Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
File: D34606949D385DB42714FE71274FAC9948EF279C.cer (raw, json)
Hash identifier: Jr4fRJS+nPVoRQIRXyWs31rP/U/UP3PPufL87ZQz8U8=
Subject key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 7419C94C24B17743DD9A631EA83C450B469ACEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Manifest: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
caRepository: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Thu 17 Sep 2026 09:41:25 +0000
Certificate not after: Thu 16 Sep 2027 09:46:25 +0000
Subordinate resources: IP: 82.140.182.0/23
IP: 84.46.170.0/23
IP: 84.46.200.0/24
IP: 84.46.234.0 -- 84.46.255.255
IP: 86.38.4.0/23
IP: 86.38.7.0/24
IP: 86.38.24.0/24
IP: 86.38.32.0/24
IP: 86.38.37.0/24
IP: 86.38.151.0/24
IP: 86.38.156.0/24
IP: 86.38.175.0/24
IP: 86.38.177.0 -- 86.38.187.255
IP: 86.38.189.0 -- 86.38.190.255
IP: 86.38.200.0/24
IP: 86.38.202.0 -- 86.38.205.255
IP: 86.38.214.0/24
IP: 86.38.216.0 -- 86.38.221.255
IP: 86.38.225.0 -- 86.38.226.255
IP: 86.38.232.0/24
IP: 86.38.235.0/24
IP: 86.38.238.0/24
IP: 86.38.241.0 -- 86.38.243.255
IP: 86.38.246.0 -- 86.38.255.255
IP: 89.116.8.0/22
IP: 89.116.20.0 -- 89.116.39.255
IP: 89.116.44.0 -- 89.116.54.255
IP: 89.116.56.0/24
IP: 89.116.58.0 -- 89.116.70.255
IP: 89.116.72.0 -- 89.116.76.255
IP: 89.116.80.0 -- 89.116.89.255
IP: 89.116.91.0 -- 89.116.92.255
IP: 89.116.96.0/24
IP: 89.116.99.0 -- 89.116.100.255
IP: 89.116.102.0/23
IP: 89.116.106.0 -- 89.116.108.255
IP: 89.116.112.0/23
IP: 89.116.115.0/24
IP: 89.116.123.0/24
IP: 89.116.125.0 -- 89.116.128.255
IP: 89.116.130.0 -- 89.116.132.255
IP: 89.116.135.0/24
IP: 89.116.137.0/24
IP: 89.116.140.0/23
IP: 89.116.144.0/24
IP: 89.116.146.0 -- 89.116.150.255
IP: 89.116.153.0 -- 89.116.154.255
IP: 89.116.156.0/24
IP: 89.116.158.0/24
IP: 89.116.161.0/24
IP: 89.116.163.0 -- 89.116.166.255
IP: 89.116.168.0/23
IP: 89.116.171.0 -- 89.116.173.255
IP: 89.116.175.0/24
IP: 89.116.177.0/24
IP: 89.116.179.0 -- 89.116.186.255
IP: 89.116.189.0 -- 89.116.190.255
IP: 89.116.193.0/24
IP: 89.116.198.0/24
IP: 89.116.200.0/24
IP: 89.116.202.0/23
IP: 89.116.208.0/21
IP: 89.116.218.0/24
IP: 89.116.220.0/23
IP: 89.116.223.0 -- 89.116.231.255
IP: 89.116.233.0 -- 89.116.234.255
IP: 89.116.236.0/23
IP: 89.116.239.0/24
IP: 89.116.241.0 -- 89.116.244.255
IP: 89.116.246.0 -- 89.116.248.255
IP: 89.116.250.0/24
IP: 89.116.252.0/23
IP: 89.116.255.0 -- 89.117.3.255
IP: 89.117.5.0 -- 89.117.9.255
IP: 89.117.11.0 -- 89.117.13.255
IP: 89.117.15.0 -- 89.117.25.255
IP: 89.117.27.0 -- 89.117.33.255
IP: 89.117.35.0 -- 89.117.38.255
IP: 89.117.40.0 -- 89.117.68.255
IP: 89.117.70.0 -- 89.117.85.255
IP: 89.117.87.0 -- 89.117.91.255
IP: 89.117.94.0 -- 89.117.99.255
IP: 89.117.101.0 -- 89.117.107.255
IP: 89.117.109.0/24
IP: 89.117.111.0 -- 89.117.118.255
IP: 89.117.120.0 -- 89.117.124.255
IP: 89.117.126.0/24
IP: 89.117.129.0 -- 89.117.130.255
IP: 89.117.132.0 -- 89.117.136.255
IP: 89.117.139.0/24
IP: 89.117.142.0 -- 89.117.155.255
IP: 89.117.157.0 -- 89.117.164.255
IP: 89.117.167.0 -- 89.117.169.255
IP: 89.117.171.0 -- 89.117.175.255
IP: 89.117.188.0/24
IP: 89.117.190.0/24
IP: 89.117.215.0 -- 89.117.218.255
IP: 89.117.222.0/24
IP: 89.117.226.0 -- 89.117.229.255
IP: 89.117.245.0/24
IP: 89.117.250.0/24
IP: 89.117.254.0/24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:19:c9:4c:24:b1:77:43:dd:9a:63:1e:a8:3c:45:0b:46:9a:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Sep 17 09:41:25 2026 GMT
Not After : Sep 16 09:46:25 2027 GMT
Subject: CN=D34606949D385DB42714FE71274FAC9948EF279C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:0e:d9:9c:35:ed:5c:9f:af:35:3a:4c:93:
c7:2f:83:e5:75:a3:de:5b:2a:b7:f8:d0:21:18:d4:
85:99:ad:3f:4c:89:64:75:d5:72:02:98:6d:23:15:
5b:7b:18:ed:c0:d9:40:08:4a:aa:3d:aa:5d:c3:6f:
b0:15:20:9f:ae:9a:26:88:0a:37:b3:aa:67:60:5a:
57:d1:15:c0:1d:ca:48:1c:a1:4a:12:98:57:93:47:
9e:72:2d:fb:0e:33:4f:83:5f:f1:91:ac:52:51:0a:
91:ce:db:d9:23:b8:b2:f7:a2:39:5a:19:54:4f:33:
6c:26:68:e1:15:f5:8c:31:54:d7:b4:d8:56:c7:fc:
5d:ec:a4:91:3c:ec:b3:e6:87:1b:61:3f:bc:5e:ea:
ae:c1:de:59:56:e4:36:2d:32:fa:66:47:4c:7e:f8:
6d:54:09:aa:42:45:7d:6c:28:be:9a:6b:88:1a:9f:
6b:9a:90:a9:ac:a5:10:70:fa:5b:dd:f1:97:07:f3:
83:3a:64:aa:1f:44:78:79:55:ba:c7:6d:9d:0d:ea:
73:55:4a:f8:f6:bf:4a:bd:21:49:65:a3:53:be:a4:
05:6f:4a:6f:97:be:3f:27:25:74:01:10:5a:da:e3:
5f:35:7e:5a:31:0d:41:d4:72:25:dd:4a:2f:a3:17:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.170.0/23
84.46.200.0/24
84.46.234.0-84.46.255.255
86.38.4.0/23
86.38.7.0/24
86.38.24.0/24
86.38.32.0/24
86.38.37.0/24
86.38.151.0/24
86.38.156.0/24
86.38.175.0/24
86.38.177.0-86.38.187.255
86.38.189.0-86.38.190.255
86.38.200.0/24
86.38.202.0-86.38.205.255
86.38.214.0/24
86.38.216.0-86.38.221.255
86.38.225.0-86.38.226.255
86.38.232.0/24
86.38.235.0/24
86.38.238.0/24
86.38.241.0-86.38.243.255
86.38.246.0-86.38.255.255
89.116.8.0/22
89.116.20.0-89.116.39.255
89.116.44.0-89.116.54.255
89.116.56.0/24
89.116.58.0-89.116.70.255
89.116.72.0-89.116.76.255
89.116.80.0-89.116.89.255
89.116.91.0-89.116.92.255
89.116.96.0/24
89.116.99.0-89.116.100.255
89.116.102.0/23
89.116.106.0-89.116.108.255
89.116.112.0/23
89.116.115.0/24
89.116.123.0/24
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.140.0/23
89.116.144.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.156.0/24
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.168.0/23
89.116.171.0-89.116.173.255
89.116.175.0/24
89.116.177.0/24
89.116.179.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.198.0/24
89.116.200.0/24
89.116.202.0/23
89.116.208.0/21
89.116.218.0/24
89.116.220.0/23
89.116.223.0-89.116.231.255
89.116.233.0-89.116.234.255
89.116.236.0/23
89.116.239.0/24
89.116.241.0-89.116.244.255
89.116.246.0-89.116.248.255
89.116.250.0/24
89.116.252.0/23
89.116.255.0-89.117.3.255
89.117.5.0-89.117.9.255
89.117.11.0-89.117.13.255
89.117.15.0-89.117.25.255
89.117.27.0-89.117.33.255
89.117.35.0-89.117.38.255
89.117.40.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.87.0-89.117.91.255
89.117.94.0-89.117.99.255
89.117.101.0-89.117.107.255
89.117.109.0/24
89.117.111.0-89.117.118.255
89.117.120.0-89.117.124.255
89.117.126.0/24
89.117.129.0-89.117.130.255
89.117.132.0-89.117.136.255
89.117.139.0/24
89.117.142.0-89.117.155.255
89.117.157.0-89.117.164.255
89.117.167.0-89.117.169.255
89.117.171.0-89.117.175.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b2:a4:a3:8f:09:0b:e5:68:b0:cb:1c:26:64:4c:aa:b5:8b:
26:e4:87:7d:fe:d1:3b:bd:66:77:ea:fe:ee:3e:fb:2b:63:fe:
64:52:28:03:b1:7d:48:83:bb:8b:97:2a:22:fc:a9:d8:a7:48:
ed:59:f3:06:b5:93:48:4a:98:2c:c9:4c:0f:7d:f5:a3:88:d0:
4e:30:82:2f:63:4f:23:d9:50:6c:3f:61:30:44:12:0b:33:a1:
de:9c:58:9b:c7:63:04:6c:4e:00:4c:8a:1a:71:7d:95:9b:0f:
12:0b:42:e1:14:51:f9:7a:25:f7:c4:0c:90:e1:45:b3:76:ff:
22:ab:b1:dd:7f:6b:2a:f2:a6:4b:56:48:1c:f4:67:db:43:f4:
18:7a:b9:5c:07:51:42:1b:6d:79:ab:53:94:f0:a4:c3:98:27:
ef:d6:53:25:4d:75:05:79:28:62:be:b3:4a:2c:cc:73:5c:cf:
86:f5:94:d9:aa:f7:1f:a6:7c:da:d3:ad:53:58:31:89:c0:98:
11:d2:8b:e0:50:3c:c0:55:c9:5d:df:df:e3:fd:9b:62:10:e9:
12:9d:6a:8e:4e:23:7d:cc:dc:4b:d7:aa:aa:f5:7f:65:44:95:
4a:c5:e3:b8:64:66:2e:41:0e:23:4a:00:00:52:8f:b6:a4:dd:
28:62:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:16:12 2026 by rpki-client