This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer File: AEF766F103B2EF99DF8C71978A7FE519D730B155.cer (raw, json) Hash identifier: QmPkMvULAED1C0IJ2vDbN7PPhAIRd7Y7c54z4nKr2UI= Subject key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 438C2BA5C782F9419FED76094C2A32500860D848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Manifest: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft caRepository: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/ Notify URL: https://magellan.ipxo.com/rrdp/notification.xml Certificate not before: Tue 25 Nov 2025 12:35:28 +0000 Certificate not after: Tue 24 Nov 2026 12:40:28 +0000 Subordinate resources: IP: 2.56.254.0/24 IP: 2.59.148.0/23 IP: 169.40.128.0/17 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8c:2b:a5:c7:82:f9:41:9f:ed:76:09:4c:2a:32:50:08:60:d8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 25 12:35:28 2025 GMT Not After : Nov 24 12:40:28 2026 GMT Subject: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:33:5b:a9:b8:66:f7:91:68:b6:40:40:a0: 6a:b1:84:0d:bd:f7:16:e5:76:87:2e:73:ea:f0:53: 90:be:0f:a4:7c:8b:22:15:b9:18:86:ec:26:2d:0c: 17:2f:77:3a:37:fd:09:60:43:97:c6:f4:18:12:66: 52:a1:9e:aa:3e:09:2a:22:c4:13:94:1c:97:3e:00: 32:1e:cd:38:f3:8f:3f:01:cf:81:b2:46:0b:cf:28: 2a:45:ee:32:de:3f:aa:3e:36:2a:43:bc:d0:d9:f8: d2:b4:75:22:45:29:25:01:d5:83:86:af:6a:08:e4: b4:eb:90:81:73:9c:b7:07:f4:bf:2b:d4:f7:17:61: ae:b7:dc:f4:7d:05:3f:6f:0d:f0:9f:bd:93:30:47: c7:92:c7:10:c4:13:6e:07:bd:d0:6b:d4:92:cd:a2: 61:17:83:64:74:a1:5a:16:4b:2f:21:da:28:1a:ae: b5:08:de:a4:8d:61:f6:69:7f:14:ba:81:79:25:12: 20:b8:fb:2a:6a:19:34:96:8d:9a:4a:4e:18:55:9a: 6a:a7:91:e9:9b:ea:db:e1:81:3f:09:86:81:fe:42: ab:1b:f8:ad:d6:d2:b1:ec:ff:db:94:63:01:23:fe: 84:70:4a:d0:bf:1e:bb:54:84:f0:fc:b6:b6:ff:2b: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: CA Repository - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/ RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.254.0/24 2.59.148.0/23 169.40.128.0/17 Signature Algorithm: sha256WithRSAEncryption 77:d1:38:8e:55:ef:29:e8:0a:ec:c5:97:37:89:51:0e:f2:62: 17:04:ed:79:23:31:60:45:6a:22:5f:07:0a:1f:d0:5f:14:92: 74:c4:9d:84:56:87:f6:f0:8e:b1:7f:b4:63:28:1a:58:1c:36: b6:3b:b6:2a:94:2f:c1:bc:82:e0:24:d5:82:fd:f2:57:d0:3a: 8f:fc:21:06:24:b2:1c:8e:00:47:dc:1e:87:1e:f0:08:05:36: 1e:24:57:64:ca:f7:81:5d:80:93:e6:81:23:a1:30:a7:5c:fa: 6c:ca:a8:24:e5:78:b4:dd:0a:05:52:45:a3:44:92:34:d9:b5: 44:9c:d8:de:47:c4:a5:46:cf:58:4e:a5:48:34:76:3f:41:98: 3e:63:bf:f4:53:15:55:2a:a9:30:f0:70:4e:4f:78:8b:7d:7f: b4:72:ea:04:77:87:ae:ef:02:af:ad:3f:9b:7e:e3:0e:73:94: 2d:e0:3c:9c:d0:0b:48:0a:f5:78:81:ee:e2:73:9e:b2:fb:0d: af:53:86:bf:77:99:db:11:e6:08:7e:24:7e:3c:90:95:16:10: 04:ee:12:f3:98:a2:61:48:0d:0e:41:38:8e:32:91:db:b2:2f: 52:6d:9b:63:6e:d6:78:4c:f7:ce:70:6a:bb:c5:88:13:64:4d: 2b:2d:0d:90 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIUQ4wrpceC+UGf7XYJTCoyUAhg2EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjUxMjM1MjhaFw0yNjExMjQxMjQwMjhaMDMxMTAvBgNV BAMTKEFFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BjNbqbhm95FotkBAoGqxhA29 9xbldocuc+rwU5C+D6R8iyIVuRiG7CYtDBcvdzo3/QlgQ5fG9BgSZlKhnqo+CSoi xBOUHJc+ADIezTjzjz8Bz4GyRgvPKCpF7jLeP6o+NipDvNDZ+NK0dSJFKSUB1YOG r2oI5LTrkIFznLcH9L8r1PcXYa633PR9BT9vDfCfvZMwR8eSxxDEE24HvdBr1JLN omEXg2R0oVoWSy8h2igarrUI3qSNYfZpfxS6gXklEiC4+ypqGTSWjZpKThhVmmqn kemb6tvhgT8JhoH+Qqsb+K3W0rHs/9uUYwEj/oRwStC/HrtUhPD8trb/K3S5AgMB AAGjggLaMIIC1jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSu92bxA7Lvmd+M cZeKf+UZ1zCxVTAfBgNVHSMEGDAWgBSrLcwWnJXysU3zHdJKH2cDTqd3nDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02N2Q1LTRh YzItYWJjNC1hMzMyNTkwYjk5YWYvNC9BQjJEQ0MxNjlDOTVGMkIxNERGMzFERDI0 QTFGNjcwMzRFQTc3NzlDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcXkzTUZw eVY4ckZOOHgzU1NoOW5BMDZuZDV3LmNlcjCCASwGCCsGAQUFBwELBIIBHjCCARow VgYIKwYBBQUHMAWGSnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzMw MzI3YjllLTIyN2EtNGViZC04MjViLTNiOTgwOTVkYzkyNy0wLzAvMIGCBggrBgEF BQcwCoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUt MjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZGMTAzQjJFRjk5 REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1Lm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6 Ly9tYWdlbGxhbi5pcHhvLmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgME AAI4/gMEAQI7lAMEB6kogDANBgkqhkiG9w0BAQsFAAOCAQEAd9E4jlXvKegK7MWX N4lRDvJiFwTteSMxYEVqIl8HCh/QXxSSdMSdhFaH9vCOsX+0YygaWBw2tju2KpQv wbyC4CTVgv3yV9A6j/whBiSyHI4AR9wehx7wCAU2HiRXZMr3gV2Ak+aBI6Ewp1z6 bMqoJOV4tN0KBVJFo0SSNNm1RJzY3kfEpUbPWE6lSDR2P0GYPmO/9FMVVSqpMPBw Tk94i31/tHLqBHeHru8Cr60/m37jDnOULeA8nNALSAr1eIHu4nOesvsNr1OGv3eZ 2xHmCH4kfjyQlRYQBO4S85iiYUgNDkE4jjKR27IvUm2bY27WeEz3znBqu8WIE2RN Ky0NkA== -----END CERTIFICATE-----Generated at Fri Dec 5 05:14:26 2025 by rpki-client