This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer File: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer (raw, json) Hash identifier: eBrPnqoU2fK0a05epgcmK8gabwFEbJT1FYBDFfmwEqM= Subject key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 63E4FF3C4E58DF93C8AE7B84340745C729C52623 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft caRepository: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Mon 01 Dec 2025 13:40:28 +0000 Certificate not after: Mon 30 Nov 2026 13:45:28 +0000 Subordinate resources: IP: 2a07:54c1:c000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 20:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e4:ff:3c:4e:58:df:93:c8:ae:7b:84:34:07:45:c7:29:c5:26:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Dec 1 13:40:28 2025 GMT Not After : Nov 30 13:45:28 2026 GMT Subject: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:dd:2a:c5:2a:ca:07:64:3a:90:38:3f:c1: 74:70:ac:e9:ec:d1:0d:f5:f7:7c:ab:6d:11:14:6e: fc:c7:ff:b4:42:87:a9:8d:c5:51:e2:56:c4:32:06: de:ec:b3:55:c6:5b:65:49:70:e8:88:f1:d3:0a:27: f9:b6:29:86:fc:c9:06:74:ee:6e:8d:17:99:34:73: 7f:3e:d1:48:a3:4e:99:11:5e:1e:41:73:5e:4a:cf: c2:e5:db:ef:eb:e3:45:4c:8f:0c:6b:d4:e4:6f:66: 2c:51:48:80:9c:9c:ff:a6:99:8b:c1:b8:0f:11:31: b2:fd:96:e9:86:8a:02:45:0c:d5:50:ab:1b:fe:69: 92:8a:5a:de:9b:cf:c2:05:04:f9:8d:68:af:9f:0d: 79:70:62:42:3a:4a:f5:1c:0c:9b:d3:fc:a8:2d:29: cd:e9:c2:c7:55:1c:be:85:75:23:e3:7c:be:ca:ed: ce:10:6b:2b:65:cd:13:5a:e6:3e:2c:e2:ec:b4:c4: ac:76:9f:74:26:5d:8f:83:65:16:2a:af:db:46:6f: e0:07:74:1e:f9:34:2e:81:31:00:2f:80:f7:a2:25: ca:3c:e2:59:a4:e8:65:f6:b3:c7:77:82:87:59:b3: a9:97:98:82:56:8a:d4:59:b6:01:30:66:6e:d0:90: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:2a:f9:2a:2e:71:21:63:cd:cc:a7:17:64:c8:df:a2:47:98: 57:75:b7:5b:94:dd:27:11:44:92:29:0b:65:ad:d8:0a:7d:76: cd:ea:31:65:b0:bd:b4:01:6b:66:be:dc:ba:98:8d:77:72:24: f0:70:c9:9c:4c:9d:ac:55:29:60:49:c4:76:96:e4:8f:f7:44: 7d:d7:3a:3f:75:64:c0:1a:e2:92:c4:94:4d:fd:1d:28:fc:eb: b5:e0:22:76:a6:6a:44:a5:08:9e:40:73:5d:f1:e9:05:27:1e: 74:59:65:d5:ce:69:59:ea:cc:ca:3e:9a:41:3f:23:1a:8c:86: 40:c3:cc:5b:ff:6a:2d:15:50:28:e3:5b:5c:0c:c3:89:2a:65: 72:35:d0:65:c2:e9:4a:a5:21:cd:a7:8d:1d:7d:55:2d:38:13: 3f:0a:a6:37:95:15:47:b4:4f:a1:46:94:89:17:6b:45:2d:58: 84:b0:a9:58:bc:4f:38:a2:30:34:2a:40:ae:5c:3c:23:a1:b8: 3f:8f:9f:f3:a8:2b:76:5e:e8:64:35:20:32:3a:d4:bc:f9:95: 90:b5:e0:be:6e:2c:cc:ef:7a:a9:ab:61:12:79:aa:5d:08:e9: ee:ea:a7:bb:90:e5:4f:97:3c:66:57:d2:c8:ff:09:0d:56:2f: df:ee:a1:ff -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUY+T/PE5Y35PIrnuENAdFxynFJiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTEyMDExMzQwMjhaFw0yNjExMzAxMzQ1MjhaMDMxMTAvBgNV BAMTKEVENDU0Qjk5QzJCMEU0NzJBOTU0MkY5MDk0NDlFQkU4RjMxRkZBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcd0qxSrKB2Q6kDg/wXRwrOns 0Q3193yrbREUbvzH/7RCh6mNxVHiVsQyBt7ss1XGW2VJcOiI8dMKJ/m2KYb8yQZ0 7m6NF5k0c38+0UijTpkRXh5Bc15Kz8Ll2+/r40VMjwxr1ORvZixRSICcnP+mmYvB uA8RMbL9lumGigJFDNVQqxv+aZKKWt6bz8IFBPmNaK+fDXlwYkI6SvUcDJvT/Kgt Kc3pwsdVHL6FdSPjfL7K7c4QaytlzRNa5j4s4uy0xKx2n3QmXY+DZRYqr9tGb+AH dB75NC6BMQAvgPeiJco84lmk6GX2s8d3godZs6mXmIJWitRZtgEwZm7QkPbLAgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtRUuZwrDkcqlU L5CUSevo8x/62TAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS9jZWE1YjM0ODRjMmI0NTBmYjI3NzNiMWI5ODFmNTA4Ny8xLzCBgAYIKwYBBQUH MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jZWE1YjM0 ODRjMmI0NTBmYjI3NzNiMWI5ODFmNTA4Ny8xL0VENDU0Qjk5QzJCMEU0NzJBOTU0 MkY5MDk0NDlFQkU4RjMxRkZBRDkubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoHVMHAMA0G CSqGSIb3DQEBCwUAA4IBAQB7KvkqLnEhY83MpxdkyN+iR5hXdbdblN0nEUSSKQtl rdgKfXbN6jFlsL20AWtmvty6mI13ciTwcMmcTJ2sVSlgScR2luSP90R91zo/dWTA GuKSxJRN/R0o/Ou14CJ2pmpEpQieQHNd8ekFJx50WWXVzmlZ6szKPppBPyMajIZA w8xb/2otFVAo41tcDMOJKmVyNdBlwulKpSHNp40dfVUtOBM/CqY3lRVHtE+hRpSJ F2tFLViEsKlYvE84ojA0KkCuXDwjobg/j5/zqCt2XuhkNSAyOtS8+ZWQteC+bizM 73qpq2ESeapdCOnu6qe7kOVPlzxmV9LI/wkNVi/f7qH/ -----END CERTIFICATE-----Generated at Thu Dec 4 08:15:10 2025 by rpki-client