This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
File:                     B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (raw, json)
Hash identifier:          0OvTvvR3uKi33zOn4Le5nWSBooTmDUEGs6oBmef6/cc=
Subject key identifier:   B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer:       /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial:       7AF5035EFCD216F31B801D0CCD97F9B98FF911D5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 25 Jan 2026 06:40:01 +0000
Certificate not after:    Sun 24 Jan 2027 06:45:01 +0000
Subordinate resources:    IP: 2a06:1283:8a00:: -- 2a06:1283:8fff:ffff:ffff:ffff:ffff:ffff
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f5:03:5e:fc:d2:16:f3:1b:80:1d:0c:cd:97:f9:b9:8f:f9:11:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
        Validity
            Not Before: Jan 25 06:40:01 2026 GMT
            Not After : Jan 24 06:45:01 2027 GMT
        Subject: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:4a:3c:b9:3b:18:62:5c:e7:8c:2a:b0:e3:
                    a5:21:50:5f:56:66:16:99:b4:f1:99:7f:3a:22:04:
                    a9:de:b9:1b:49:85:a9:f4:34:92:1b:e1:92:de:5a:
                    b1:78:b2:5c:20:27:2e:f2:8c:22:a3:f2:a0:6c:19:
                    38:59:74:2a:fe:10:79:24:56:05:de:32:4a:1a:26:
                    8d:1f:4d:33:12:70:46:39:4f:c4:82:fb:a9:79:b0:
                    9a:64:f5:dd:25:9b:7a:25:e4:3d:b4:d4:31:c0:b6:
                    cc:17:e9:95:3f:68:27:3a:79:91:a5:3c:15:0a:25:
                    5a:eb:a7:a4:3b:62:53:5d:36:28:09:60:5d:9e:77:
                    84:02:25:7a:13:63:35:b0:92:fe:24:0d:22:ba:43:
                    e8:ef:d4:b5:bc:ce:da:e0:3a:b0:1d:a6:81:47:04:
                    be:00:ac:b7:e8:66:5f:61:4d:82:ac:4b:36:5d:54:
                    a1:00:c6:2e:69:78:70:f3:32:b9:db:a2:83:71:c1:
                    3e:34:c3:bc:23:88:c7:bf:d1:c8:32:a5:40:d5:e9:
                    36:43:17:87:7f:df:be:27:ba:d0:cd:38:f6:2c:0d:
                    cf:fc:db:4f:16:9e:dc:da:9d:ec:6a:23:54:10:bc:
                    29:b8:5e:c9:a4:73:8b:a7:7c:57:8d:77:5f:25:57:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
            X509v3 Authority Key Identifier:
                keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8a00::-2a06:1283:8fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3a:2e:59:53:ad:38:4a:81:b7:4c:23:70:83:6f:cf:fb:a0:64:
         8f:89:1b:b8:4f:52:47:68:ca:6e:d8:ea:97:3e:ae:6c:33:72:
         ea:2b:8f:9e:cb:04:5b:ea:5f:8f:df:62:6c:f2:ae:f2:ab:2e:
         1e:f5:e1:52:d0:e3:df:a0:e8:5f:28:fc:58:c7:c8:9b:e7:5f:
         0e:f3:66:67:76:dd:15:89:07:ac:72:d0:ee:41:b6:96:96:4f:
         70:48:3a:49:77:af:24:e0:14:2d:a0:07:4c:3a:fc:d8:4b:4d:
         96:4d:8a:25:c8:cd:f1:4d:f1:c7:f2:58:92:32:d8:03:75:3d:
         90:d0:29:d3:07:00:8e:df:98:1e:fa:46:34:7f:e9:4b:1c:75:
         39:db:8f:0e:52:28:f8:63:e1:54:70:8b:b3:35:61:a5:65:c9:
         a6:82:bb:52:8c:05:f4:92:24:7a:50:e2:24:dc:cc:6a:8d:0f:
         6f:b9:1e:a2:63:41:3e:2c:11:4f:68:03:03:d1:b1:b2:25:d2:
         2f:e8:24:3f:90:03:ad:f4:76:33:ba:2b:c4:b8:65:5c:5c:1c:
         09:5b:f6:09:2c:e5:17:94:7b:1f:ee:ed:3f:91:65:11:a4:94:
         1a:02:2f:8f:ea:2a:2c:a8:e7:5c:ba:df:ab:f5:16:a6:ae:e0:
         d9:d3:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----