This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer File: 140CF895225100CF571959173341D92070FF6E7C.cer (raw, json) Hash identifier: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g= Subject key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 25FA7D9D3153ED46B33491C539DD66CA4084EAD9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 30 Dec 2025 09:41:46 +0000 Certificate not after: Tue 29 Dec 2026 09:46:46 +0000 Subordinate resources: IP: 2a14:7586:6200::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fa:7d:9d:31:53:ed:46:b3:34:91:c5:39:dd:66:ca:40:84:ea:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Dec 30 09:41:46 2025 GMT Not After : Dec 29 09:46:46 2026 GMT Subject: CN=140CF895225100CF571959173341D92070FF6E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:f4:0e:13:ea:ee:77:cd:5c:13:74:ed:1f: 1b:17:1e:e0:1e:cc:cf:6a:22:e8:99:3d:65:d7:65: 09:3e:7b:a5:c8:16:2a:1d:be:23:b7:30:5a:c0:dc: a9:7d:c2:6a:3f:67:1e:d9:e9:d6:18:ab:44:2f:1d: 61:24:99:40:e6:cb:bd:3a:ee:bb:49:4c:55:37:26: af:fb:a6:e3:16:8d:f4:22:c5:03:44:e0:61:14:77: 03:5b:8d:82:92:3d:ec:d6:c2:c0:47:2f:0e:2a:43: dc:df:88:5a:d3:17:70:34:74:96:b4:d7:d3:6d:8f: 0e:40:dd:ab:f0:1e:95:b5:59:72:e3:f3:bf:3a:28: 6e:46:dc:47:f7:1c:a7:9a:60:55:d6:e5:02:86:29: 95:cd:d1:6a:cb:a9:49:fe:be:4b:c0:7a:e8:ad:e3: e6:0d:c1:f3:7c:4a:75:4b:d3:d8:c4:04:09:43:8c: 07:92:44:62:ce:cc:90:55:d4:a2:77:01:b3:56:1a: b7:ec:72:7b:21:bf:d8:0c:62:a8:24:23:dd:d5:97: f1:f7:db:b2:3d:0a:c8:6c:5c:47:10:af:26:9e:2a: 62:ea:20:cb:5f:be:76:c7:cb:46:fd:e2:ae:f0:28: e5:a3:a7:a6:75:de:b9:89:f6:3b:9f:c7:a3:10:06: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6200::/40 Signature Algorithm: sha256WithRSAEncryption 24:b9:91:a5:3c:4d:4d:ad:6d:f1:41:12:a9:7f:4c:81:f1:9b: 95:34:bf:de:9b:9a:34:17:1d:85:b8:27:04:54:3f:dd:fe:4a: b0:1d:b9:f9:c7:fb:2a:d6:f1:08:45:08:da:2c:b7:a4:0b:e4: a3:58:0b:0a:a7:fe:e1:16:e5:24:94:a8:a0:92:59:37:64:4a: ac:46:09:ba:7f:17:ac:dd:25:55:65:0e:c6:ec:55:de:c7:58: 97:73:80:92:83:d7:9f:30:d0:6a:68:a6:53:d2:90:53:b0:b9: 09:2a:44:01:d6:f2:b5:42:1d:1f:bb:65:0f:6c:cf:7a:01:26: 9e:b0:08:0f:fa:76:3f:37:e0:13:87:97:39:17:ab:26:94:3c: 09:72:87:b9:d4:e3:85:16:dd:11:99:3a:08:eb:c8:2f:33:11: 85:7b:d9:55:27:a9:69:ba:01:9d:88:fb:c5:b5:60:98:17:86: 8b:23:5d:d1:ca:f4:5b:4e:b4:19:f5:bd:84:46:38:d4:2e:bd: a4:8d:33:5c:3a:3c:3e:fd:2c:ca:d4:65:d1:3b:30:7d:b0:91: 35:2f:72:cf:1f:57:87:83:bf:3a:a3:d5:fe:fb:9f:89:e7:35: 3e:2f:7a:9e:f7:d7:f4:91:89:b4:60:fe:7a:a1:70:0c:96:3f: dc:71:90:32 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUJfp9nTFT7UazNJHFOd1mykCE6tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNTEyMzAwOTQxNDZaFw0yNjEyMjkwOTQ2NDZaMDMxMTAvBgNV BAMTKDE0MENGODk1MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZV/QOE+rud81cE3TtHxsXHuAe zM9qIuiZPWXXZQk+e6XIFiodviO3MFrA3Kl9wmo/Zx7Z6dYYq0QvHWEkmUDmy706 7rtJTFU3Jq/7puMWjfQixQNE4GEUdwNbjYKSPezWwsBHLw4qQ9zfiFrTF3A0dJa0 19Ntjw5A3avwHpW1WXLj8786KG5G3Ef3HKeaYFXW5QKGKZXN0WrLqUn+vkvAeuit 4+YNwfN8SnVL09jEBAlDjAeSRGLOzJBV1KJ3AbNWGrfscnshv9gMYqgkI93Vl/H3 27I9CshsXEcQryaeKmLqIMtfvnbHy0b94q7wKOWjp6Z13rmJ9jufx6MQBvZJAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUDPiVIlEAz1cZ WRczQdkgcP9ufDAfBgNVHSMEGDAWgBQgkUcgOCofUrlQISwTjl4egbpptzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xNTE3YjVkMC0zMzE3LTRiNDktOGVjNS1iZTkw YmM3MDA2MmYvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJl OTBiYzcwMDYyZi8xLzE0MENGODk1MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBG RjZFN0MubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUdYZiMA0GCSqGSIb3DQEB CwUAA4IBAQAkuZGlPE1NrW3xQRKpf0yB8ZuVNL/em5o0Fx2FuCcEVD/d/kqwHbn5 x/sq1vEIRQjaLLekC+SjWAsKp/7hFuUklKigklk3ZEqsRgm6fxes3SVVZQ7G7FXe x1iXc4CSg9efMNBqaKZT0pBTsLkJKkQB1vK1Qh0fu2UPbM96ASaesAgP+nY/N+AT h5c5F6smlDwJcoe51OOFFt0RmToI68gvMxGFe9lVJ6lpugGdiPvFtWCYF4aLI13R yvRbTrQZ9b2ERjjULr2kjTNcOjw+/SzK1GXROzB9sJE1L3LPH1eHg786o9X++5+J 5zU+L3qe99f0kYm0YP56oXAMlj/ccZAy -----END CERTIFICATE-----Generated at Wed Jan 21 01:15:02 2026 by rpki-client