This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer
File:                     F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer (raw, json)
Hash identifier:          LdopN9CC0r4Nwqxx5GmS/dZbhn4m8whx++heNOjWO4g=
Subject key identifier:   F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       4194D01DDE8F04CA571498B64A6436CA45AAB0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 14:19:21 +0000
Certificate not after:    Tue 26 Jan 2027 14:24:21 +0000
Subordinate resources:    IP: 2a11:f2c0:ffce::/48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 15:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:94:d0:1d:de:8f:04:ca:57:14:98:b6:4a:64:36:ca:45:aa:b0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jan 27 14:19:21 2026 GMT
            Not After : Jan 26 14:24:21 2027 GMT
        Subject: CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:f9:7f:20:aa:b3:b1:1f:59:2b:34:51:ac:
                    69:de:fe:2a:65:73:4b:eb:1c:d3:f8:da:9d:fe:47:
                    51:55:29:d0:59:fb:ee:b6:d3:5a:69:36:60:4f:18:
                    a1:1a:c4:a0:50:ad:99:15:04:1f:53:77:8a:13:3a:
                    e4:4d:a1:dc:6f:23:3c:81:d5:af:2c:08:84:b5:b8:
                    63:d2:e9:8a:ee:58:e0:7e:d1:6d:f9:eb:ef:4d:1e:
                    d3:55:32:ef:e8:20:d6:1f:89:11:87:b8:47:ff:bd:
                    7b:16:bf:bf:45:9f:c2:96:29:8e:4a:ff:ca:75:73:
                    25:ff:e3:19:a4:ac:dc:15:4e:b1:3a:6c:3a:e1:b0:
                    ef:c7:8e:26:98:9a:05:39:19:f0:97:57:5f:46:71:
                    4b:0d:14:4d:4d:22:cf:4e:9b:0a:74:44:a1:44:0b:
                    44:e7:4b:32:2b:5c:5b:fb:13:6e:5a:d5:0a:0a:eb:
                    df:31:a2:93:4c:cc:de:23:85:69:a2:b1:2b:55:3b:
                    fa:04:e6:94:8f:d2:ff:49:42:d7:0d:ef:c7:d1:e6:
                    53:0e:5f:b1:75:f2:24:cf:20:30:f0:76:f7:e5:54:
                    ad:b4:1b:19:83:4d:19:2c:9f:88:b4:fd:7d:27:fe:
                    7c:b6:d2:80:45:36:99:1b:11:cf:4e:77:ed:9b:35:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffce::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:97:7d:37:f2:d0:02:cb:d8:80:76:19:e2:d3:ea:d6:16:61:
         50:02:c7:56:de:d5:10:a5:f8:5e:45:f6:5d:21:b4:8b:1e:e8:
         f6:09:9c:c9:df:e7:02:8f:d1:9e:8d:b7:92:9a:cc:75:ac:12:
         31:dc:a4:ec:81:00:07:30:2d:80:dd:82:bd:eb:f9:ca:ff:cc:
         95:43:b5:73:5a:53:d5:ba:ef:99:be:9c:50:cb:2f:c7:b2:c2:
         e1:24:33:d2:49:9f:3b:9d:54:98:97:73:73:ef:fe:8f:d7:ae:
         66:a5:4d:31:4f:ba:bb:0a:35:fb:2c:08:47:82:8f:8e:fd:2d:
         7e:87:c1:5e:52:2a:d0:7f:1b:5e:ab:12:5d:c6:72:fe:f7:a7:
         ae:57:55:ae:86:d8:0b:80:4b:34:6e:5a:e2:f6:98:f1:a7:6e:
         35:ee:07:d9:06:92:27:0d:58:b0:f2:86:c2:1b:65:b0:8c:2a:
         7f:c9:cf:ad:d8:1b:42:8a:11:e7:0f:52:9e:22:cb:d2:5e:e5:
         b9:be:ee:67:1f:2d:96:e4:30:c3:eb:56:16:05:85:d5:c8:6f:
         f5:2e:e0:63:53:fa:92:a1:2e:89:e3:2b:f0:e7:78:2c:f8:8c:
         5f:46:39:70:99:ef:ee:89:41:8c:f5:15:62:86:02:41:28:81:
         8b:9c:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----