This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer
File:                     F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer (raw, json)
Hash identifier:          QbrNCVPc8+xJiemM4vSh4VreacDzdIbaeAjxGfO+CbM=
Subject key identifier:   F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       35E5CD8D44D6412608991EE920663E6C2D3C083D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 19 Dec 2025 14:39:00 +0000
Certificate not after:    Fri 18 Dec 2026 14:44:00 +0000
Subordinate resources:    IP: 2a14:7581:9c00::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e5:cd:8d:44:d6:41:26:08:99:1e:e9:20:66:3e:6c:2d:3c:08:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Dec 19 14:39:00 2025 GMT
            Not After : Dec 18 14:44:00 2026 GMT
        Subject: CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:ba:43:05:2a:7a:11:10:81:90:b0:b4:05:
                    76:ac:bb:be:10:b2:3d:dc:4f:d8:e2:9f:49:44:23:
                    39:4c:39:e6:d2:67:26:e3:0a:8c:28:f2:1a:72:2f:
                    23:3b:52:26:c5:58:53:40:ed:9f:00:f1:4c:17:16:
                    f7:24:76:67:46:80:1c:48:eb:69:18:eb:f5:b3:bb:
                    ec:1e:8e:38:4a:aa:d0:a1:f3:23:3c:2b:3e:c5:36:
                    37:b8:be:59:34:e6:06:57:b4:14:ae:dd:67:57:43:
                    e5:ef:d0:47:3b:74:55:5b:7b:c3:d5:df:75:e8:1d:
                    a5:1c:5a:ad:30:7f:be:3c:5b:2f:25:ed:a6:22:c4:
                    4f:8e:d0:a5:5e:99:d5:e2:eb:be:33:89:f5:a7:8d:
                    3b:eb:a7:f0:3e:a1:a3:26:75:8b:19:85:9d:95:e1:
                    d9:73:50:90:cd:d2:25:e9:12:0c:c2:d6:51:de:30:
                    b2:a1:02:77:a2:4f:61:d7:f1:0f:b3:bf:7d:6e:66:
                    67:72:f7:6f:47:97:79:64:70:a9:d1:c5:13:4a:bb:
                    7b:2e:30:c3:eb:53:32:25:ea:d9:fd:62:c1:5c:8e:
                    c5:1a:2c:25:25:3c:7b:33:16:9b:b6:ed:8a:8a:34:
                    b4:3f:7a:aa:71:8f:73:4c:dc:b5:09:cd:42:4a:63:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:91:ee:7c:7f:6b:e7:31:68:96:3f:7c:11:d1:cd:95:63:b6:
         fd:30:f9:83:6d:bb:07:e0:c8:77:02:e7:cd:50:41:87:df:b8:
         58:df:ef:95:b9:b7:ca:99:80:3d:b9:a6:1c:03:59:ba:8d:1b:
         5e:fe:ce:32:61:12:1a:6c:24:f5:e4:14:45:e7:d4:b8:b0:47:
         25:51:2d:bc:f3:d4:6d:ea:a7:cb:ac:55:09:06:b4:57:dc:a9:
         dc:0e:f6:b1:6a:59:e8:70:af:a9:e2:3c:c1:4c:70:a6:26:0c:
         57:72:76:a8:3b:1d:11:0a:5c:94:6f:7a:24:4b:d4:ba:ca:da:
         32:fb:b1:38:0d:3e:62:92:57:17:87:71:71:73:16:e3:b1:da:
         6f:71:46:63:01:16:b5:44:c0:ca:f2:c9:aa:48:5c:94:9c:21:
         96:ac:e9:f6:cb:fd:30:cd:15:46:fc:cd:e4:ae:09:66:4e:6a:
         97:97:c8:e5:79:d7:36:57:bb:92:ed:29:65:16:ac:21:0a:b1:
         81:97:8d:22:fc:96:18:c7:29:8e:67:cd:39:9f:ad:9e:cb:25:
         87:a8:9b:d5:53:b4:9c:85:22:87:68:d1:f3:6d:1f:a2:ee:1b:
         a6:e7:a6:dd:06:91:2a:c4:36:f0:4a:24:a3:ad:b5:e4:26:3c:
         5d:0b:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----