This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer
File:                     DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer (raw, json)
Hash identifier:          Y59Iau9nin7BF25bY/G3aQb/k2UfFjDTb0NVecR9cTA=
Subject key identifier:   DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Certificate issuer:       /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial:       71D3269653DBFF6B99EFA308F0DD37438057DA42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 18 Jan 2026 06:38:13 +0000
Certificate not after:    Sun 17 Jan 2027 06:43:13 +0000
Subordinate resources:    IP: 2a0f:1cc5:2d00::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d3:26:96:53:db:ff:6b:99:ef:a3:08:f0:dd:37:43:80:57:da:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
        Validity
            Not Before: Jan 18 06:38:13 2026 GMT
            Not After : Jan 17 06:43:13 2027 GMT
        Subject: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:17:34:80:02:cc:8f:25:b0:d7:f5:e0:64:
                    3c:84:0d:97:95:ae:e2:6a:09:03:6c:35:e6:f8:b3:
                    6a:d1:c2:27:14:0c:82:08:fa:79:55:2f:28:bb:d0:
                    75:42:d3:5a:0b:fe:67:ef:1e:03:52:b5:47:59:d7:
                    75:aa:70:1b:9f:68:8b:c7:4e:52:d1:26:bf:4e:44:
                    3b:c7:c6:5a:d0:c9:23:37:b2:e1:fb:64:0a:82:44:
                    88:d0:b1:7f:71:99:d7:9b:64:e0:c8:48:51:61:0f:
                    9a:5f:97:34:51:b5:97:3c:80:3d:43:50:a4:ef:3f:
                    da:a9:e8:8d:5c:6a:aa:48:15:5a:f6:e3:14:f1:09:
                    7c:13:b6:53:64:ac:c5:13:28:ab:71:cd:42:93:b9:
                    2d:16:f2:30:c8:ce:1e:af:8e:51:1b:c1:d5:90:25:
                    22:17:1e:6b:4c:ac:2b:f3:c1:20:11:3b:6c:a2:a8:
                    82:eb:c2:f9:93:d6:6b:22:6c:59:0b:a1:59:51:66:
                    5a:21:48:fc:89:92:e0:d2:18:fe:e7:55:c7:2a:61:
                    fc:a4:0b:92:92:a3:86:f9:00:e7:03:e5:a8:b0:b1:
                    68:34:35:65:76:00:1c:79:40:21:ba:d3:a8:e2:5b:
                    3e:2c:37:ed:34:66:4b:44:30:8d:5b:df:33:e7:88:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1
            X509v3 Authority Key Identifier:
                keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:d1:b8:9b:94:df:50:ef:64:32:de:4b:9a:fb:a0:03:23:47:
         9c:e7:13:6a:d6:89:63:9d:89:56:c5:4b:f5:8f:b9:3f:38:60:
         2d:82:61:1f:64:25:5e:f9:cf:32:7d:8f:26:fb:7b:50:80:fe:
         31:18:37:59:e4:2d:e2:f9:fc:99:f0:34:31:09:cd:40:23:0f:
         9e:28:45:21:38:cc:db:b8:78:61:53:ec:6d:fa:3b:bc:d8:6e:
         d3:a1:5c:ad:c7:6b:54:f3:44:13:12:5f:c6:0c:42:7d:5c:c3:
         46:73:af:26:cb:39:bb:43:34:f2:62:6b:60:0e:92:18:85:f9:
         3a:ba:c4:fa:37:81:79:9b:bd:72:a8:85:4e:33:b3:e0:31:a1:
         e0:43:a1:fb:a3:20:6c:36:3d:e1:a8:73:52:4b:e1:7d:c0:bc:
         c3:2c:f3:0e:ae:e5:9b:5c:e3:0b:85:1a:cb:79:f2:e4:27:66:
         c5:dc:c4:e7:fd:a3:47:8f:df:e2:50:4d:78:b1:5d:8a:d1:b3:
         43:0e:bc:5b:ea:50:ba:b5:4b:7e:b6:ac:c4:e7:84:5e:47:ba:
         8b:5b:a2:58:b3:11:0e:8f:71:e3:23:cd:2e:9a:0a:c0:14:ec:
         53:97:f9:24:a7:76:c1:77:7a:48:80:ea:48:f2:83:51:ec:4e:
         1c:3f:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----