This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/7657DDAA0EC784E5517D769FF91F5C35434A9408.cer
File:                     7657DDAA0EC784E5517D769FF91F5C35434A9408.cer (raw, json)
Hash identifier:          UeaKBE/LoVxSK9LcRHr0RCEUiRUrRHvXCnRCytkaRbY=
Subject key identifier:   76:57:DD:AA:0E:C7:84:E5:51:7D:76:9F:F9:1F:5C:35:43:4A:94:08
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Certificate issuer:       /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial:       0CF21F6A21E9DC520A90079B3E35281536F50750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/7657DDAA0EC784E5517D769FF91F5C35434A9408.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 31 Dec 2025 18:25:09 +0000
Certificate not after:    Wed 30 Dec 2026 18:30:09 +0000
Subordinate resources:    IP: 2a0f:1cc5:2d00::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f2:1f:6a:21:e9:dc:52:0a:90:07:9b:3e:35:28:15:36:f5:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
        Validity
            Not Before: Dec 31 18:25:09 2025 GMT
            Not After : Dec 30 18:30:09 2026 GMT
        Subject: CN=7657DDAA0EC784E5517D769FF91F5C35434A9408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:8c:fb:44:8e:de:bb:91:37:1b:1a:00:86:
                    1c:4e:be:e8:33:65:7c:4e:38:6e:74:5f:da:15:b0:
                    6c:30:54:ee:f4:03:ff:e5:8b:19:66:77:59:9f:61:
                    a4:06:28:0f:f1:e2:c7:c4:7e:17:35:99:11:1b:0c:
                    f9:da:94:35:71:e7:c6:86:61:ea:42:6d:1c:0e:fe:
                    1d:48:ec:40:ad:ca:ae:49:ae:a2:97:cb:e3:72:06:
                    fe:7a:3f:ee:3c:49:51:7e:ad:d9:1d:ea:86:8c:56:
                    68:79:d5:bd:d7:00:46:c3:0d:06:63:55:4c:2e:17:
                    47:ea:aa:c7:03:1a:8c:43:f6:01:a4:0d:50:0d:d5:
                    ec:3a:b0:1f:13:89:42:4f:7a:21:f4:86:a4:e0:f0:
                    c6:af:15:45:f3:9c:a7:d3:0d:81:91:36:92:9f:62:
                    11:82:04:c3:ec:be:eb:ba:2e:6a:93:4d:0b:bf:9c:
                    6d:d8:92:fd:1f:e0:2d:cd:d8:c2:0e:40:47:1d:90:
                    67:8a:80:4b:18:59:ba:ed:12:bc:29:40:05:20:bd:
                    b2:2c:2b:3c:67:80:39:77:f8:40:80:02:57:c5:fc:
                    3a:3e:60:cb:c8:9b:be:5d:cd:04:d3:08:70:73:76:
                    5e:97:f4:d5:69:48:70:bf:9e:c2:50:d2:92:68:6e:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:57:DD:AA:0E:C7:84:E5:51:7D:76:9F:F9:1F:5C:35:43:4A:94:08
            X509v3 Authority Key Identifier:
                keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/7657DDAA0EC784E5517D769FF91F5C35434A9408.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:75:ee:48:42:93:6c:0f:37:0d:5b:2f:01:44:ba:35:3f:c7:
         65:87:6e:5a:ac:5c:eb:f8:1f:e1:12:d6:c0:8d:67:b2:65:b0:
         37:15:65:2a:4b:04:20:4e:e0:fb:36:41:61:c1:10:3b:0e:13:
         9f:7a:e5:57:f6:21:2d:1e:71:60:00:70:3d:ee:a4:25:e8:cf:
         fa:8b:1b:4f:59:04:b2:f6:a0:5c:9c:67:7f:26:e4:f4:c6:5b:
         8a:f4:77:3d:d3:49:5a:8e:d9:ed:7f:92:4f:19:ee:63:d1:30:
         15:88:4c:5f:5a:66:0e:e0:cf:89:f3:a7:0b:af:bd:81:61:c1:
         c5:15:9d:79:94:6f:cc:f5:08:8a:5f:e7:61:e9:97:9e:9e:0c:
         04:df:bb:7a:9c:9a:0a:84:ca:1f:1b:b1:2d:77:78:42:c5:00:
         83:7c:c0:7b:68:90:95:a8:19:7f:59:47:d7:98:b4:05:41:b5:
         57:8d:08:ff:aa:71:6e:9f:5f:fd:77:74:cd:14:a8:36:58:27:
         8e:fd:4f:0c:b2:f0:b3:3d:3e:aa:5e:36:f6:34:5e:b9:2e:ed:
         73:48:cd:38:ab:d4:94:a9:fa:a7:03:a2:e0:bf:d5:c2:ff:8c:
         ca:8d:15:94:7a:b0:cd:b8:85:87:16:cd:d6:58:a6:ce:04:7a:
         cc:12:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----