This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer File: AEF766F103B2EF99DF8C71978A7FE519D730B155.cer (raw, json) Hash identifier: 38Tm/zR0zazCKWpNzExfTcmKTbQWUvGzsk3yRinaxh4= Subject key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 26F697AD42EDFA1AA0CA25030998515349C2F6F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Manifest: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft caRepository: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/ Notify URL: https://magellan.ipxo.com/rrdp/notification.xml Certificate not before: Mon 12 Jan 2026 08:12:43 +0000 Certificate not after: Mon 11 Jan 2027 08:17:43 +0000 Subordinate resources: IP: 2.56.254.0/24 IP: 2.59.148.0/23 IP: 169.40.32.0 -- 169.40.255.255 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f6:97:ad:42:ed:fa:1a:a0:ca:25:03:09:98:51:53:49:c2:f6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 12 08:12:43 2026 GMT Not After : Jan 11 08:17:43 2027 GMT Subject: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:33:5b:a9:b8:66:f7:91:68:b6:40:40:a0: 6a:b1:84:0d:bd:f7:16:e5:76:87:2e:73:ea:f0:53: 90:be:0f:a4:7c:8b:22:15:b9:18:86:ec:26:2d:0c: 17:2f:77:3a:37:fd:09:60:43:97:c6:f4:18:12:66: 52:a1:9e:aa:3e:09:2a:22:c4:13:94:1c:97:3e:00: 32:1e:cd:38:f3:8f:3f:01:cf:81:b2:46:0b:cf:28: 2a:45:ee:32:de:3f:aa:3e:36:2a:43:bc:d0:d9:f8: d2:b4:75:22:45:29:25:01:d5:83:86:af:6a:08:e4: b4:eb:90:81:73:9c:b7:07:f4:bf:2b:d4:f7:17:61: ae:b7:dc:f4:7d:05:3f:6f:0d:f0:9f:bd:93:30:47: c7:92:c7:10:c4:13:6e:07:bd:d0:6b:d4:92:cd:a2: 61:17:83:64:74:a1:5a:16:4b:2f:21:da:28:1a:ae: b5:08:de:a4:8d:61:f6:69:7f:14:ba:81:79:25:12: 20:b8:fb:2a:6a:19:34:96:8d:9a:4a:4e:18:55:9a: 6a:a7:91:e9:9b:ea:db:e1:81:3f:09:86:81:fe:42: ab:1b:f8:ad:d6:d2:b1:ec:ff:db:94:63:01:23:fe: 84:70:4a:d0:bf:1e:bb:54:84:f0:fc:b6:b6:ff:2b: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: CA Repository - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/ RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.254.0/24 2.59.148.0/23 169.40.32.0-169.40.255.255 Signature Algorithm: sha256WithRSAEncryption 35:cf:c1:2b:80:1c:d7:34:15:bf:a2:ca:5b:90:c0:9b:ea:bb: 0f:a0:19:4d:74:6e:a1:33:9f:b8:ee:84:5a:00:d1:ff:4d:08: 7f:01:f1:63:80:8c:4d:2d:7e:29:f7:34:ce:6a:71:47:0c:86: f2:28:bb:d3:f7:3e:8f:25:1c:fa:0a:06:ac:4d:7a:c9:67:e7: c3:bf:35:57:bd:59:a1:8a:9d:95:10:8f:c7:46:9e:de:03:bb: 11:33:6b:37:b7:9c:82:e2:5e:7a:ae:80:55:27:b6:97:38:1e: b1:27:50:81:22:03:53:1b:81:b5:82:b6:b5:80:c0:eb:d8:2e: 33:4f:ed:2f:4d:12:af:0d:93:ec:c5:ba:67:61:65:e1:36:33: db:dd:44:7e:4c:60:b8:fd:a4:cb:54:c8:6f:0f:9e:d2:0b:5c: 74:ed:76:aa:99:e7:67:4f:5a:e3:1f:0a:34:2a:77:4a:ce:43: 34:06:4a:ae:98:73:a8:e8:b0:24:d1:8f:44:35:d9:74:05:12: 6c:6f:1b:08:0e:3a:cb:14:5a:c8:b7:1f:83:34:55:bc:a9:96: 35:b2:b3:e5:56:d7:dc:dc:41:99:24:39:28:3d:39:b9:f3:42: 32:e3:19:aa:f8:fa:4b:0f:68:1e:d0:6d:e1:7e:39:b6:5a:8c: 7d:d9:bc:a5 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUJvaXrULt+hqgyiUDCZhRU0nC9vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTIwODEyNDNaFw0yNzAxMTEwODE3NDNaMDMxMTAvBgNV BAMTKEFFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BjNbqbhm95FotkBAoGqxhA29 9xbldocuc+rwU5C+D6R8iyIVuRiG7CYtDBcvdzo3/QlgQ5fG9BgSZlKhnqo+CSoi xBOUHJc+ADIezTjzjz8Bz4GyRgvPKCpF7jLeP6o+NipDvNDZ+NK0dSJFKSUB1YOG r2oI5LTrkIFznLcH9L8r1PcXYa633PR9BT9vDfCfvZMwR8eSxxDEE24HvdBr1JLN omEXg2R0oVoWSy8h2igarrUI3qSNYfZpfxS6gXklEiC4+ypqGTSWjZpKThhVmmqn kemb6tvhgT8JhoH+Qqsb+K3W0rHs/9uUYwEj/oRwStC/HrtUhPD8trb/K3S5AgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSu92bxA7Lvmd+M cZeKf+UZ1zCxVTAfBgNVHSMEGDAWgBSrLcwWnJXysU3zHdJKH2cDTqd3nDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02N2Q1LTRh YzItYWJjNC1hMzMyNTkwYjk5YWYvNC9BQjJEQ0MxNjlDOTVGMkIxNERGMzFERDI0 QTFGNjcwMzRFQTc3NzlDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcXkzTUZw eVY4ckZOOHgzU1NoOW5BMDZuZDV3LmNlcjCCASwGCCsGAQUFBwELBIIBHjCCARow VgYIKwYBBQUHMAWGSnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzMw MzI3YjllLTIyN2EtNGViZC04MjViLTNiOTgwOTVkYzkyNy0wLzAvMIGCBggrBgEF BQcwCoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUt MjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZGMTAzQjJFRjk5 REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1Lm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6 Ly9tYWdlbGxhbi5pcHhvLmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAyBggrBgEFBQcBBwEB/wQjMCEwHwQCAAEwGQME AAI4/gMEAQI7lDALAwQFqSggAwMAqSgwDQYJKoZIhvcNAQELBQADggEBADXPwSuA HNc0Fb+iyluQwJvquw+gGU10bqEzn7juhFoA0f9NCH8B8WOAjE0tfin3NM5qcUcM hvIou9P3Po8lHPoKBqxNesln58O/NVe9WaGKnZUQj8dGnt4DuxEzaze3nILiXnqu gFUntpc4HrEnUIEiA1MbgbWCtrWAwOvYLjNP7S9NEq8Nk+zFumdhZeE2M9vdRH5M YLj9pMtUyG8PntILXHTtdqqZ52dPWuMfCjQqd0rOQzQGSq6Yc6josCTRj0Q12XQF EmxvGwgOOssUWsi3H4M0VbypljWys+VW19zcQZkkOSg9ObnzQjLjGar4+ksPaB7Q beF+ObZajH3ZvKU= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:38 2026 by rpki-client