This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer (raw, json) Hash identifier: bT3PwWbjeS34edhRjb9nvTWpOT9oQYJIUk34sk3vyrA= Subject key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 707C911D511CBEEF9F944FFD3EF4F8F9C7E290DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 07 Nov 2025 15:56:15 +0000 Certificate not after: Fri 06 Nov 2026 16:01:15 +0000 Subordinate resources: IP: 2a14:7581:b00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7c:91:1d:51:1c:be:ef:9f:94:4f:fd:3e:f4:f8:f9:c7:e2:90:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 7 15:56:15 2025 GMT Not After : Nov 6 16:01:15 2026 GMT Subject: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:26:e6:b9:8e:b0:58:85:06:c0:9b:77:2a: 53:fa:ec:a4:51:fc:b5:0b:cf:ae:7d:da:fe:e7:38: 50:4f:b0:2e:4c:78:4f:17:0d:0e:9f:4c:f5:5b:3e: f8:48:86:14:48:d2:8f:1c:73:f5:9b:72:29:5d:f0: 07:3f:31:22:31:ce:91:1e:ee:9d:74:a2:8d:65:6d: 5a:a2:38:b5:d1:30:35:64:d4:82:6b:26:a9:d9:66: 70:34:4a:f9:3c:7b:1b:16:63:12:8c:c3:61:3f:a4: b5:71:12:4f:a3:57:e3:a1:f6:f8:73:ab:72:0c:df: 47:c8:72:1c:9a:ab:3f:3d:48:dd:a6:0a:51:12:64: 1c:eb:54:cc:a1:f1:de:8a:bb:53:3e:70:cc:5e:eb: b0:5d:45:eb:d9:07:31:4a:08:34:12:58:5f:65:84: 26:eb:1b:11:0c:c4:1c:5b:f2:0c:bf:0e:19:4f:8c: 1e:b7:28:77:74:af:75:26:0b:af:22:e8:4f:7c:bc: a7:57:72:c9:14:59:fd:b9:fc:f9:99:e3:52:1c:78: 7a:4b:5c:62:52:c1:26:70:36:5b:8f:3e:05:f1:9b: fd:30:e4:b9:0d:70:72:26:63:37:3c:21:00:fe:b2: e0:d7:84:41:c1:56:0f:09:84:13:52:28:78:4b:3e: 68:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:b00::/40 Signature Algorithm: sha256WithRSAEncryption 23:db:1f:e1:e4:2a:62:5a:ac:27:9d:a3:48:bc:c6:b9:de:10: a7:f9:f3:7d:00:d0:e5:de:e1:4c:32:91:ed:9c:27:55:30:1f: 61:74:ce:b7:a6:e2:97:dd:25:48:43:61:1c:fe:5c:be:15:48: 18:aa:f2:24:32:12:0f:85:f3:52:b5:2d:79:1c:83:97:3c:0d: dc:2e:59:de:64:37:50:f3:ef:b1:1b:00:c3:d1:90:1e:37:c1: b8:21:46:69:91:6e:a1:77:b4:68:89:27:e3:fc:28:42:12:0e: 38:66:cd:d7:e9:a2:1e:6b:a3:77:5d:7d:b8:d3:29:40:a0:f9: 3c:9a:8b:8c:36:11:81:25:27:ec:3b:1b:f8:6e:ae:e5:5f:4d: f4:44:21:37:4d:c6:ca:4f:a3:cd:4b:9a:fb:5b:7f:e6:39:30: 86:b0:d2:08:8b:43:87:4f:a6:32:05:e8:e8:99:12:e5:00:c7: f6:27:58:4f:17:b2:aa:6b:67:54:80:75:1f:b2:3f:04:7d:f3: 02:72:f4:ac:4e:b6:f3:6c:9a:65:6e:c3:e0:db:36:87:d9:d7: 25:46:62:b7:26:b2:21:c9:de:47:1a:2f:19:57:8b:90:9e:f2: 9d:3f:26:d2:ac:93:e3:09:56:a3:5c:b2:df:55:08:b1:05:c6: ed:93:39:4d -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUcHyRHVEcvu+flE/9PvT4+cfikNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMDcxNTU2MTVaFw0yNjExMDYxNjAxMTVaMDMxMTAvBgNV BAMTKEU5RDJGNzMyOUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vybmuY6wWIUGwJt3KlP67KRR /LULz6592v7nOFBPsC5MeE8XDQ6fTPVbPvhIhhRI0o8cc/Wbcild8Ac/MSIxzpEe 7p10oo1lbVqiOLXRMDVk1IJrJqnZZnA0Svk8exsWYxKMw2E/pLVxEk+jV+Oh9vhz q3IM30fIchyaqz89SN2mClESZBzrVMyh8d6Ku1M+cMxe67BdRevZBzFKCDQSWF9l hCbrGxEMxBxb8gy/DhlPjB63KHd0r3UmC68i6E98vKdXcskUWf25/PmZ41IceHpL XGJSwSZwNluPPgXxm/0w5LkNcHImYzc8IQD+suDXhEHBVg8JhBNSKHhLPmilAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTp0vcyn1ukLuDY mCKN7li2TKgT/jAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4OWMzLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS80YzlhY2VjZS1kMDViLTRmNzMtOWM2ZS1kODc4NWQxNzg5YzMv MS9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4REVFNThCNjRDQTgxM0ZFLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqFHWBCzANBgkqhkiG9w0BAQsFAAOCAQEAI9sf 4eQqYlqsJ52jSLzGud4Qp/nzfQDQ5d7hTDKR7ZwnVTAfYXTOt6bil90lSENhHP5c vhVIGKryJDISD4XzUrUteRyDlzwN3C5Z3mQ3UPPvsRsAw9GQHjfBuCFGaZFuoXe0 aIkn4/woQhIOOGbN1+miHmujd119uNMpQKD5PJqLjDYRgSUn7Dsb+G6u5V9N9EQh N03Gyk+jzUua+1t/5jkwhrDSCItDh0+mMgXo6JkS5QDH9idYTxeyqmtnVIB1H7I/ BH3zAnL0rE6282yaZW7D4Ns2h9nXJUZityayIcneRxovGVeLkJ7ynT8m0qyT4wlW o1yy31UIsQXG7ZM5TQ== -----END CERTIFICATE-----Generated at Sat Dec 6 04:22:40 2025 by rpki-client