This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (raw, json) Hash identifier: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs= Subject key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 239506C9B38A7DC4D5D5ACC84D0F6C4D65EC0376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 04 Feb 2026 06:50:16 +0000 Certificate not after: Wed 03 Feb 2027 06:55:16 +0000 Subordinate resources: IP: 45.136.36.0/22 IP: 185.38.25.0 -- 185.38.27.255 IP: 194.31.164.0/22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:95:06:c9:b3:8a:7d:c4:d5:d5:ac:c8:4d:0f:6c:4d:65:ec:03:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Feb 4 06:50:16 2026 GMT Not After : Feb 3 06:55:16 2027 GMT Subject: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:fd:5d:c9:6c:8a:bc:5e:83:00:df:a2:72: fa:2c:5c:69:0a:03:ab:e1:39:d5:e5:9a:77:29:e7: 58:70:ce:1c:5d:22:f0:72:89:e1:8f:90:b0:d7:bb: cd:06:b3:3f:34:e9:94:d3:05:cd:19:d1:fd:93:84: 07:73:ba:a6:5f:03:d8:8f:72:d9:d3:16:5c:79:55: 10:2d:8b:36:5e:01:03:08:21:b8:8a:e1:ce:28:a7: 5b:dc:fc:5a:8a:19:eb:8a:01:44:c5:01:5b:88:c7: 35:e6:1a:5b:8e:76:9e:c9:d2:94:87:1f:14:5f:1d: 7b:c6:1a:a0:68:83:08:55:67:8c:5a:b9:f4:96:86: ff:36:58:31:86:6c:86:9b:d4:39:ce:63:78:c3:2a: 35:14:87:bf:2a:57:26:90:4a:56:9b:1a:b5:da:6f: e7:fc:0f:0e:14:dd:43:fa:2a:86:3e:9b:49:47:76: 3e:ed:d6:3a:ca:82:0e:a0:a2:71:76:c6:93:e3:9a: 79:1c:4c:4d:d9:14:3a:df:5a:db:e3:b3:b7:c5:01: 23:c8:9d:bd:85:96:57:95:c7:33:98:15:6f:61:8c: 74:7d:cc:5e:29:ff:b1:a8:e2:46:68:7e:7c:0a:f9: f3:19:ae:49:0f:bf:37:9b:a8:07:44:fe:2e:2c:be: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.36.0/22 185.38.25.0-185.38.27.255 194.31.164.0/22 Signature Algorithm: sha256WithRSAEncryption 44:3e:0a:9a:69:5c:40:ea:c1:19:fe:bf:19:d3:a5:1e:a2:23: 15:43:41:93:95:3a:6c:95:49:c2:df:2f:67:6e:ab:67:49:66: 8f:7d:11:8e:8a:a5:b0:cb:cf:48:55:33:49:9f:b9:5c:ce:a3: eb:94:76:5e:a6:bf:2f:a1:be:3c:20:98:7a:0f:b4:be:a5:d0: 88:1f:e5:91:16:17:cf:6a:7e:bd:3e:f5:5a:2a:ab:cb:1a:bb: 86:b5:6e:d1:74:f4:b3:72:87:9b:bd:c5:8a:10:64:c7:29:a4: eb:e4:52:45:fd:81:d8:4c:da:bb:85:b4:f2:f9:fd:19:4c:cc: bb:3f:ee:a4:49:cc:52:69:bc:19:5b:c4:b4:79:96:75:3c:77: b6:29:18:a9:5d:23:d2:68:4c:e5:bf:9c:bd:7c:57:12:9f:d8: f8:99:e9:08:35:3a:b5:f8:f5:79:03:3a:90:17:2f:63:3f:29: b7:f8:8d:3c:8b:bd:22:a3:4e:49:6d:a2:0b:1a:41:5f:45:6e: 50:6e:59:15:1c:ee:d6:30:7d:c1:9e:09:e2:07:dd:27:ef:da: fa:c7:2c:20:ac:3a:e3:22:ef:a7:58:6e:4e:1f:52:09:0b:2a: 5c:be:09:5a:79:eb:d0:80:c8:ec:9d:60:cb:f3:8d:8a:b8:2b: 92:9a:07:d6 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgIUI5UGybOKfcTV1azITQ9sTWXsA3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjAyMDQwNjUwMTZaFw0yNzAyMDMwNjU1MTZaMDMxMTAvBgNV BAMTKEFFMkUxREVGQUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZa/1dyWyKvF6DAN+icvosXGkK A6vhOdXlmncp51hwzhxdIvByieGPkLDXu80Gsz806ZTTBc0Z0f2ThAdzuqZfA9iP ctnTFlx5VRAtizZeAQMIIbiK4c4op1vc/FqKGeuKAUTFAVuIxzXmGluOdp7J0pSH HxRfHXvGGqBogwhVZ4xaufSWhv82WDGGbIab1DnOY3jDKjUUh78qVyaQSlabGrXa b+f8Dw4U3UP6KoY+m0lHdj7t1jrKgg6gonF2xpPjmnkcTE3ZFDrfWtvjs7fFASPI nb2FlleVxzOYFW9hjHR9zF4p/7Go4kZofnwK+fMZrkkPvzebqAdE/i4svg4nAgMB AAGjggL1MIIC8TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuLh3vrYH/OeAo PtYbyfncbam+ljAfBgNVHSMEGDAWgBSMwwD68vbUkYaoti4I8ZAQd0OXPTAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZBOEI2MkUw OEYxOTAxMDc3NDM5NzNELmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvak1NQS12 TDIxSkdHcUxZdUNQR1FFSGREbHowLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcxNzEwLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9mMDdjOTNlZC1iODE5LTQ1ZTgtOTQ1ZC00MjYzNmQ0NzE3MTAv MC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYxQkM5RjlEQzZEQTlCRTk2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBAItiCQwDAMEALkmGQMEArkmGAMEAsIfpDANBgkq hkiG9w0BAQsFAAOCAQEARD4KmmlcQOrBGf6/GdOlHqIjFUNBk5U6bJVJwt8vZ26r Z0lmj30RjoqlsMvPSFUzSZ+5XM6j65R2Xqa/L6G+PCCYeg+0vqXQiB/lkRYXz2p+ vT71Wiqryxq7hrVu0XT0s3KHm73FihBkxymk6+RSRf2B2Ezau4W08vn9GUzMuz/u pEnMUmm8GVvEtHmWdTx3tikYqV0j0mhM5b+cvXxXEp/Y+JnpCDU6tfj1eQM6kBcv Yz8pt/iNPIu9IqNOSW2iCxpBX0VuUG5ZFRzu1jB9wZ4J4gfdJ+/a+scsIKw64yLv p1huTh9SCQsqXL4JWnnr0IDI7J1gy/ONirgrkpoH1g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:35 2026 by rpki-client