This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer File: 61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer (raw, json) Hash identifier: 5smco8qrRnGsIAeF9irHC2n/2oa/OuqG0MwUtJEvMac= Subject key identifier: 61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 2EE4B5757370C3C5123C6BB1AE056664E47EA655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 11:22:49 +0000 Certificate not after: Fri 11 Dec 2026 11:27:49 +0000 Subordinate resources: IP: 2a0f:1cc5:c00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e4:b5:75:73:70:c3:c5:12:3c:6b:b1:ae:05:66:64:e4:7e:a6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 12 11:22:49 2025 GMT Not After : Dec 11 11:27:49 2026 GMT Subject: CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:63:e7:a2:b3:a1:11:a6:31:24:8d:10:ba:be: 74:64:31:48:98:65:39:92:2f:bd:a3:81:d5:04:f2: 10:eb:a3:5b:f5:8c:8a:6e:24:65:e2:99:c9:62:39: 73:22:70:2d:ab:72:13:34:4a:2a:f7:99:f4:17:5e: 35:89:0a:a9:a5:c5:26:9c:09:c1:35:19:9a:84:e0: 43:e4:06:54:71:a6:e7:a5:56:c8:fa:af:6a:04:9b: 38:a9:57:14:63:e4:af:af:8c:0f:4b:57:28:b5:fb: 17:5e:70:b7:65:14:84:5a:4e:9b:5b:c7:9b:4c:2b: 6d:22:99:7f:bc:69:7b:04:e8:94:00:ce:20:11:b0: 8c:d0:a8:12:6f:c3:28:a0:89:de:57:b9:a7:20:18: 3e:bf:6c:20:0c:7e:cb:c9:61:97:f2:0c:60:ee:ca: 71:0b:fc:1f:f2:c4:49:fa:ab:87:97:b2:d7:96:85: f6:02:20:ef:31:c6:8c:d1:4e:39:52:a9:f0:48:87: 2f:2f:f5:41:84:e3:29:67:fc:94:bd:44:57:71:ee: 45:11:34:4e:03:68:4a:5a:93:11:72:d7:a7:db:ed: b5:a7:f5:f2:a8:04:95:24:81:f2:eb:67:e0:4e:64: 11:50:5f:8b:53:fc:a8:6b:49:04:de:bb:6e:6b:cb: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:c00::/40 Signature Algorithm: sha256WithRSAEncryption b6:f2:3f:62:2f:44:cb:8d:21:53:32:13:d8:cb:2a:7b:42:e9: b5:62:0a:3a:c6:62:6d:fa:c3:96:77:00:fd:16:88:3f:2e:83: 8f:2c:01:66:40:a2:97:62:60:2a:4c:a2:9f:06:61:ab:77:3b: 02:41:7d:90:33:cf:3c:a8:37:c1:a9:b8:e1:45:a8:e3:60:ea: e2:2a:7d:82:a1:6d:07:4f:74:8b:dc:48:2e:2e:d2:cd:28:d2: 29:4d:13:c4:3e:e6:0f:09:15:9d:8c:0b:2e:45:3a:9c:5e:e0: a1:c6:67:5a:0a:9e:41:23:be:30:62:9f:08:8b:48:99:3a:84: 50:47:ae:44:8b:8c:27:8b:5a:07:e7:83:02:47:0f:ad:c1:a6: 8d:f5:b1:ab:fe:ba:d7:af:60:e1:d6:b2:b5:38:00:1d:d7:2d: ce:34:ac:d3:e4:34:d7:03:cc:87:9b:8b:37:e1:1f:c4:63:ec: 56:15:43:fb:32:e1:93:4b:2b:20:ff:8f:44:e0:a3:66:24:cc: 44:bc:3c:aa:46:40:f8:61:0b:fa:e7:e2:f7:d8:ce:75:05:66: c0:d9:30:03:e5:1b:b0:71:1a:4a:04:79:75:70:25:cb:35:27: 7f:f5:d9:d2:22:33:0a:f1:45:f9:22:c6:48:2e:86:93:9f:40: 6b:ee:cb:20 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIULuS1dXNww8USPGuxrgVmZOR+plUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTIxMTIyNDlaFw0yNjEyMTExMTI3NDlaMDMxMTAvBgNV BAMTKDYxRDlGNEI3Q0Y4RDg2MDYwMzA4MkUwN0ZEQ0EwODUxOEUxNkFBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWY+eis6ERpjEkjRC6vnRkMUiY ZTmSL72jgdUE8hDro1v1jIpuJGXimcliOXMicC2rchM0Sir3mfQXXjWJCqmlxSac CcE1GZqE4EPkBlRxpuelVsj6r2oEmzipVxRj5K+vjA9LVyi1+xdecLdlFIRaTptb x5tMK20imX+8aXsE6JQAziARsIzQqBJvwyigid5XuacgGD6/bCAMfsvJYZfyDGDu ynEL/B/yxEn6q4eXsteWhfYCIO8xxozRTjlSqfBIhy8v9UGE4yln/JS9RFdx7kUR NE4DaEpakxFy16fb7bWn9fKoBJUkgfLrZ+BOZBFQX4tT/KhrSQTeu25ry7GtAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRh2fS3z42GBgMI Lgf9yghRjhaq+zAfBgNVHSMEGDAWgBR1qDjgLGGAD3PTAZ3gpR9We2S8DjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC83NUE4MzhFMDJDNjE4MDBGNzNEMzAxOURF MEE1MUY1NjdCNjRCQzBFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGFnNDRD eGhnQTl6MHdHZDRLVWZWbnRrdkE0LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMyZTkwLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9mODEyZDNlZi1jNWZjLTQ1YjAtOTU0YS04YTUyMjEwYzJlOTAv MC82MUQ5RjRCN0NGOEQ4NjA2MDMwODJFMDdGRENBMDg1MThFMTZBQUZCLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqDxzFDDANBgkqhkiG9w0BAQsFAAOCAQEAtvI/ Yi9Ey40hUzIT2Msqe0LptWIKOsZibfrDlncA/RaIPy6DjywBZkCil2JgKkyinwZh q3c7AkF9kDPPPKg3wam44UWo42Dq4ip9gqFtB090i9xILi7SzSjSKU0TxD7mDwkV nYwLLkU6nF7gocZnWgqeQSO+MGKfCItImTqEUEeuRIuMJ4taB+eDAkcPrcGmjfWx q/66169g4daytTgAHdctzjSs0+Q01wPMh5uLN+EfxGPsVhVD+zLhk0srIP+PROCj ZiTMRLw8qkZA+GEL+ufi99jOdQVmwNkwA+UbsHEaSgR5dXAlyzUnf/XZ0iIzCvFF +SLGSC6Gk59Aa+7LIA== -----END CERTIFICATE-----Generated at Sat Dec 13 22:04:24 2025 by rpki-client