This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer File: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer (raw, json) Hash identifier: ji6sF/pbFHw0dk9l03JsSI1lTa/vQmzHwyiisPTjG2M= Subject key identifier: 37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 311434B3F467967DE3930F1D8511AF0B45F4532F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 03:19:08 +0000 Certificate not after: Fri 22 Jan 2027 03:24:08 +0000 Subordinate resources: IP: 2a0f:1cc5:2400::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:14:34:b3:f4:67:96:7d:e3:93:0f:1d:85:11:af:0b:45:f4:53:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 23 03:19:08 2026 GMT Not After : Jan 22 03:24:08 2027 GMT Subject: CN=37AAEE584452DDAB0250921C4B2D8474F61FF74D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:eb:22:12:20:60:84:92:77:de:84:c0:57: eb:03:0f:75:aa:df:bb:5f:c3:3c:fe:56:43:df:ec: 6e:69:eb:39:32:a6:e9:94:6a:d0:64:8d:4b:11:34: 63:17:f6:33:e0:61:ff:2f:43:1f:c4:bd:c6:62:8e: 9b:7f:00:bc:40:5b:eb:f8:ed:b1:21:c8:3a:81:33: 11:15:39:40:b1:28:0e:ce:34:b0:b1:42:91:42:ab: 5b:f4:2f:36:65:0f:0c:22:07:40:60:27:be:ce:bc: cb:1d:9f:a2:46:e6:46:d9:b4:f1:85:2c:74:d0:2c: 89:14:4f:08:f0:d1:87:13:b5:24:c3:8b:9b:2e:57: 73:1e:fb:3a:c7:3c:8c:86:48:63:c5:35:d2:cf:6f: 7e:91:01:90:da:81:37:59:ee:3a:dc:6c:e3:f9:01: 03:01:e0:04:b7:94:18:e0:b0:28:b0:00:0b:6f:b4: 90:86:1f:80:af:06:e7:2a:3f:52:3b:3e:db:0a:26: 7a:92:6b:af:ed:19:46:ec:c0:e2:53:fc:60:07:de: 2c:22:0f:de:39:33:f1:be:cb:ef:4b:79:1b:e0:85: 34:a1:02:7f:cf:74:6a:d3:b9:4f:69:f1:9d:e0:6b: d1:c6:10:e2:82:1d:45:94:e3:6d:24:1c:95:e7:79: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2400::/40 Signature Algorithm: sha256WithRSAEncryption 00:67:0f:7f:43:ff:39:d0:2f:f4:16:c1:3c:26:ba:8e:31:de: b1:3b:a4:3e:41:9b:af:34:3e:04:07:84:e9:45:4a:4c:ae:f8: 5d:21:be:ba:82:51:51:82:3d:55:99:55:c0:5c:30:f3:68:a5: 4b:ae:1d:33:2b:73:0e:1c:75:0d:93:5d:02:40:f0:65:1a:05: e2:93:16:2b:60:6b:cf:ec:60:60:52:11:58:1b:23:19:4e:f3: 59:07:af:ae:a5:9d:0f:53:9f:20:20:ac:af:b1:f9:79:15:04: fe:a0:4c:94:ac:4d:04:27:98:2c:8e:bb:08:bc:98:ec:c8:61: c5:0c:a5:fd:4e:55:3c:1b:a2:31:61:21:22:c6:27:65:c4:74: 1c:2f:2b:1f:d2:cb:6c:f2:7d:70:46:79:54:58:1a:15:88:b2: c7:76:28:0f:5c:58:a4:58:7a:90:c6:f4:e2:7e:de:25:5d:d6: e3:92:52:29:6e:c5:f9:29:66:b4:a7:9c:37:3a:b1:33:16:0c: ff:97:e3:1f:17:6e:c7:9a:49:78:7b:eb:a1:e4:3e:0a:cf:f7: 78:f1:47:1e:89:83:81:d6:05:b2:20:90:c8:97:c5:91:51:e3: 6b:d3:b8:b3:f8:e5:b6:e4:cd:ca:8e:5e:a2:bd:c9:99:8e:da: 7f:ad:36:3e -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUMRQ0s/Rnln3jkw8dhRGvC0X0Uy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMjMwMzE5MDhaFw0yNzAxMjIwMzI0MDhaMDMxMTAvBgNV BAMTKDM3QUFFRTU4NDQ1MkREQUIwMjUwOTIxQzRCMkQ4NDc0RjYxRkY3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7l+siEiBghJJ33oTAV+sDD3Wq 37tfwzz+VkPf7G5p6zkypumUatBkjUsRNGMX9jPgYf8vQx/EvcZijpt/ALxAW+v4 7bEhyDqBMxEVOUCxKA7ONLCxQpFCq1v0LzZlDwwiB0BgJ77OvMsdn6JG5kbZtPGF LHTQLIkUTwjw0YcTtSTDi5suV3Me+zrHPIyGSGPFNdLPb36RAZDagTdZ7jrcbOP5 AQMB4AS3lBjgsCiwAAtvtJCGH4CvBucqP1I7PtsKJnqSa6/tGUbswOJT/GAH3iwi D945M/G+y+9LeRvghTShAn/PdGrTuU9p8Z3ga9HGEOKCHUWU420kHJXneWxDAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3qu5YRFLdqwJQ khxLLYR09h/3TTAfBgNVHSMEGDAWgBRBHi1BHWh7y0RJw99Fvu3AQQB9lDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80MTFFMkQ0MTFENjg3QkNCNDQ0OUMzREY0 NUJFRURDMDQxMDA3RDk0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUVI0dFFS MW9lOHRFU2NQZlJiN3R3RUVBZlpRLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0YWQwLzQv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS85MDgyMTg5OS03N2E2LTQzYTctOWE4Mi0wYTM4ZmYzYjRhZDAv NC8zN0FBRUU1ODQ0NTJEREFCMDI1MDkyMUM0QjJEODQ3NEY2MUZGNzRELm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqDxzFJDANBgkqhkiG9w0BAQsFAAOCAQEAAGcP f0P/OdAv9BbBPCa6jjHesTukPkGbrzQ+BAeE6UVKTK74XSG+uoJRUYI9VZlVwFww 82ilS64dMytzDhx1DZNdAkDwZRoF4pMWK2Brz+xgYFIRWBsjGU7zWQevrqWdD1Of ICCsr7H5eRUE/qBMlKxNBCeYLI67CLyY7MhhxQyl/U5VPBuiMWEhIsYnZcR0HC8r H9LLbPJ9cEZ5VFgaFYiyx3YoD1xYpFh6kMb04n7eJV3W45JSKW7F+SlmtKecNzqx MxYM/5fjHxdux5pJeHvroeQ+Cs/3ePFHHomDgdYFsiCQyJfFkVHja9O4s/jltuTN yo5eor3JmY7af602Pg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:34 2026 by rpki-client