This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer
File:                     2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer (raw, json)
Hash identifier:          pxz0LR+iQ3l1lE7tkI4TpOm1EbpH5/e/dD9vYzgfMps=
Subject key identifier:   2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       35D3B80E22E49791BFB88065BCA942C0906FB90F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Mon 17 Nov 2025 09:48:44 +0000
Certificate not after:    Mon 16 Nov 2026 09:53:44 +0000
Subordinate resources:    IP: 2a11:f2c0:ffe0::/48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d3:b8:0e:22:e4:97:91:bf:b8:80:65:bc:a9:42:c0:90:6f:b9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Nov 17 09:48:44 2025 GMT
            Not After : Nov 16 09:53:44 2026 GMT
        Subject: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:31:57:2f:b7:18:da:8c:83:ed:d2:55:c8:
                    2a:21:0c:8d:62:58:a3:8d:d1:c1:1f:42:0d:e2:9b:
                    9e:02:3c:a6:ff:bd:d0:6f:03:01:26:73:b3:ae:86:
                    39:09:7e:ce:b5:dd:40:90:66:fc:25:c1:29:d9:d2:
                    7b:fb:61:fa:2f:2e:4a:62:92:cc:08:6d:5e:7a:69:
                    de:3f:d1:ca:15:47:3a:c4:72:96:76:d1:90:19:fd:
                    ff:2f:4b:c4:45:9e:75:69:a1:fc:63:ff:48:9e:29:
                    1f:6f:92:27:c3:71:35:5b:64:a7:56:66:c6:fe:89:
                    03:e9:2b:f3:e7:64:6c:c2:8e:72:15:c4:99:fc:dd:
                    5c:52:84:41:88:93:c1:30:69:3a:aa:31:c3:9e:33:
                    3e:b2:e8:79:82:fb:ca:91:be:d7:47:e5:96:14:9a:
                    14:44:a2:f5:f9:f5:b4:8c:22:14:25:3f:09:f0:d2:
                    0e:0c:4d:21:81:69:18:7d:f5:56:d0:39:43:5b:c3:
                    40:92:85:15:a8:95:a8:82:71:78:25:11:c6:ad:99:
                    2b:18:97:80:d6:7e:63:95:c1:6d:53:a5:4a:76:d4:
                    a5:fe:39:46:17:4a:fc:6a:cf:f8:5a:cc:4b:cf:39:
                    bd:b9:47:a8:f3:ff:d7:a6:f8:9d:fd:e8:d9:24:57:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffe0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:f0:08:c4:e6:28:33:cd:a8:c5:75:9a:a1:59:e9:24:ef:76:
         90:43:84:31:60:14:c6:51:56:a7:f9:32:0d:e3:48:17:d1:93:
         7f:b3:53:1e:81:2b:00:4b:b6:1d:26:a8:59:49:1a:ab:bb:3b:
         c3:44:24:4d:f3:5b:26:95:48:73:5f:96:61:6a:3d:2a:64:b9:
         20:c5:6a:3b:9b:89:99:07:ce:60:51:ad:38:96:5c:28:86:ac:
         93:03:58:56:74:f2:72:e2:fe:58:d5:21:e0:c1:7b:4b:2b:1e:
         e8:d4:95:8c:de:40:5f:2e:dd:8b:bd:0e:78:62:47:66:95:09:
         c2:79:27:e1:08:0a:1e:32:be:4c:06:cf:82:18:c3:f1:ba:a1:
         7e:ca:0a:dc:1d:86:29:29:33:85:00:43:ed:13:4d:04:a8:be:
         b7:b6:b1:d5:da:07:3a:e9:29:72:7d:d9:1b:0d:5a:1a:bc:d5:
         13:4f:b7:30:af:25:11:ac:49:6f:46:b6:e5:65:23:54:3a:7b:
         1d:d1:0b:26:a6:70:cf:f7:8e:ff:f6:a4:f5:85:b2:71:4a:56:
         d6:df:65:88:30:8e:8d:3f:24:de:01:a9:04:0b:8b:8c:72:a5:
         e8:a0:82:ce:65:af:94:b3:ee:1f:d3:9d:0c:52:3c:a1:ef:c3:
         7d:3b:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----