This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer
File:                     ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (raw, json)
Hash identifier:          7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=
Subject key identifier:   EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9
Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
Certificate issuer:       /CN=B149F23A3E99C4760297DD7104B400C835D86D19
Certificate serial:       7DD6D37381B2300B152D823C13CD8BBF845B57C0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 11 Jan 2026 07:56:33 +0000
Certificate not after:    Sun 10 Jan 2027 08:01:33 +0000
Subordinate resources:    IP: 2a14:7583:f400::/44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 03:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d6:d3:73:81:b2:30:0b:15:2d:82:3c:13:cd:8b:bf:84:5b:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19
        Validity
            Not Before: Jan 11 07:56:33 2026 GMT
            Not After : Jan 10 08:01:33 2027 GMT
        Subject: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:24:cb:c6:b2:eb:0b:df:59:0d:97:21:f3:ee:
                    a6:81:5e:08:ca:18:5b:f7:5c:19:44:d6:b4:81:b6:
                    13:49:db:09:68:30:f7:db:b5:05:cc:c8:71:16:23:
                    b8:45:43:2a:17:eb:6e:96:2d:f6:e9:c7:41:36:e8:
                    82:24:22:ec:4f:cd:0a:d1:49:25:9f:07:67:3c:a0:
                    2a:d3:06:a3:d4:91:10:80:66:11:78:b2:8c:9a:72:
                    b8:e2:87:94:78:47:79:11:ec:22:2a:c0:a5:8e:83:
                    1d:00:96:3d:b1:6b:37:57:c0:62:d4:4b:84:a2:01:
                    26:be:1f:16:4f:2d:79:96:c0:c3:8b:2c:26:09:76:
                    e8:b8:35:cf:8e:ab:d8:51:ae:b6:86:c7:ea:f0:28:
                    b7:11:96:4c:16:85:87:d5:43:6b:ab:17:61:1c:35:
                    b0:36:38:93:56:db:1e:5c:a8:af:3a:e4:a8:55:95:
                    37:ef:e4:08:c1:7c:47:95:c0:4f:ac:a1:c2:de:92:
                    c1:b9:aa:13:39:98:8f:aa:47:8a:37:3f:f6:ed:17:
                    c7:3d:b5:dc:7f:9e:37:41:dc:92:4a:76:cf:81:79:
                    f0:bd:47:5d:89:e1:94:59:14:a5:7b:67:3c:9a:ea:
                    61:46:68:e8:dc:6a:d9:58:33:db:25:6e:1a:aa:1d:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9
            X509v3 Authority Key Identifier:
                keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f400::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:f6:65:12:14:e1:54:c0:0c:70:55:59:e4:2e:c2:e3:4a:
         c0:f9:e1:bb:a3:27:a0:80:28:30:93:57:f4:12:d6:5e:d8:9d:
         a0:f9:47:b2:eb:b6:2e:a8:16:31:1e:3b:f6:ad:b2:72:11:a0:
         96:94:0f:d7:60:ee:1d:f0:25:d1:40:49:45:18:f7:90:1a:c0:
         38:6f:a7:c1:e2:8e:9b:bd:f9:3a:b1:ef:ce:f4:50:c5:fd:50:
         e7:74:d7:71:74:ce:dd:a3:cc:b1:19:83:ec:66:d0:6e:18:27:
         da:5e:8e:4d:94:3c:fc:cd:ec:f0:02:0b:06:b8:93:da:d2:d1:
         1b:36:45:07:ed:60:87:d0:8c:cf:e6:db:b6:b5:d8:37:ab:53:
         15:07:00:34:c6:ac:47:88:cc:d7:49:c5:10:8d:2f:b3:ad:9d:
         b3:54:85:71:b9:45:2a:a5:2c:67:24:ac:cd:ef:f3:b8:c3:6c:
         99:fc:b7:70:36:b5:f9:0c:a9:fb:d7:df:ff:62:df:5f:39:89:
         39:76:1d:c1:15:68:9a:31:46:a8:bc:9f:cb:0d:42:03:2f:40:
         8c:e6:7f:72:05:55:a5:4d:8d:08:b0:fb:43:03:65:40:99:58:
         64:8c:da:2a:9c:c8:31:07:59:77:58:69:50:1b:14:08:01:fe:
         81:9c:e8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----