This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer File: EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer (raw, json) Hash identifier: 55AVkOkUVWVGxB8z+0ywM2HITqlO6ifIJjdcRDFFI2Y= Subject key identifier: EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 553AF66217EBDA01BC3F01667BD2DFA42B03EABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 16:27:40 +0000 Certificate not after: Thu 14 Jan 2027 16:32:40 +0000 Subordinate resources: IP: 2a14:7581:3800::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3a:f6:62:17:eb:da:01:bc:3f:01:66:7b:d2:df:a4:2b:03:ea:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 15 16:27:40 2026 GMT Not After : Jan 14 16:32:40 2027 GMT Subject: CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:8a:21:f7:c8:68:67:48:d8:bb:20:1a:c8: 6f:cf:8a:52:0c:ed:ba:0e:31:6f:8c:b4:dd:9a:17: 93:84:ab:7b:32:5f:35:0b:a3:70:c2:82:ee:45:a0: 8c:77:e6:1b:1a:cf:50:63:c9:43:58:db:cd:20:79: 76:86:18:52:f2:c8:65:33:32:2c:d7:7a:cd:c0:d6: 44:78:4c:62:c6:26:b7:82:c4:d6:7c:1f:77:03:72: d2:e0:75:79:00:f0:aa:a1:72:ab:c3:62:18:26:e0: 19:cc:8d:a1:fa:0f:29:67:13:a6:39:f5:af:57:34: bd:5d:ec:48:64:3e:7e:ab:39:81:b0:b5:d3:cd:d4: 63:5d:20:3d:af:aa:59:00:2b:ce:a7:1c:a7:fd:5c: 63:55:c8:96:fb:52:0c:a2:d2:a2:32:b3:83:d1:63: 5a:86:1d:8c:5d:b5:be:49:8c:5b:3c:2d:21:dd:de: 09:e2:7f:43:ac:83:00:30:f2:12:81:20:a8:68:22: 1f:28:7c:06:ff:40:97:6c:a9:07:e7:61:67:d8:78: 17:ff:d8:0a:db:46:bb:9f:d7:5d:4b:fd:30:c6:2f: 8a:1c:f0:90:1f:a3:01:f0:76:46:68:b1:9e:6c:e2: 8b:67:ea:a7:b0:29:f9:12:0c:34:d5:20:9d:19:2c: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3800::/40 Signature Algorithm: sha256WithRSAEncryption 46:77:84:5b:f7:58:54:3f:49:98:40:a4:95:f5:2e:5d:b1:ca: 50:4b:3e:73:8e:d4:42:0e:18:07:89:20:f3:9d:c9:dd:46:86: 23:86:95:42:59:d4:39:cf:5e:b7:4b:35:1a:bb:0f:23:4d:aa: f0:f3:c9:68:d6:a0:8c:dd:ca:09:1e:7f:e0:0d:1b:4a:58:f4: d0:04:2e:82:73:46:b8:fc:0c:bd:a7:4f:ee:e4:5c:f6:8e:1c: 10:9d:36:78:40:58:19:d3:24:eb:3b:92:3f:c6:e0:cb:26:a1: 6f:0b:4e:89:1c:1e:e3:ca:a4:28:ce:a8:00:84:10:51:20:6c: 1c:3c:50:95:af:a5:e7:b8:e2:e7:b8:26:b4:e8:28:8e:62:ed: 98:79:35:08:3c:70:a1:29:fd:24:e5:be:37:ac:ec:49:f6:f4: ec:88:91:a4:42:5a:c5:3e:46:f8:9c:93:f8:f9:67:a3:07:21: 8e:c7:74:2f:c8:82:37:da:aa:98:3e:e5:b9:14:da:99:c6:d7: ca:0d:62:29:27:32:37:62:a6:62:59:40:93:43:53:6f:9e:ca: f7:3c:0b:1a:23:ae:9e:aa:f0:60:f4:9e:b3:54:be:54:93:93: 57:c3:b7:62:0f:27:2d:73:3d:57:ca:b2:ac:b4:46:32:b8:85: 40:19:50:00 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUVTr2Yhfr2gG8PwFme9LfpCsD6rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMTUxNjI3NDBaFw0yNzAxMTQxNjMyNDBaMDMxMTAvBgNV BAMTKEVDNUY1NzlBMDY4Q0U2Q0ZCRjQ2RkRBN0MzRUI0REQ2Rjk0NjUzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqeooh98hoZ0jYuyAayG/PilIM 7boOMW+MtN2aF5OEq3syXzULo3DCgu5FoIx35hsaz1BjyUNY280geXaGGFLyyGUz MizXes3A1kR4TGLGJreCxNZ8H3cDctLgdXkA8KqhcqvDYhgm4BnMjaH6DylnE6Y5 9a9XNL1d7EhkPn6rOYGwtdPN1GNdID2vqlkAK86nHKf9XGNVyJb7Ugyi0qIys4PR Y1qGHYxdtb5JjFs8LSHd3gnif0OsgwAw8hKBIKhoIh8ofAb/QJdsqQfnYWfYeBf/ 2ArbRruf111L/TDGL4oc8JAfowHwdkZosZ5s4otn6qewKfkSDDTVIJ0ZLBFRAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsX1eaBozmz79G /afD603W+UZT8TAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0YWQwLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS85MDgyMTg5OS03N2E2LTQzYTctOWE4Mi0wYTM4ZmYzYjRhZDAv MC9FQzVGNTc5QTA2OENFNkNGQkY0NkZEQTdDM0VCNERENkY5NDY1M0YxLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqFHWBODANBgkqhkiG9w0BAQsFAAOCAQEARneE W/dYVD9JmECklfUuXbHKUEs+c47UQg4YB4kg853J3UaGI4aVQlnUOc9et0s1GrsP I02q8PPJaNagjN3KCR5/4A0bSlj00AQugnNGuPwMvadP7uRc9o4cEJ02eEBYGdMk 6zuSP8bgyyahbwtOiRwe48qkKM6oAIQQUSBsHDxQla+l57ji57gmtOgojmLtmHk1 CDxwoSn9JOW+N6zsSfb07IiRpEJaxT5G+JyT+Plnowchjsd0L8iCN9qqmD7luRTa mcbXyg1iKScyN2KmYllAk0NTb57K9zwLGiOunqrwYPSes1S+VJOTV8O3Yg8nLXM9 V8qyrLRGMriFQBlQAA== -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:35 2026 by rpki-client