This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer File: 2A91778ACCE76333081468D9784DE132C2985976.cer (raw, json) Hash identifier: jaQi5vFpWZxrP+5SgB0/Nof0i0h5yIIkFhb/WKoltSY= Subject key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 2C6CA5B57702A734DD4389CB985560F353C9627E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 25 Jan 2026 05:53:02 +0000 Certificate not after: Sun 24 Jan 2027 05:58:02 +0000 Subordinate resources: IP: 2a0f:1cc5:2600::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6c:a5:b5:77:02:a7:34:dd:43:89:cb:98:55:60:f3:53:c9:62:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 25 05:53:02 2026 GMT Not After : Jan 24 05:58:02 2027 GMT Subject: CN=2A91778ACCE76333081468D9784DE132C2985976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:73:c9:d9:0f:13:94:4d:96:1c:45:c2:34: f7:5f:9d:b7:1c:6e:f3:4b:91:28:d1:f0:6d:ff:27: ba:90:75:21:2b:cd:42:71:a9:b7:07:c8:48:b8:d4: 2c:36:dd:4b:44:d7:5e:99:57:dc:c2:0d:39:dc:9b: c9:53:35:92:1c:37:6f:5d:4a:66:cc:5a:fd:e2:65: 32:bb:9a:39:b7:d3:a1:3d:2d:e8:15:76:e9:3a:34: d9:4e:21:21:60:9b:a2:a3:dd:d1:ad:d8:aa:85:24: 8e:fd:1b:9f:35:65:21:90:56:43:29:01:f1:3b:27: 38:d8:27:5e:7f:60:63:b5:f7:0b:69:42:4a:51:e4: fa:1d:ea:22:8b:3d:7c:17:c4:97:6c:de:41:a1:f6: 07:74:a2:47:64:d7:48:78:68:dd:2c:cb:66:5a:26: b3:34:31:9a:ea:11:d5:40:43:f3:19:c6:7d:49:12: 5d:51:de:2a:90:08:cd:60:cc:ef:55:88:29:dc:e9: d8:e8:17:97:81:e1:68:b2:80:7c:d1:6d:b4:15:b4: 4d:ae:60:53:e8:e4:21:58:b5:19:85:14:25:6e:a9: 34:16:80:94:82:c3:41:12:25:3a:28:fc:ed:65:ee: 84:fc:55:4f:99:43:20:e6:25:57:ae:84:c9:cd:ad: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2600::/40 Signature Algorithm: sha256WithRSAEncryption 37:54:95:fa:3e:98:55:5d:c6:52:c1:74:16:09:08:29:c3:2b: 89:84:8c:2f:b2:99:5c:19:86:c4:78:c7:06:bb:38:35:b5:1d: 27:44:81:e3:92:d5:23:0e:db:de:d7:3c:53:7d:bd:07:55:3b: 8e:ef:1c:d5:ca:33:16:cd:39:32:b6:bc:9f:18:89:e2:76:71: ab:5a:74:0d:7e:8a:4d:16:c9:89:84:a0:18:4a:39:47:b6:d3: e2:ad:fe:0b:8f:04:a9:02:4b:92:cc:66:29:8a:0a:e7:f0:8e: 87:f2:1f:5b:93:c5:c7:53:0b:78:1f:da:12:af:79:72:2d:2a: b4:63:b3:48:af:45:ef:c6:b5:1f:72:0f:74:be:5b:f1:ba:10: 16:a0:17:ac:8a:c8:8a:db:32:57:fb:2b:2c:7c:10:aa:39:ce: 9a:f7:ab:92:61:cc:23:d1:93:86:43:a7:86:9c:7e:11:a4:90: 90:f6:bc:68:db:21:23:a1:d4:78:f1:3f:22:22:5a:c2:79:b5: c2:37:9f:8e:bd:7b:72:c7:c9:19:f9:98:a7:d0:48:87:80:b2: f7:e1:72:14:94:27:41:63:c6:9b:ca:21:1e:52:c2:a7:a6:1e: b5:90:48:03:69:d6:dc:3f:af:43:24:33:d3:59:f5:3a:09:dd: d1:3a:4d:19 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIULGyltXcCpzTdQ4nLmFVg81PJYn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMjUwNTUzMDJaFw0yNzAxMjQwNTU4MDJaMDMxMTAvBgNV BAMTKDJBOTE3NzhBQ0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkknPJ2Q8TlE2WHEXCNPdfnbcc bvNLkSjR8G3/J7qQdSErzUJxqbcHyEi41Cw23UtE116ZV9zCDTncm8lTNZIcN29d SmbMWv3iZTK7mjm306E9LegVduk6NNlOISFgm6Kj3dGt2KqFJI79G581ZSGQVkMp AfE7JzjYJ15/YGO19wtpQkpR5Pod6iKLPXwXxJds3kGh9gd0okdk10h4aN0sy2Za JrM0MZrqEdVAQ/MZxn1JEl1R3iqQCM1gzO9ViCnc6djoF5eB4WiygHzRbbQVtE2u YFPo5CFYtRmFFCVuqTQWgJSCw0ESJToo/O1l7oT8VU+ZQyDmJVeuhMnNrddJAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqkXeKzOdjMwgU aNl4TeEywphZdjAfBgNVHSMEGDAWgBRBHi1BHWh7y0RJw99Fvu3AQQB9lDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80MTFFMkQ0MTFENjg3QkNCNDQ0OUMzREY0 NUJFRURDMDQxMDA3RDk0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUVI0dFFS MW9lOHRFU2NQZlJiN3R3RUVBZlpRLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAwZGM5LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS80MGNiYTYxZC00MDU2LTQ2YTktOTM5Mi1hNjFkZmM1MDBkYzkv MS8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3ODRERTEzMkMyOTg1OTc2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqDxzFJjANBgkqhkiG9w0BAQsFAAOCAQEAN1SV +j6YVV3GUsF0FgkIKcMriYSML7KZXBmGxHjHBrs4NbUdJ0SB45LVIw7b3tc8U329 B1U7ju8c1cozFs05Mra8nxiJ4nZxq1p0DX6KTRbJiYSgGEo5R7bT4q3+C48EqQJL ksxmKYoK5/COh/IfW5PFx1MLeB/aEq95ci0qtGOzSK9F78a1H3IPdL5b8boQFqAX rIrIitsyV/srLHwQqjnOmverkmHMI9GThkOnhpx+EaSQkPa8aNshI6HUePE/IiJa wnm1wjefjr17csfJGfmYp9BIh4Cy9+FyFJQnQWPGm8ohHlLCp6YetZBIA2nW3D+v QyQz01n1Ognd0TpNGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:11 2026 by rpki-client