This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer File: FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer (raw, json) Hash identifier: ALR37qUcIsWcvmdXSQtiSIenGhIhPbWdRJnZon6T7II= Subject key identifier: FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 08E2340A2EC89A7890DFB77F88AF06E605084E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 05 Dec 2025 12:47:22 +0000 Certificate not after: Fri 04 Dec 2026 12:52:22 +0000 Subordinate resources: IP: 2a0f:1cc3::/32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e2:34:0a:2e:c8:9a:78:90:df:b7:7f:88:af:06:e6:05:08:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 5 12:47:22 2025 GMT Not After : Dec 4 12:52:22 2026 GMT Subject: CN=FA9B54C77884D87579E661822CB46BEDD39FA5D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:2e:ff:e2:46:66:7e:4c:b8:59:e8:6e:75: 8c:2c:de:75:ee:9e:37:6f:e8:4c:c9:89:99:7b:77: 62:33:6d:c7:3e:56:3f:3f:07:df:46:76:f5:72:21: ec:00:1c:f3:a8:dc:c7:f7:39:f7:7d:56:e4:1f:3a: 0d:4d:f1:5a:4c:3a:9c:13:4d:af:8c:50:85:5d:06: ab:fc:9c:27:d0:34:4a:7c:07:4d:57:3a:78:a1:83: da:dd:c1:50:b6:79:37:3a:fe:11:15:c1:15:ca:9d: d6:bb:4d:51:b0:ce:bc:54:bd:97:b7:87:8a:7b:0d: e8:c5:84:11:22:76:3e:01:41:a8:6f:c2:c7:e3:3e: 87:06:6c:26:0e:a6:f9:f4:01:64:57:0f:76:2d:4a: dc:a5:d0:0c:54:50:cb:7a:83:70:51:b9:e8:d2:de: 26:b4:47:66:b6:b3:61:ac:1d:e7:9b:d4:d7:e0:c2: 87:e1:63:34:9c:01:4f:bc:3f:b0:e2:01:f4:b9:27: 7f:1b:18:de:60:79:2e:59:17:95:59:17:ba:ee:41: b0:5d:6c:fd:d5:6a:e2:76:7e:b1:1a:d0:7b:b1:f1: e3:2e:92:f4:b3:ba:0c:e0:4f:3f:29:60:cf:a2:47: 6a:b2:35:bc:f0:be:75:2f:81:10:3f:19:54:32:d7: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc3::/32 Signature Algorithm: sha256WithRSAEncryption b5:51:f3:80:86:aa:64:29:c6:11:10:67:dd:b0:b4:42:bf:74: 70:97:db:b7:5a:78:67:a6:3a:9b:9d:f3:82:a4:96:3a:b5:01: b1:92:c5:c9:8d:fe:95:c9:a1:f6:fc:c7:4a:a3:01:e2:06:a6: 4b:65:61:08:c8:27:aa:62:9c:7c:5c:b7:69:e0:c3:2d:f8:1e: 30:2d:32:96:f7:38:12:b7:82:89:4a:63:7e:31:bb:bd:b4:63: 64:70:8e:41:ee:3c:97:40:eb:3b:cb:76:68:a5:e8:4a:9b:dd: 97:a8:bc:20:3c:4c:ec:17:1c:fc:94:ae:95:e6:99:67:ca:ad: 30:d6:70:96:97:18:ac:64:2a:a1:83:08:cb:0f:5a:03:10:fc: 98:4d:5a:a3:9a:b7:f8:ac:e6:ba:ff:8c:ba:e6:4c:60:81:ce: ad:a9:13:5d:a8:b8:94:0e:5c:74:8b:ab:c8:73:34:c4:2c:87: 28:5c:50:28:c0:ff:49:3d:14:d1:14:93:04:b7:85:3d:05:7f: 18:87:f3:44:39:bf:a2:c3:1c:41:ef:60:2a:40:31:2f:d5:d9: 90:3a:f2:23:5d:d3:ac:e9:f2:12:44:1c:fb:61:d1:8e:d2:bb: b6:06:d0:dc:2e:81:a0:c8:5f:25:69:ec:10:37:d6:4c:dd:38: ca:21:07:de -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgITCOI0Ci7ImniQ37d/iK8G5gUITjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3NWE4MzhlMDJjNjE4MDBmNzNkMzAxOWRlMGE1MWY1Njdi NjRiYzBlMB4XDTI1MTIwNTEyNDcyMloXDTI2MTIwNDEyNTIyMlowMzExMC8GA1UE AxMoRkE5QjU0Qzc3ODg0RDg3NTc5RTY2MTgyMkNCNDZCRUREMzlGQTVEMzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKmLLv/iRmZ+TLhZ6G51jCzede6e N2/oTMmJmXt3YjNtxz5WPz8H30Z29XIh7AAc86jcx/c5931W5B86DU3xWkw6nBNN r4xQhV0Gq/ycJ9A0SnwHTVc6eKGD2t3BULZ5Nzr+ERXBFcqd1rtNUbDOvFS9l7eH insN6MWEESJ2PgFBqG/Cx+M+hwZsJg6m+fQBZFcPdi1K3KXQDFRQy3qDcFG56NLe JrRHZrazYawd55vU1+DCh+FjNJwBT7w/sOIB9LknfxsY3mB5LlkXlVkXuu5BsF1s /dVq4nZ+sRrQe7Hx4y6S9LO6DOBPPylgz6JHarI1vPC+dS+BED8ZVDLXlDECAwEA AaOCAuIwggLeMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFPqbVMd4hNh1eeZh giy0a+3Tn6XTMB8GA1UdIwQYMBaAFHWoOOAsYYAPc9MBneClH1Z7ZLwOMA4GA1Ud DwEB/wQEAwIBBjCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2 MS1hNGQ4LWYzNDVmNTJiYzI1ZC8wLzc1QTgzOEUwMkM2MTgwMEY3M0QzMDE5REUw QTUxRjU2N0I2NEJDMEUuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZI cnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYWc0NEN4 aGdBOXowd0dkNEtVZlZudGt2QTQuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBf BggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVw b3NpdG9yeS8wMmE5ZThhNS1jOGY0LTQ3YjMtODBjOS1mMWUwMmE4YWFhODkvMC8w gYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5LzAyYTllOGE1LWM4ZjQtNDdiMy04MGM5LWYxZTAyYThhYWE4OS8w L0ZBOUI1NEM3Nzg4NEQ4NzU3OUU2NjE4MjJDQjQ2QkVERDM5RkE1RDMubWZ0MDwG CCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcB BwEB/wQRMA8wDQQCAAIwBwMFACoPHMMwDQYJKoZIhvcNAQELBQADggEBALVR84CG qmQpxhEQZ92wtEK/dHCX27daeGemOpud84Kkljq1AbGSxcmN/pXJofb8x0qjAeIG pktlYQjIJ6pinHxct2ngwy34HjAtMpb3OBK3golKY34xu720Y2RwjkHuPJdA6zvL dmil6Eqb3ZeovCA8TOwXHPyUrpXmmWfKrTDWcJaXGKxkKqGDCMsPWgMQ/JhNWqOa t/is5rr/jLrmTGCBzq2pE12ouJQOXHSLq8hzNMQshyhcUCjA/0k9FNEUkwS3hT0F fxiH80Q5v6LDHEHvYCpAMS/V2ZA68iNd06zp8hJEHPth0Y7Su7YG0NwugaDIXyVp 7BA31kzdOMohB94= -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:45 2025 by rpki-client