$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.cer File: F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.cer (raw, json) Hash identifier: Pe7HR7nD1gOii59KkZCRs4tzvSx15BrzbCpfRzisvQE= Subject key identifier: F8:2D:B5:B5:89:74:CF:2B:03:B7:6E:AB:1A:F5:61:75:7A:30:EE:F0 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 2B7B33186D36CD2116A814E1999544F02D637D1F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/1/F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 19 May 2026 18:56:59 +0000 Certificate not after: Tue 18 May 2027 19:01:59 +0000 Subordinate resources: IP: 2a13:c8c4:a000::/35 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7b:33:18:6d:36:cd:21:16:a8:14:e1:99:95:44:f0:2d:63:7d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: May 19 18:56:59 2026 GMT Not After : May 18 19:01:59 2027 GMT Subject: CN=F82DB5B58974CF2B03B76EAB1AF561757A30EEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:e3:1c:e6:2b:a9:1a:7e:c0:27:86:d3:41: e5:b6:d3:70:e5:be:ae:17:a0:95:5e:f4:a2:e2:58: e6:3b:0a:2e:4a:dd:67:36:cf:c4:f0:d4:c3:7a:ec: 3f:fd:0b:fe:d6:8a:70:01:b3:f7:67:46:ce:a3:65: a7:95:41:c3:b4:94:eb:ff:cf:7f:47:60:75:68:d5: ad:9b:49:d5:2d:6d:7f:c3:97:b1:0b:99:ff:ce:3c: c6:9c:67:9e:2e:9c:a1:a8:9e:99:c9:b4:65:2c:c2: 98:21:81:52:45:16:fa:ef:ca:78:6b:ec:73:6b:2b: b0:88:ae:da:66:09:21:2a:b7:44:92:ca:ce:5c:4f: da:f2:31:1e:dc:4e:19:56:b8:10:89:90:f0:ae:24: 92:de:20:48:91:0c:95:f1:63:b4:23:1d:04:c4:95: 47:f6:10:b6:75:f9:de:86:a4:26:88:99:88:4b:ee: 91:8b:10:69:ed:15:cc:a5:15:b9:d6:41:c7:f6:c5: af:17:15:3f:a4:25:31:2c:45:78:6f:46:d3:80:8d: 8e:04:c6:79:c5:d7:a2:5e:6b:75:85:5d:38:61:7c: de:e8:5a:9f:06:86:5a:29:68:cb:2d:7a:ec:18:b6: 13:36:40:23:b8:1b:14:3b:8d:a2:12:c3:90:84:b8: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:2D:B5:B5:89:74:CF:2B:03:B7:6E:AB:1A:F5:61:75:7A:30:EE:F0 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/1/F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:a000::/35 Signature Algorithm: sha256WithRSAEncryption 22:78:9c:03:78:de:76:2b:85:33:ea:e2:20:6f:4c:9c:db:32: 41:78:f5:5e:c3:95:35:84:59:b5:45:b7:e0:4b:f7:fe:d4:bb: 20:c8:1e:b9:f2:9e:d8:a4:cb:0d:63:ef:48:70:d0:da:df:60: 79:67:67:07:96:69:02:d0:b7:4c:6f:ff:7d:c9:09:ac:c6:f0: a6:cc:26:d4:1d:77:7a:67:d2:ec:aa:49:01:4d:f9:98:46:35: 72:13:87:6b:eb:ed:64:78:18:de:56:fc:a2:88:9b:35:ce:55: d4:1b:b4:5b:f2:fa:96:17:6d:18:59:d6:40:1a:9a:3a:07:b7: d4:cc:6f:ab:1e:bc:30:e6:21:29:70:bf:4f:1a:24:d9:56:91: 5c:62:3a:12:d1:e1:89:63:ce:f2:30:95:2a:8a:20:9d:95:ff: 4a:75:73:52:97:92:42:cf:5e:27:ff:91:cc:4d:0a:0c:43:92: 67:50:44:e5:4b:c9:63:fd:0e:d3:de:1a:d2:a3:5b:6c:ec:d0: 98:53:17:a7:bb:a1:4d:85:9a:d3:63:2b:bb:91:68:03:d7:4a: 24:0a:9f:31:83:86:12:f1:fc:2a:95:17:3f:a1:9c:19:19:28: df:df:c9:12:8a:ac:a4:22:21:89:12:96:7a:eb:1e:f8:8f:32: bc:dc:1b:3a -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUK3szGG02zSEWqBThmZVE8C1jfR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA1MTkxODU2NTlaFw0yNzA1MTgxOTAxNTlaMDMxMTAvBgNV BAMTKEY4MkRCNUI1ODk3NENGMkIwM0I3NkVBQjFBRjU2MTc1N0EzMEVFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClk+Mc5iupGn7AJ4bTQeW203Dl vq4XoJVe9KLiWOY7Ci5K3Wc2z8Tw1MN67D/9C/7WinABs/dnRs6jZaeVQcO0lOv/ z39HYHVo1a2bSdUtbX/Dl7ELmf/OPMacZ54unKGonpnJtGUswpghgVJFFvrvynhr 7HNrK7CIrtpmCSEqt0SSys5cT9ryMR7cThlWuBCJkPCuJJLeIEiRDJXxY7QjHQTE lUf2ELZ1+d6GpCaImYhL7pGLEGntFcylFbnWQcf2xa8XFT+kJTEsRXhvRtOAjY4E xnnF16Jea3WFXThhfN7oWp8GhlopaMsteuwYthM2QCO4GxQ7jaISw5CEuJ93AgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4LbW1iXTPKwO3 bqsa9WF1ejDu8DAfBgNVHSMEGDAWgBQedElGg9jSpOApqtRXOSjSpV+kETAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi80LzFFNzQ0OTQ2 ODNEOEQyQTRFMDI5QUFENDU3MzkyOEQyQTU1RkE0MTEuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS84YzdlNmQ4OC0wYjM5LTRiNjUtOTM3YS1iMTAw NDI1NDBiN2IvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhjN2U2ZDg4LTBiMzktNGI2NS05MzdhLWIx MDA0MjU0MGI3Yi8xL0Y4MkRCNUI1ODk3NENGMkIwM0I3NkVBQjFBRjU2MTc1N0Ez MEVFRjAubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSoTyMSgMA0GCSqGSIb3DQEB CwUAA4IBAQAieJwDeN52K4Uz6uIgb0yc2zJBePVew5U1hFm1RbfgS/f+1LsgyB65 8p7YpMsNY+9IcNDa32B5Z2cHlmkC0LdMb/99yQmsxvCmzCbUHXd6Z9LsqkkBTfmY RjVyE4dr6+1keBjeVvyiiJs1zlXUG7Rb8vqWF20YWdZAGpo6B7fUzG+rHrww5iEp cL9PGiTZVpFcYjoS0eGJY87yMJUqiiCdlf9KdXNSl5JCz14n/5HMTQoMQ5JnUETl S8lj/Q7T3hrSo1ts7NCYUxenu6FNhZrTYyu7kWgD10okCp8xg4YS8fwqlRc/oZwZ GSjf38kSiqykIiGJEpZ66x74jzK83Bs6 -----END CERTIFICATE-----Generated at Sat Jun 13 07:55:54 2026 by rpki-client