This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer
File:                     F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer (raw, json)
Hash identifier:          qbgeFSQ7OjZemJx9N9WL7VvyRsnMSaf3a5zi/e7fPEM=
Subject key identifier:   F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       5000E7DBDD00566C3D8B7E8729A6999C3A4C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 25 Jan 2026 00:59:40 +0000
Certificate not after:    Sun 24 Jan 2027 01:04:40 +0000
Subordinate resources:    IP: 2a11:f2c0:ffce::/48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:00:e7:db:dd:00:56:6c:3d:8b:7e:87:29:a6:99:9c:3a:4c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jan 25 00:59:40 2026 GMT
            Not After : Jan 24 01:04:40 2027 GMT
        Subject: CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:f9:7f:20:aa:b3:b1:1f:59:2b:34:51:ac:
                    69:de:fe:2a:65:73:4b:eb:1c:d3:f8:da:9d:fe:47:
                    51:55:29:d0:59:fb:ee:b6:d3:5a:69:36:60:4f:18:
                    a1:1a:c4:a0:50:ad:99:15:04:1f:53:77:8a:13:3a:
                    e4:4d:a1:dc:6f:23:3c:81:d5:af:2c:08:84:b5:b8:
                    63:d2:e9:8a:ee:58:e0:7e:d1:6d:f9:eb:ef:4d:1e:
                    d3:55:32:ef:e8:20:d6:1f:89:11:87:b8:47:ff:bd:
                    7b:16:bf:bf:45:9f:c2:96:29:8e:4a:ff:ca:75:73:
                    25:ff:e3:19:a4:ac:dc:15:4e:b1:3a:6c:3a:e1:b0:
                    ef:c7:8e:26:98:9a:05:39:19:f0:97:57:5f:46:71:
                    4b:0d:14:4d:4d:22:cf:4e:9b:0a:74:44:a1:44:0b:
                    44:e7:4b:32:2b:5c:5b:fb:13:6e:5a:d5:0a:0a:eb:
                    df:31:a2:93:4c:cc:de:23:85:69:a2:b1:2b:55:3b:
                    fa:04:e6:94:8f:d2:ff:49:42:d7:0d:ef:c7:d1:e6:
                    53:0e:5f:b1:75:f2:24:cf:20:30:f0:76:f7:e5:54:
                    ad:b4:1b:19:83:4d:19:2c:9f:88:b4:fd:7d:27:fe:
                    7c:b6:d2:80:45:36:99:1b:11:cf:4e:77:ed:9b:35:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffce::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:f8:00:ad:17:81:c6:e7:f3:11:f7:ff:77:e7:b5:19:54:f8:
         ea:42:56:cb:b8:66:9e:37:0f:57:55:32:f8:75:f5:08:fa:65:
         a0:5f:91:7e:b5:02:93:f6:57:a8:a6:68:9d:98:c2:06:60:b4:
         5e:17:4e:9c:5b:d8:3c:b2:5e:9f:58:0e:11:2e:77:d0:e2:f2:
         9d:3b:ed:01:d1:be:92:89:89:d9:22:a1:f0:3f:69:44:0b:36:
         90:92:35:ce:3d:1e:e1:81:a2:cf:0b:29:36:e3:79:56:33:3b:
         a0:47:0d:d7:3f:d2:b0:4c:d6:62:f4:37:1a:fc:5a:d6:20:3f:
         31:41:d8:80:b8:9b:53:37:40:ad:e3:5a:5e:21:7d:9f:ea:cf:
         21:a1:b1:fb:41:d6:a2:60:1d:78:fa:e8:a8:83:3a:87:bb:82:
         8f:b5:42:02:b1:bb:a0:eb:12:fb:7a:a8:e4:ab:ee:e7:e0:30:
         e6:b0:cb:48:41:cd:31:47:c1:cc:7d:b5:ca:29:38:96:c7:9e:
         2a:89:1a:6d:18:86:08:e4:d7:bc:8b:e0:1f:28:4f:da:8f:45:
         86:13:a6:40:99:99:a1:a2:eb:68:66:be:79:ea:35:e4:4b:ca:
         fb:c9:dc:26:44:49:57:67:cb:08:ec:86:bc:b8:da:e7:18:e3:
         e0:7a:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----