This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer (raw, json) Hash identifier: yJfZhiYJce+5YburqA3p+i96tGeIbTHMvYRXbcGUTSk= Subject key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 1CD6CFBE3925B40DB46F364891F84499A33236E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 25 Dec 2025 08:26:51 +0000 Certificate not after: Thu 24 Dec 2026 08:31:51 +0000 Subordinate resources: IP: 2a14:7581:2000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d6:cf:be:39:25:b4:0d:b4:6f:36:48:91:f8:44:99:a3:32:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 25 08:26:51 2025 GMT Not After : Dec 24 08:31:51 2026 GMT Subject: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:14:95:df:7a:7b:29:4d:3c:8f:ce:ff:f1: 00:61:61:3f:cb:03:96:f6:66:8d:4d:7d:ba:81:b7: 01:6c:32:db:4c:02:dd:a7:93:41:c5:d7:8e:e5:af: e9:54:22:8d:95:bf:87:c5:ad:f9:27:31:37:a1:2d: a7:10:25:9b:84:91:33:1c:25:f1:69:3e:7c:ec:ba: 78:06:f2:da:b7:26:49:94:88:d1:a0:70:b3:fa:80: 6b:35:29:df:43:38:78:2f:81:20:fe:d5:fd:50:17: ab:44:2d:10:0a:05:97:75:1e:0c:77:81:86:3a:a8: 52:7d:0e:4d:b0:47:1b:37:6b:ea:18:0a:b2:31:66: f9:43:0e:da:97:03:f2:b2:55:33:18:93:ba:70:fd: db:f3:c9:18:0b:1f:4d:c7:22:2a:32:9b:2a:ab:2d: 83:89:b4:6f:51:cd:d5:fa:d4:0f:41:85:0f:46:4b: 64:e0:53:39:aa:66:4e:3e:ae:f6:1d:9d:70:57:16: 2c:1e:c8:04:3e:4c:5d:3d:03:7e:4e:fb:33:17:32: a3:a8:c6:fb:bf:72:92:a5:3a:61:ba:93:be:84:44: 3f:1e:fd:d5:7d:d9:41:13:03:18:22:f2:e3:2b:28: fc:cc:7b:cc:42:3a:49:d4:55:b6:23:4a:09:13:10: a9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2000::/36 Signature Algorithm: sha256WithRSAEncryption 9c:a3:c2:d1:6c:7e:13:1c:da:81:7f:56:42:db:1c:22:7b:4d: 56:d7:ca:4e:70:97:a8:1d:dc:0b:3f:88:7b:6b:b2:9f:b8:19: 31:83:0b:d8:81:e9:b0:01:5d:b7:1a:df:05:b0:0f:cd:88:44: 18:7f:91:2c:f5:ee:b1:2a:55:6b:26:85:61:c1:83:32:2a:7c: 3e:3c:76:34:2f:ae:b3:d5:d9:c4:79:69:41:13:93:58:9c:20: b9:e5:cf:25:80:cd:30:ba:6c:09:aa:d4:52:ec:25:fa:19:89: be:84:9d:90:12:97:c6:ad:20:8a:72:f1:28:91:d7:0c:90:c1: 38:2c:98:d5:0c:7f:79:67:29:12:c4:21:94:fb:92:85:a5:7f: e5:96:e3:ee:f2:3c:f6:81:dc:e8:45:99:34:e3:fc:8b:60:61: d8:eb:f9:16:6f:0b:23:78:3c:2a:04:66:7e:94:2b:f8:df:3a: 10:f4:09:e0:89:6e:dc:fd:2b:94:85:c7:3c:03:af:35:5c:cf: 89:ad:bc:c5:ea:e0:50:41:71:9a:86:82:74:e7:bc:5f:02:cb: 81:69:ff:9c:7c:d9:dd:65:fb:88:2c:e1:37:23:10:55:e6:49: 14:49:d3:81:e7:01:88:28:c8:e1:0b:aa:00:0e:c8:10:48:d4: 96:a3:22:48 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUHNbPvjkltA20bzZIkfhEmaMyNuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMjUwODI2NTFaFw0yNjEyMjQwODMxNTFaMDMxMTAvBgNV BAMTKDM1QjUyRUYyMEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsBSV33p7KU08j87/8QBhYT/L A5b2Zo1NfbqBtwFsMttMAt2nk0HF147lr+lUIo2Vv4fFrfknMTehLacQJZuEkTMc JfFpPnzsungG8tq3JkmUiNGgcLP6gGs1Kd9DOHgvgSD+1f1QF6tELRAKBZd1Hgx3 gYY6qFJ9Dk2wRxs3a+oYCrIxZvlDDtqXA/KyVTMYk7pw/dvzyRgLH03HIioymyqr LYOJtG9RzdX61A9BhQ9GS2TgUzmqZk4+rvYdnXBXFiweyAQ+TF09A35O+zMXMqOo xvu/cpKlOmG6k76ERD8e/dV92UETAxgi8uMrKPzMe8xCOknUVbYjSgkTEKlhAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1tS7yClcwpiYd bRkWxrdH/zwoUjAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIxZGQ0LzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQv MC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkxNkM2Qjc0N0ZGM0MyODUyLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWBIDANBgkqhkiG9w0BAQsFAAOCAQEAnKPC 0Wx+ExzagX9WQtscIntNVtfKTnCXqB3cCz+Ie2uyn7gZMYML2IHpsAFdtxrfBbAP zYhEGH+RLPXusSpVayaFYcGDMip8Pjx2NC+us9XZxHlpQROTWJwgueXPJYDNMLps CarUUuwl+hmJvoSdkBKXxq0ginLxKJHXDJDBOCyY1Qx/eWcpEsQhlPuShaV/5Zbj 7vI89oHc6EWZNOP8i2Bh2Ov5Fm8LI3g8KgRmfpQr+N86EPQJ4Ilu3P0rlIXHPAOv NVzPia28xergUEFxmoaCdOe8XwLLgWn/nHzZ3WX7iCzhNyMQVeZJFEnTgecBiCjI 4QuqAA7IEEjUlqMiSA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:17:47 2026 by rpki-client