This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/90E57142D4347C73111C714D4AC1199136EFCEF2.cer File: 90E57142D4347C73111C714D4AC1199136EFCEF2.cer (raw, json) Hash identifier: uDqz/P4+aHeeh6azQf/7v9P+UuTg4rfNVc8vXdKjYwg= Subject key identifier: 90:E5:71:42:D4:34:7C:73:11:1C:71:4D:4A:C1:19:91:36:EF:CE:F2 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 76BD0F95D038B77351707C2551675C791BEF955B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 29 Nov 2025 09:19:32 +0000 Certificate not after: Sat 28 Nov 2026 09:24:32 +0000 Subordinate resources: IP: 2a14:7581:9c00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bd:0f:95:d0:38:b7:73:51:70:7c:25:51:67:5c:79:1b:ef:95:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 29 09:19:32 2025 GMT Not After : Nov 28 09:24:32 2026 GMT Subject: CN=90E57142D4347C73111C714D4AC1199136EFCEF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:83:2e:b2:3c:13:5b:f8:ca:a2:dd:63:c3: fd:17:5b:9e:e9:a1:de:54:ad:e7:d8:3e:b6:46:7f: d9:ec:04:80:3a:02:b7:d3:cb:0c:8e:04:57:c5:7f: b6:d8:e8:aa:6c:15:27:54:fd:c9:e8:43:ce:77:7c: b3:cd:99:79:85:58:3b:e1:fd:e3:e5:05:68:4c:37: cc:9f:f0:e7:c3:f2:34:3e:bc:72:d9:18:42:5a:83: dc:73:6c:0b:a5:40:12:64:0c:72:cb:6b:27:5f:35: 00:37:ab:65:54:3d:b7:fb:4f:62:02:7c:19:4b:ad: 5d:72:67:4b:61:12:ed:9d:dc:8c:d7:84:78:4b:4d: 55:01:7a:46:a7:eb:9e:22:9b:40:d7:c1:36:5f:5a: 7f:34:b5:9b:73:c7:f3:a8:37:61:5c:b3:e3:a1:6f: 16:dc:ad:44:80:69:cd:eb:6b:34:75:97:85:5b:27: 50:0b:6c:3b:be:53:5a:6a:80:55:28:cc:db:8d:40: eb:aa:14:74:0b:82:e3:2c:9f:9d:27:61:53:39:e2: e5:ce:18:13:80:9d:9b:37:02:89:2d:82:e0:18:6f: 77:b7:7d:9d:58:cb:fe:3a:e5:d5:88:b1:87:1c:7f: e0:b3:98:b3:af:1f:0f:2b:25:1d:46:02:ba:34:f5: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:E5:71:42:D4:34:7C:73:11:1C:71:4D:4A:C1:19:91:36:EF:CE:F2 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9c00::/40 Signature Algorithm: sha256WithRSAEncryption 43:bb:eb:8f:b8:eb:f6:12:84:bc:0f:b2:f0:8c:8a:a8:eb:9f: df:1a:7d:a7:01:13:88:06:6f:3e:01:2c:1b:8d:64:c9:04:d1: bd:08:8c:14:4d:59:95:e2:48:15:90:5d:0e:3f:15:03:8d:95: 43:f7:2c:18:66:c8:40:a2:21:78:85:20:b4:41:45:36:87:8b: d0:ca:bb:75:f4:7f:7a:a1:d0:35:3d:22:93:1e:e4:5c:0b:f9: 64:2f:48:c6:58:5a:7f:44:e4:74:37:c2:0e:48:d8:48:51:66: 41:2b:d5:47:40:f0:06:2f:bc:52:3a:bb:a8:0f:05:bc:2f:ee: 32:ae:b9:43:83:f9:9c:02:2e:4b:42:b7:9d:99:19:c6:a0:15: 25:c7:1e:01:ab:51:b8:10:49:6a:8a:df:52:2c:91:47:3a:92: 8f:8e:7d:9a:ee:35:7a:6a:28:ec:5b:6d:6c:59:3a:e5:b5:47: 39:dd:fb:67:11:29:38:1b:42:b7:2a:9a:9b:c3:bf:60:d2:a5: 94:09:08:41:ee:a2:e5:a2:93:79:2c:a5:d2:ed:a8:3e:72:0b: c2:ee:28:4d:bd:dc:a1:8c:88:1e:b6:3f:68:bf:20:a8:90:35: 3f:28:6e:be:40:b8:40:5d:96:1b:b3:e1:a0:9f:b3:b3:f9:d0: c2:63:e5:1a -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUdr0PldA4t3NRcHwlUWdceRvvlVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMjkwOTE5MzJaFw0yNjExMjgwOTI0MzJaMDMxMTAvBgNV BAMTKDkwRTU3MTQyRDQzNDdDNzMxMTFDNzE0RDRBQzExOTkxMzZFRkNFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS94MusjwTW/jKot1jw/0XW57p od5UrefYPrZGf9nsBIA6ArfTywyOBFfFf7bY6KpsFSdU/cnoQ853fLPNmXmFWDvh /ePlBWhMN8yf8OfD8jQ+vHLZGEJag9xzbAulQBJkDHLLaydfNQA3q2VUPbf7T2IC fBlLrV1yZ0thEu2d3IzXhHhLTVUBekan654im0DXwTZfWn80tZtzx/OoN2Fcs+Oh bxbcrUSAac3razR1l4VbJ1ALbDu+U1pqgFUozNuNQOuqFHQLguMsn50nYVM54uXO GBOAnZs3AoktguAYb3e3fZ1Yy/465dWIsYccf+CzmLOvHw8rJR1GAro09eDnAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQ5XFC1DR8cxEc cU1KwRmRNu/O8jAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMwMWRhLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEv Mi85MEU1NzE0MkQ0MzQ3QzczMTExQzcxNEQ0QUMxMTk5MTM2RUZDRUYyLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqFHWBnDANBgkqhkiG9w0BAQsFAAOCAQEAQ7vr j7jr9hKEvA+y8IyKqOuf3xp9pwETiAZvPgEsG41kyQTRvQiMFE1ZleJIFZBdDj8V A42VQ/csGGbIQKIheIUgtEFFNoeL0Mq7dfR/eqHQNT0ikx7kXAv5ZC9Ixlhaf0Tk dDfCDkjYSFFmQSvVR0DwBi+8Ujq7qA8FvC/uMq65Q4P5nAIuS0K3nZkZxqAVJcce AatRuBBJaorfUiyRRzqSj459mu41emoo7FttbFk65bVHOd37ZxEpOBtCtyqam8O/ YNKllAkIQe6i5aKTeSyl0u2oPnILwu4oTb3coYyIHrY/aL8gqJA1PyhuvkC4QF2W G7PhoJ+zs/nQwmPlGg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:55:40 2025 by rpki-client