This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer (raw, json) Hash identifier: X7BtIqYuY9CGfqbBF9famZoZLIlZWc4+DDZ02mC1ZUY= Subject key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 708A4B670F48755F70C63D0DBD23C695B6F3191F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 18 Jan 2026 06:33:04 +0000 Certificate not after: Sun 17 Jan 2027 06:38:04 +0000 Subordinate resources: IP: 2a0f:1cc5:f00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8a:4b:67:0f:48:75:5f:70:c6:3d:0d:bd:23:c6:95:b6:f3:19:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 18 06:33:04 2026 GMT Not After : Jan 17 06:38:04 2027 GMT Subject: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:9d:5a:ca:44:99:e7:ca:09:87:f5:25:3b: 21:ee:19:69:42:26:c2:aa:9f:4b:13:33:3a:1e:a3: 88:cc:ce:a6:79:e0:d1:6e:22:a9:cf:bd:a6:35:01: 73:c8:59:44:fe:50:80:b9:c6:e3:1e:9e:eb:a5:e1: d4:80:d9:77:1c:51:32:d6:9d:05:72:64:82:bc:7c: db:7c:9f:66:3f:ae:b8:7d:73:18:61:40:d5:be:dc: ee:e7:4f:71:c5:fa:1b:79:07:0f:f0:a2:9d:f3:f7: 3f:60:0d:a0:25:66:07:41:1a:5c:c4:0c:c3:d7:05: 47:4b:d0:26:50:28:85:3b:1e:28:2b:6c:ac:a9:db: 2e:73:45:7d:27:6e:5e:9a:a5:ac:8b:93:ab:c8:9a: a4:43:66:08:ea:cb:2e:72:09:ea:7b:ad:46:41:03: 82:c3:8a:87:3b:e4:df:89:77:cc:b9:cf:a9:7e:41: fd:22:35:65:f7:d8:c1:ab:89:7f:6e:c4:fb:77:08: c2:c2:b9:1c:50:4e:4d:cb:76:38:aa:51:9c:5c:21: bf:31:db:a6:c5:a1:a1:ce:68:37:fe:98:7f:13:bf: e6:d1:dc:8b:ae:46:a7:e2:64:f9:5d:5f:7d:de:9e: c3:70:49:eb:16:8a:92:69:39:16:ee:09:ad:5f:fc: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:f00::/40 Signature Algorithm: sha256WithRSAEncryption 14:8c:f6:b1:70:df:5f:ac:f6:d2:7c:75:ee:50:9c:1d:d4:91: 71:57:a1:3f:cd:53:e5:83:c1:ba:fc:49:c5:78:25:ee:f0:9a: ec:23:b6:fd:92:24:9c:f4:bb:4f:95:47:72:e8:77:0a:5f:85: 97:4c:70:12:85:32:a9:e3:8c:fa:fa:ca:0c:7d:77:98:e9:34: 14:cc:ec:96:3c:5f:95:0c:9f:51:a3:df:43:de:77:b9:ce:22: 22:7b:73:05:4c:bd:5d:6a:e3:74:c2:89:48:4a:7a:fd:76:c6: f0:a3:17:35:c3:f4:03:ff:ca:be:01:ec:e8:a5:15:ba:60:de: d6:af:cf:05:38:6b:9f:56:19:f8:9e:37:4d:d9:5b:e7:28:b7: 7c:be:3e:74:bf:1c:d6:50:df:81:49:c3:b8:2c:86:ee:ee:fa: 57:b2:7e:9f:51:6f:35:6c:2d:06:4d:60:f8:fc:6b:f6:36:29: b0:ee:f7:65:43:95:b0:4e:5a:a0:34:21:c1:f2:76:3e:17:5f: b0:6f:88:36:83:4b:3e:ce:c0:3b:dd:38:d9:a5:c3:e1:db:d4: 8d:31:60:de:98:92:59:cc:d4:ed:94:e5:b3:3c:5f:aa:40:a3: 19:c9:96:b5:20:97:cc:0f:e6:66:91:5b:21:50:ea:f5:19:c0: 62:54:d8:4a -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUcIpLZw9IdV9wxj0NvSPGlbbzGR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTgwNjMzMDRaFw0yNzAxMTcwNjM4MDRaMDMxMTAvBgNV BAMTKEQ1RUU2M0Q5QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbv51aykSZ58oJh/UlOyHuGWlC JsKqn0sTMzoeo4jMzqZ54NFuIqnPvaY1AXPIWUT+UIC5xuMenuul4dSA2XccUTLW nQVyZIK8fNt8n2Y/rrh9cxhhQNW+3O7nT3HF+ht5Bw/wop3z9z9gDaAlZgdBGlzE DMPXBUdL0CZQKIU7HigrbKyp2y5zRX0nbl6apayLk6vImqRDZgjqyy5yCep7rUZB A4LDioc75N+Jd8y5z6l+Qf0iNWX32MGriX9uxPt3CMLCuRxQTk3LdjiqUZxcIb8x 26bFoaHOaDf+mH8Tv+bR3IuuRqfiZPldX33ensNwSesWipJpORbuCa1f/JDhAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTV7mPZsdLVxvrc mhaem0r2RM836TAfBgNVHSMEGDAWgBRBHi1BHWh7y0RJw99Fvu3AQQB9lDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80MTFFMkQ0MTFENjg3QkNCNDQ0OUMzREY0 NUJFRURDMDQxMDA3RDk0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUVI0dFFS MW9lOHRFU2NQZlJiN3R3RUVBZlpRLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAwNjJmLzQv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8xNTE3YjVkMC0zMzE3LTRiNDktOGVjNS1iZTkwYmM3MDA2MmYv NC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5RTlCNEFGNjQ0Q0YzN0U5Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqDxzFDzANBgkqhkiG9w0BAQsFAAOCAQEAFIz2 sXDfX6z20nx17lCcHdSRcVehP81T5YPBuvxJxXgl7vCa7CO2/ZIknPS7T5VHcuh3 Cl+Fl0xwEoUyqeOM+vrKDH13mOk0FMzsljxflQyfUaPfQ953uc4iIntzBUy9XWrj dMKJSEp6/XbG8KMXNcP0A//KvgHs6KUVumDe1q/PBThrn1YZ+J43Tdlb5yi3fL4+ dL8c1lDfgUnDuCyG7u76V7J+n1FvNWwtBk1g+Pxr9jYpsO73ZUOVsE5aoDQhwfJ2 PhdfsG+INoNLPs7AO9042aXD4dvUjTFg3piSWczU7ZTlszxfqkCjGcmWtSCXzA/m ZpFbIVDq9RnAYlTYSg== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:19 2026 by rpki-client