This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer (raw, json) Hash identifier: mXOWkVI+O5dfAGsBgGASZf8zQGRkapL7Yid77qUV13A= Subject key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 02CB1BD90BDFEEEDA6318EE263D88FD4FFA92F7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 17 Jan 2026 21:57:06 +0000 Certificate not after: Sat 16 Jan 2027 22:02:06 +0000 Subordinate resources: IP: 2a0f:1cc5:1000::/40 IP: 2a0f:1cc5:2f00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cb:1b:d9:0b:df:ee:ed:a6:31:8e:e2:63:d8:8f:d4:ff:a9:2f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:57:06 2026 GMT Not After : Jan 16 22:02:06 2027 GMT Subject: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:a6:bc:76:2f:62:34:b7:a6:d7:91:e0:ca: 8c:90:c9:dd:f1:01:1a:20:71:94:01:23:19:35:ee: 76:6a:db:14:c2:ba:d0:41:56:00:6d:d1:6c:31:9c: df:4c:b9:57:b6:c5:9e:a2:8f:ad:a7:4b:91:95:f3: 9d:b6:05:4a:91:cc:a0:27:b3:db:45:b1:85:0e:8b: e9:1f:ef:10:3e:1d:ee:5e:1c:c5:bd:7c:1f:33:82: f4:6d:5a:8e:41:bb:fd:cf:c5:7a:09:f4:31:d3:7d: 2b:f1:58:ef:43:ee:f2:cf:5a:8c:d0:68:d9:cd:7d: 5c:96:5f:35:f1:36:26:d9:02:7b:47:cf:12:32:ba: d5:51:29:c4:cf:f6:c2:1f:9c:3b:0a:8f:d5:9f:e5: 70:cf:14:94:73:92:61:de:4b:3b:19:d8:67:7e:09: bd:bb:91:fa:c2:23:4c:ab:46:77:d6:a8:ef:d6:89: 08:bf:4d:08:c9:50:86:cc:2c:3f:7d:23:3e:ca:85: 7b:23:fd:8b:9f:a3:a8:33:f9:be:4a:09:d1:74:ba: 09:98:c7:31:86:73:1d:8c:2e:12:9e:1e:3f:22:fe: e0:bd:63:50:57:04:f8:ef:d1:de:d5:14:33:15:96: 59:d0:39:08:fc:84:88:75:94:63:c0:b2:21:97:ac: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1000::/40 2a0f:1cc5:2f00::/40 Signature Algorithm: sha256WithRSAEncryption 22:4c:ad:66:23:f6:1c:99:a6:a0:40:e0:cd:11:4d:fe:5b:76: 4e:6c:51:13:e7:48:79:d2:d7:00:03:49:93:74:f1:2c:54:ad: 82:0b:e4:73:0b:c1:64:b7:00:a1:9b:be:24:d3:ce:b8:5e:13: 05:aa:ab:fa:62:40:99:b2:9c:1d:67:a1:ab:84:5e:68:ae:44: ea:85:70:ca:3f:e4:ff:1f:48:71:a0:3c:f4:26:7a:32:60:0a: d2:a9:7a:81:e1:77:00:7d:c7:8a:9f:d0:de:75:c3:e1:a2:8a: dd:fc:a9:8a:5a:63:bf:2e:a6:36:40:e5:c8:e5:45:50:99:c7: f1:ec:cf:31:f2:3e:f1:a8:c9:6a:3a:3a:af:9e:cf:36:77:42: 2d:53:32:44:db:dc:37:17:11:7f:21:f7:44:84:00:bd:96:bf: 4a:de:b1:f1:5f:40:e2:1c:85:7d:25:ad:37:fa:de:e4:3d:37: ee:f8:49:ae:ed:11:d0:d3:56:1d:8a:eb:5f:92:c3:67:cc:81: 4e:b2:6c:e4:d5:72:db:b5:0c:41:25:ef:19:26:79:46:5c:ec: 97:87:8b:84:97:15:4b:6d:38:d2:1e:af:c5:85:dd:e4:0a:ad: 12:31:00:da:03:54:4b:88:0a:7c:b1:29:7e:2d:e5:19:75:c1: 3c:46:9f:4e -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUAssb2Qvf7u2mMY7iY9iP1P+pL3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTU3MDZaFw0yNzAxMTYyMjAyMDZaMDMxMTAvBgNV BAMTKEUxREI4N0JCQkJEMjBERkYyNjE5RTYxNEI4NkQ0QjdFOTFGQkI3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4qa8di9iNLem15HgyoyQyd3x ARogcZQBIxk17nZq2xTCutBBVgBt0WwxnN9MuVe2xZ6ij62nS5GV8522BUqRzKAn s9tFsYUOi+kf7xA+He5eHMW9fB8zgvRtWo5Bu/3PxXoJ9DHTfSvxWO9D7vLPWozQ aNnNfVyWXzXxNibZAntHzxIyutVRKcTP9sIfnDsKj9Wf5XDPFJRzkmHeSzsZ2Gd+ Cb27kfrCI0yrRnfWqO/WiQi/TQjJUIbMLD99Iz7KhXsj/Yufo6gz+b5KCdF0ugmY xzGGcx2MLhKeHj8i/uC9Y1BXBPjv0d7VFDMVllnQOQj8hIh1lGPAsiGXrM/fAgMB AAGjggLrMIIC5zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTh24e7u9IN/yYZ 5hS4bUt+kfu3OjAfBgNVHSMEGDAWgBRBHi1BHWh7y0RJw99Fvu3AQQB9lDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80MTFFMkQ0MTFENjg3QkNCNDQ0OUMzREY0 NUJFRURDMDQxMDA3RDk0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUVI0dFFS MW9lOHRFU2NQZlJiN3R3RUVBZlpRLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1ZWZjLzMv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMv My9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRCODZENEI3RTkxRkJCNzNBLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqDxzFEAMGACoPHMUvMA0GCSqGSIb3DQEBCwUA A4IBAQAiTK1mI/YcmaagQODNEU3+W3ZObFET50h50tcAA0mTdPEsVK2CC+RzC8Fk twChm74k0864XhMFqqv6YkCZspwdZ6GrhF5orkTqhXDKP+T/H0hxoDz0JnoyYArS qXqB4XcAfceKn9DedcPhoord/KmKWmO/LqY2QOXI5UVQmcfx7M8x8j7xqMlqOjqv ns82d0ItUzJE29w3FxF/IfdEhAC9lr9K3rHxX0DiHIV9Ja03+t7kPTfu+Emu7RHQ 01YdiutfksNnzIFOsmzk1XLbtQxBJe8ZJnlGXOyXh4uElxVLbTjSHq/Fhd3kCq0S MQDaA1RLiAp8sSl+LeUZdcE8Rp9O -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:30 2026 by rpki-client