This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer
File:                     67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (raw, json)
Hash identifier:          pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=
Subject key identifier:   67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F
Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7
Certificate issuer:       /CN=20914720382A1F52B950212C138E5E1E81BA69B7
Certificate serial:       11B9DD64BA8123BC7C8EC044A1AF92C8A057D9B5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 23 Jan 2026 14:12:27 +0000
Certificate not after:    Fri 22 Jan 2027 14:17:27 +0000
Subordinate resources:    IP: 2a14:7586:6300::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b9:dd:64:ba:81:23:bc:7c:8e:c0:44:a1:af:92:c8:a0:57:d9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7
        Validity
            Not Before: Jan 23 14:12:27 2026 GMT
            Not After : Jan 22 14:17:27 2027 GMT
        Subject: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:43:05:a5:29:a4:51:f6:9c:1f:49:b6:1d:
                    51:d8:c6:b3:ef:a8:c7:3e:7d:2f:2e:0c:da:da:8d:
                    30:c9:d9:a9:83:fe:8c:76:8a:37:7a:5b:b0:b4:2f:
                    f7:fe:c6:0b:db:88:83:b3:9c:58:ef:ae:e8:6e:52:
                    83:c4:ed:aa:e6:5c:27:aa:3c:32:3d:ef:7c:b5:df:
                    d5:da:1e:8e:d1:d0:e5:86:fa:d8:21:40:85:ac:36:
                    b1:cd:2d:05:ec:5b:66:fb:3d:50:f6:91:1e:15:66:
                    5d:0a:aa:c2:62:ea:9c:66:28:28:d5:c6:be:ec:7e:
                    62:af:9b:e6:04:92:8f:0c:ab:21:bf:a2:b5:65:32:
                    e8:ad:d6:2f:d2:80:85:db:37:ad:a7:fb:bb:df:f8:
                    dd:ee:be:a6:b9:34:cc:35:db:dd:c7:ae:37:33:4b:
                    91:04:93:74:fb:6a:66:fe:32:81:bf:1e:ff:97:0a:
                    87:dd:b8:cc:f2:1f:fc:14:21:7a:f8:a5:51:93:a5:
                    94:c5:92:8b:7f:96:b9:fa:60:42:73:8c:58:5d:71:
                    ea:98:12:f9:c5:29:15:ae:54:ce:a6:b7:a8:a3:75:
                    e0:61:6f:0e:fd:8f:d2:37:ae:a5:78:e9:e6:18:aa:
                    20:d7:c0:67:9e:9d:4a:31:23:56:96:c5:ee:d8:c0:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F
            X509v3 Authority Key Identifier:
                keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7586:6300::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:d7:82:da:c2:f4:cb:06:f5:e2:be:81:03:f7:30:1f:34:91:
         a8:97:cf:54:d1:33:4a:f7:08:42:54:f8:58:34:94:df:58:40:
         48:42:8f:12:cd:4a:80:40:8d:9a:1b:69:8d:dd:43:36:01:c3:
         70:ab:eb:20:6d:bc:b4:25:1e:da:9e:08:f8:99:31:30:35:55:
         79:b2:dd:a8:b2:fb:b2:13:1b:68:44:a0:ca:14:57:db:bd:d6:
         3a:ba:f4:92:2e:cd:25:f8:41:6b:9a:ce:2c:5c:ab:2a:ae:3c:
         4d:a9:0c:ae:04:86:15:e1:4f:bd:37:7e:5e:c7:86:a3:d3:01:
         6e:cf:a2:d0:66:70:76:61:18:df:da:ed:87:14:2d:59:8e:b2:
         10:27:5e:89:af:9c:56:03:68:c9:39:ab:66:43:4c:e1:aa:bc:
         59:07:b5:b1:08:c9:8b:89:c4:e5:47:ea:84:ad:74:c5:c2:b0:
         a6:8d:ef:94:90:ac:b2:84:4c:8e:bf:ed:b4:30:71:8d:18:b9:
         9d:bb:31:48:5d:a8:9e:eb:8f:fe:32:c7:84:d3:aa:ee:a0:4b:
         3c:a8:0f:5f:11:0f:aa:d4:cb:71:ab:3e:89:c9:2e:b1:43:14:
         76:7e:05:ff:0b:8e:5d:66:95:89:76:b0:dd:2f:c8:95:fa:4c:
         8d:a2:58:f3
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIUEbndZLqBI7x8jsBEoa+SyKBX2bUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4
MUJBNjlCNzAeFw0yNjAxMjMxNDEyMjdaFw0yNzAxMjIxNDE3MjdaMDMxMTAvBgNV
BAMTKDY3RTJEQkNFOUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0EMFpSmkUfacH0m2HVHYxrPv
qMc+fS8uDNrajTDJ2amD/ox2ijd6W7C0L/f+xgvbiIOznFjvruhuUoPE7armXCeq
PDI973y139XaHo7R0OWG+tghQIWsNrHNLQXsW2b7PVD2kR4VZl0KqsJi6pxmKCjV
xr7sfmKvm+YEko8MqyG/orVlMuit1i/SgIXbN62n+7vf+N3uvqa5NMw1293Hrjcz
S5EEk3T7amb+MoG/Hv+XCofduMzyH/wUIXr4pVGTpZTFkot/lrn6YEJzjFhdceqY
EvnFKRWuVM6mt6ijdeBhbw79j9I3rqV46eYYqiDXwGeenUoxI1aWxe7YwGgBAgMB
AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRn4tvOnACxiYTK
wu26tCxY9DmbDzAfBgNVHSMEGDAWgBQgkUcgOCofUrlQISwTjl4egbpptzAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4
YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx
MzhFNUUxRTgxQkE2OUI3LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF
BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzIwOTE0NzIw
MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcuY2VyMIIBPwYIKwYBBQUH
AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9mYjgwNjk3OC01NTcxLTRkYzktYTg3Mi05MjM5
N2M0Yzg4ODAvMC8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTky
Mzk3YzRjODg4MC8wLzY3RTJEQkNFOUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQz
OTlCMEYubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp
cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUdYZjMA0GCSqGSIb3DQEB
CwUAA4IBAQCC14LawvTLBvXivoED9zAfNJGol89U0TNK9whCVPhYNJTfWEBIQo8S
zUqAQI2aG2mN3UM2AcNwq+sgbby0JR7angj4mTEwNVV5st2osvuyExtoRKDKFFfb
vdY6uvSSLs0l+EFrms4sXKsqrjxNqQyuBIYV4U+9N35ex4aj0wFuz6LQZnB2YRjf
2u2HFC1ZjrIQJ16Jr5xWA2jJOatmQ0zhqrxZB7WxCMmLicTlR+qErXTFwrCmje+U
kKyyhEyOv+20MHGNGLmduzFIXaie64/+MseE06ruoEs8qA9fEQ+q1Mtxqz6JyS6x
QxR2fgX/C45dZpWJdrDdL8iV+kyNoljz
-----END CERTIFICATE-----