This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer (raw, json) Hash identifier: aSeILbmXqifYYCOVVMGgP2NePq+zeGmBrUaxoL30R6g= Subject key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 20D25F46A4B33C64F67F45813B9480003D55183E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 05 Dec 2025 21:11:18 +0000 Certificate not after: Fri 04 Dec 2026 21:16:18 +0000 Subordinate resources: IP: 2a14:7580:ff40::/44 IP: 2a14:7581:9900::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d2:5f:46:a4:b3:3c:64:f6:7f:45:81:3b:94:80:00:3d:55:18:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 5 21:11:18 2025 GMT Not After : Dec 4 21:16:18 2026 GMT Subject: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:93:62:2f:ec:fd:d1:10:4a:dc:2e:cf:3e: ff:76:73:9a:1c:65:17:68:ca:67:0d:83:c4:02:f2: 4c:25:70:95:07:27:69:02:4b:7a:4a:e0:de:7f:f6: 95:9a:b7:ca:7b:b7:c0:c9:42:05:24:bb:33:95:48: 64:28:81:62:12:47:5c:31:8c:ea:21:8e:6f:a5:a4: 21:0d:71:2e:44:75:d2:37:e2:11:91:18:01:79:11: 85:88:9b:8f:3c:36:d5:7b:89:04:3c:3b:4c:01:0e: 1f:21:cd:6c:c1:c1:19:1e:cb:29:70:d9:fe:9c:74: f9:43:68:e3:15:79:48:01:55:bc:56:63:bc:ad:4d: b8:c7:cf:11:a6:e6:f7:68:b7:fe:87:ee:af:8e:1d: c0:ed:63:b2:63:b2:27:84:9c:99:a8:a8:29:bd:ef: c8:f1:48:6f:a2:c6:7a:10:42:6b:f6:bb:38:52:ca: c2:dd:85:bd:13:29:1d:8d:48:af:de:4c:6d:8c:60: e2:cd:c2:74:04:a4:24:8a:30:2a:78:e1:86:e4:ad: 53:f9:fe:be:82:da:ff:b5:96:4b:d1:71:03:5a:44: 40:64:39:c8:a8:ed:82:d3:d0:de:dc:9d:3c:ec:53: 41:ae:aa:61:73:67:11:5f:01:11:f7:fe:a2:1a:64: 44:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff40::/44 2a14:7581:9900::/40 Signature Algorithm: sha256WithRSAEncryption 93:e3:4a:7d:2e:cd:59:04:6f:8e:ba:27:b6:5e:65:0f:ff:8d: 41:ae:a0:50:b6:d9:c7:22:7f:f0:3a:b1:98:d0:6d:f6:7d:24: 88:56:0c:47:3e:f4:1b:f5:7b:15:2a:bb:ba:ea:67:09:77:5d: 34:ed:71:8e:89:3f:02:ec:7d:26:d1:70:d1:b4:d6:ec:f7:46: 87:85:e0:d9:80:c3:11:c1:66:5a:56:01:67:87:1c:74:10:93: 8b:22:ae:f8:6d:c6:64:3c:fa:14:de:6d:2d:56:38:cd:7a:fc: cf:0d:24:0c:b9:07:62:fa:46:b0:9f:ef:62:eb:cf:64:a2:c2: cd:24:8d:72:2c:ca:a0:34:79:43:74:a9:22:41:1d:80:54:9e: ff:ae:a7:e5:12:a1:81:91:ea:f1:f6:1d:97:f2:89:ca:b1:97: 5a:44:b4:ed:89:9f:19:12:d1:62:91:46:0b:f8:29:8d:42:98: 2b:10:45:2f:4c:0f:12:4c:b0:c8:29:72:70:20:67:6f:18:75: 21:dd:b1:f9:ff:3c:34:66:74:e9:8e:4a:73:3a:5a:2c:48:1a: 38:83:57:0a:02:4a:ab:a2:cb:ec:ae:d0:e0:99:dd:62:e3:5d: a9:f5:d6:d8:48:6c:52:69:3e:76:75:07:83:7c:9e:d4:50:b5: 7d:d6:f1:bd -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUINJfRqSzPGT2f0WBO5SAAD1VGD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMDUyMTExMThaFw0yNjEyMDQyMTE2MThaMDMxMTAvBgNV BAMTKDg3QTRDODRENDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCespNiL+z90RBK3C7PPv92c5oc ZRdoymcNg8QC8kwlcJUHJ2kCS3pK4N5/9pWat8p7t8DJQgUkuzOVSGQogWISR1wx jOohjm+lpCENcS5EddI34hGRGAF5EYWIm488NtV7iQQ8O0wBDh8hzWzBwRkeyylw 2f6cdPlDaOMVeUgBVbxWY7ytTbjHzxGm5vdot/6H7q+OHcDtY7JjsieEnJmoqCm9 78jxSG+ixnoQQmv2uzhSysLdhb0TKR2NSK/eTG2MYOLNwnQEpCSKMCp44YbkrVP5 /r6C2v+1lkvRcQNaREBkOcio7YLT0N7cnTzsU0GuqmFzZxFfARH3/qIaZETtAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHpMhNQ2bbsVqQ kKVaotzrqHI5RTAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMwMWRhLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEv MS84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1QUEyRENFQkE4NzIzOTQ1Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgACMBEDBwQqFHWA/0ADBgAqFHWBmTANBgkqhkiG9w0BAQsF AAOCAQEAk+NKfS7NWQRvjrontl5lD/+NQa6gULbZxyJ/8DqxmNBt9n0kiFYMRz70 G/V7FSq7uupnCXddNO1xjok/Aux9JtFw0bTW7PdGh4Xg2YDDEcFmWlYBZ4ccdBCT iyKu+G3GZDz6FN5tLVY4zXr8zw0kDLkHYvpGsJ/vYuvPZKLCzSSNcizKoDR5Q3Sp IkEdgFSe/66n5RKhgZHq8fYdl/KJyrGXWkS07YmfGRLRYpFGC/gpjUKYKxBFL0wP EkywyClycCBnbxh1Id2x+f88NGZ06Y5KczpaLEgaOINXCgJKq6LL7K7Q4JndYuNd qfXW2EhsUmk+dnUHg3ye1FC1fdbxvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:08 2025 by rpki-client