDEyNDFFRDVBREQ5NEQ5Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWDADANBgkqhkiG9w0BAQsFAAOCAQEADd1v 80xG8Va+mfMtJEMYNJn4z4kKCaBUMJbeXBFy/7Fni1mYL8oDYLKyeVBh/RMS2rnp 2EFBKtB3WjTsPkI0lLmcQKlvKeHc4JCByx/E9di0U6OiZ+YVeh7SWuxsgH/DaXfj sbf2OSNiAeOI9EV4r1khSlyxb+wMGQy7b/BgBChEaFFXIfNLPhDA5q0s6JCSZxtb hcvBXxmFySQR0HieLi/jWIb1fR1xDfvfa9wON82D1vM4ndAsldiNA55BtzJIVzRB sXWmzfnp7TRcvynSvUmQ5fOz/eKpr3GxbSDI9NaTD2mjonTS7mLdZjzWxzQ6DNBN faScqQYnjMNVAg9UQg== -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:32 2026 by rpki-client