This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer
File:                     4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer (raw, json)
Hash identifier:          znj2KhD7dc90RL/SNmhicRPp3l/LZp/snY3wx3mPdJM=
Subject key identifier:   4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA
Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7
Certificate issuer:       /CN=20914720382A1F52B950212C138E5E1E81BA69B7
Certificate serial:       2751833BBD12CC989CA83AB4818CF740A2A5CDEB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 15 Jan 2026 16:27:43 +0000
Certificate not after:    Thu 14 Jan 2027 16:32:43 +0000
Subordinate resources:    IP: 2a14:7586:6000::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:51:83:3b:bd:12:cc:98:9c:a8:3a:b4:81:8c:f7:40:a2:a5:cd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7
        Validity
            Not Before: Jan 15 16:27:43 2026 GMT
            Not After : Jan 14 16:32:43 2027 GMT
        Subject: CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:ea:78:2b:45:0a:4f:ca:9a:6e:42:65:a5:
                    63:98:53:a4:ea:e3:6e:31:d2:68:b5:1a:b3:4f:56:
                    6b:fd:f1:9e:af:c4:78:7f:3e:5c:e5:b1:b0:55:0a:
                    cf:f0:cd:96:c4:f1:9a:ed:70:1d:7f:58:5f:cc:24:
                    a4:b4:e2:81:78:ab:e5:a1:37:a0:53:b7:7d:d5:70:
                    23:a8:ac:ba:46:3d:12:d1:7f:0e:ba:59:d2:a0:96:
                    7b:db:68:9d:1e:e3:6d:ce:e9:16:d7:74:cc:e8:85:
                    4d:18:82:f2:5a:18:f1:e4:b4:8c:f4:fc:3a:e9:37:
                    45:79:de:b0:a7:18:22:89:e1:4a:b6:e4:9d:42:2b:
                    ae:9e:ca:10:6b:c7:92:09:21:9e:2d:65:04:57:f6:
                    0b:7b:f3:bc:b5:60:96:af:ef:aa:b2:9a:6c:f1:80:
                    3a:ea:b5:71:50:5f:1c:82:5b:8f:45:ed:06:06:48:
                    1d:0a:bd:57:42:1c:9d:21:c0:5d:48:3c:5c:4f:21:
                    c0:83:aa:b1:28:18:63:7e:10:bd:59:ee:42:eb:16:
                    76:53:c7:15:1e:e2:88:58:02:7e:6c:04:11:f9:9c:
                    cc:bd:b7:2e:08:4e:b4:11:0d:56:58:89:fc:ce:f9:
                    c4:1e:bb:b2:00:26:69:48:c8:90:68:4f:30:d4:a2:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA
            X509v3 Authority Key Identifier:
                keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7586:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:fe:3a:b6:d8:28:07:bd:62:10:40:81:f4:c1:48:a4:32:30:
         12:bb:01:ed:44:a8:d1:b5:8e:9d:88:32:33:86:76:98:6f:f5:
         ea:3a:b3:71:fe:7b:ea:cc:8b:75:3b:2e:92:a9:98:0f:8d:78:
         6e:24:c3:59:84:d2:a7:14:b8:14:76:58:5b:0d:25:7c:27:f7:
         df:aa:b3:e1:29:ad:99:ad:48:b1:c6:4d:6b:77:8c:36:ea:79:
         8c:af:81:23:98:fd:b5:9c:6e:e5:ab:2e:6b:8a:17:c1:e6:3f:
         45:2c:bf:29:be:a4:02:6b:63:b9:d4:63:6d:fe:fa:bc:c1:ab:
         5b:9b:ed:22:f2:25:b6:eb:f6:ea:6a:a4:3c:ca:7a:bf:43:36:
         c0:2d:3a:43:9e:04:1b:4e:67:c0:5a:41:bd:ce:cb:7f:62:ea:
         c9:19:d6:b1:2a:d7:3d:86:8e:80:ce:8c:0c:e4:c3:d2:fc:68:
         48:ec:79:73:99:f3:bb:34:20:24:cc:4c:b9:64:de:df:19:6f:
         04:fe:ef:c2:05:03:b8:b7:5c:26:c9:f6:4f:6d:1a:c4:6e:09:
         d3:eb:e2:09:3a:61:0a:54:f9:9a:57:56:4e:fd:1e:c8:61:65:
         21:56:c8:c1:b7:9a:7a:a0:30:ea:00:10:53:f6:cc:d3:5c:ac:
         86:53:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----