This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer File: AD51B4FA37D423844399722D5240A94674496236.cer (raw, json) Hash identifier: 0daQYo0ak+dEbxVg2jk8xyIn5CeUsqYy83QXDmwvJxk= Subject key identifier: AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 2CE1D180C7EE0E8E8EB671AFE50CAD745AB04F66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 03:05:03 +0000 Certificate not after: Fri 27 Nov 2026 03:10:03 +0000 Subordinate resources: IP: 2a14:7583:3000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e1:d1:80:c7:ee:0e:8e:8e:b6:71:af:e5:0c:ad:74:5a:b0:4f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 28 03:05:03 2025 GMT Not After : Nov 27 03:10:03 2026 GMT Subject: CN=AD51B4FA37D423844399722D5240A94674496236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:cb:87:fd:b9:7b:d6:21:2d:73:e6:a8:99: 78:7b:94:f4:fe:a2:e4:13:49:66:e4:fa:40:53:4f: c8:7e:2e:54:81:8c:db:75:3a:e0:7c:d7:40:e5:c8: f5:9e:a8:df:af:a8:0a:fb:8f:43:4d:82:a0:e1:82: 13:50:cf:e9:02:4a:e4:36:0b:00:04:74:1b:c9:2e: d6:97:bd:22:7a:70:47:80:a4:e1:ca:c9:c0:13:9b: ea:5f:76:fd:50:3e:47:4c:7d:04:d2:b2:27:e4:5d: bf:ee:5b:af:34:6b:25:eb:e7:66:ac:4d:91:22:c1: a0:a3:db:c1:a3:03:ef:e0:29:a1:7b:df:a6:da:65: 6d:ec:1a:ad:2c:1d:f5:7a:64:7c:6f:8c:5c:d5:78: e9:b8:e7:d8:a8:00:55:b6:58:c0:61:0f:27:bd:8c: e2:ad:e7:6c:a2:d3:b5:0c:7c:38:b3:07:43:02:8a: 04:9a:8c:a2:db:27:fc:51:ef:a4:c3:6d:92:98:98: 86:7d:e4:c0:60:d0:fa:be:d6:49:8b:ce:4f:94:04: 5f:8e:c4:53:89:4f:81:bf:31:ee:a7:4b:ea:ac:69: 6d:6e:4c:b4:d0:27:aa:b7:c5:e6:89:e5:a3:f7:49: 1a:bd:b7:4b:42:9d:4e:be:77:27:c1:9b:ee:85:6c: ef:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:3000::/36 Signature Algorithm: sha256WithRSAEncryption 6a:ac:07:b6:3d:7c:fa:59:69:79:0a:cd:cc:ff:ce:a9:b7:46: 5d:91:3f:d5:92:e7:0c:c8:3f:a2:93:e8:e4:af:79:f1:c9:ea: 4c:26:80:cf:ef:0e:24:9f:50:71:1e:ee:cb:3a:a3:20:2c:a2: c9:18:54:43:70:35:1f:84:cb:e3:57:6a:d7:f6:7b:10:10:de: 78:f7:5a:16:2f:54:a8:72:09:90:89:b5:d7:59:a3:1b:98:e6: 49:08:8d:e5:a4:54:e1:46:b1:bd:91:2c:e4:5e:42:5c:c9:53: e6:bc:a8:b4:8d:fc:8a:ed:1f:ce:88:8f:6f:0b:d8:75:d3:c6: 14:e0:c8:94:cb:ba:a3:dc:92:58:d2:ad:69:03:a0:15:76:9f: 7e:95:3b:7e:aa:7b:6e:76:58:31:5a:bc:75:df:06:09:0a:80: 08:59:d9:5e:36:ad:f2:78:6b:0e:8c:a8:c5:a6:d8:20:29:f8: d2:ee:3f:39:63:d9:48:f1:e2:c7:da:28:b9:66:78:2e:d7:ac: 97:20:ce:61:b5:98:2c:57:f1:54:76:43:56:f9:e9:c5:5e:9b: d1:3a:a6:0d:18:7b:a8:d2:cd:9f:47:64:f1:11:03:67:5b:ff: e9:c1:00:70:3c:8b:03:59:f5:f6:22:f5:52:38:8b:c0:92:23: 34:5e:99:6c -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIULOHRgMfuDo6OtnGv5QytdFqwT2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMjgwMzA1MDNaFw0yNjExMjcwMzEwMDNaMDMxMTAvBgNV BAMTKEFENTFCNEZBMzdENDIzODQ0Mzk5NzIyRDUyNDBBOTQ2NzQ0OTYyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMlMuH/bl71iEtc+aomXh7lPT+ ouQTSWbk+kBTT8h+LlSBjNt1OuB810DlyPWeqN+vqAr7j0NNgqDhghNQz+kCSuQ2 CwAEdBvJLtaXvSJ6cEeApOHKycATm+pfdv1QPkdMfQTSsifkXb/uW680ayXr52as TZEiwaCj28GjA+/gKaF736baZW3sGq0sHfV6ZHxvjFzVeOm459ioAFW2WMBhDye9 jOKt52yi07UMfDizB0MCigSajKLbJ/xR76TDbZKYmIZ95MBg0Pq+1kmLzk+UBF+O xFOJT4G/Me6nS+qsaW1uTLTQJ6q3xeaJ5aP3SRq9t0tCnU6+dyfBm+6FbO91AgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStUbT6N9QjhEOZ ci1SQKlGdEliNjAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2YmIzLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS85YmI3N2M4YS0yZDY5LTQzMjUtYjRmYS02MDMzODhjOTZiYjMv MS9BRDUxQjRGQTM3RDQyMzg0NDM5OTcyMkQ1MjQwQTk0Njc0NDk2MjM2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWDMDANBgkqhkiG9w0BAQsFAAOCAQEAaqwH tj18+llpeQrNzP/OqbdGXZE/1ZLnDMg/opPo5K958cnqTCaAz+8OJJ9QcR7uyzqj ICyiyRhUQ3A1H4TL41dq1/Z7EBDeePdaFi9UqHIJkIm111mjG5jmSQiN5aRU4Uax vZEs5F5CXMlT5ryotI38iu0fzoiPbwvYddPGFODIlMu6o9ySWNKtaQOgFXaffpU7 fqp7bnZYMVq8dd8GCQqACFnZXjat8nhrDoyoxabYICn40u4/OWPZSPHix9oouWZ4 LteslyDOYbWYLFfxVHZDVvnpxV6b0TqmDRh7qNLNn0dk8REDZ1v/6cEAcDyLA1n1 9iL1UjiLwJIjNF6ZbA== -----END CERTIFICATE-----Generated at Sat Dec 6 04:22:40 2025 by rpki-client