Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (raw, json)
Hash identifier: wpdOSr6wb1B5p911Qa1PmNux8g1stpcpdfynkPskNSo=
Subject key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 4A7E6ABB4CC8ADC32EC624C916ECCBCE400DD0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 11 Apr 2026 02:19:27 +0000
Certificate not after: Sat 10 Apr 2027 02:24:27 +0000
Subordinate resources: IP: 2a14:1ec0::/31
IP: 2a14:1ec7:c000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 16:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7e:6a:bb:4c:c8:ad:c3:2e:c6:24:c9:16:ec:cb:ce:40:0d:d0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Apr 11 02:19:27 2026 GMT
Not After : Apr 10 02:24:27 2027 GMT
Subject: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:46:cc:ab:ac:d8:e2:7a:cd:2d:15:da:58:
3c:17:21:3e:52:a0:34:73:5f:c6:a9:ca:c9:8a:14:
0b:24:e1:62:bb:3f:ae:14:63:e3:76:e5:4c:79:74:
d2:24:e7:ba:5c:19:e0:7f:78:fe:87:e7:67:98:12:
39:c3:e0:9c:da:60:60:0c:ca:e5:87:6c:02:5d:3c:
49:c1:c2:57:cc:3c:4e:b4:7a:a2:c9:4d:f4:4d:c1:
6c:21:a0:b4:d9:74:91:ed:f0:46:bf:b0:80:36:c9:
f6:62:d5:20:e8:28:2d:49:d3:f5:db:03:f0:9e:27:
c8:d4:bf:f9:b5:24:63:6b:d0:35:15:34:c1:f8:54:
bb:ef:de:f2:25:66:b1:de:fd:8e:9f:a4:89:18:fd:
47:99:1b:9f:69:4c:70:9e:cd:79:be:f4:21:72:7e:
38:bc:33:6b:f5:85:fe:bc:1d:89:5a:da:ef:20:4e:
d1:f5:44:74:ec:4c:d2:c8:10:5b:f7:0c:65:e1:0b:
ee:9b:68:13:8d:4d:38:74:5b:28:e6:fd:ee:f8:fb:
7e:01:5a:08:77:3e:4b:67:57:ef:89:bf:18:b0:76:
da:b0:3b:79:67:aa:02:ad:b6:e1:f1:2a:a7:9a:a1:
86:dc:80:77:e6:ff:b6:3c:f6:5a:3c:a6:9a:8c:e5:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec0::/31
2a14:1ec7:c000::/36
Signature Algorithm: sha256WithRSAEncryption
87:4f:16:17:03:53:c0:53:28:3d:f4:16:96:d5:b4:61:94:fb:
83:e2:e0:51:7a:ed:df:e2:19:7b:85:dc:d4:02:13:cb:43:15:
24:d4:87:62:61:c0:ed:b8:a4:d3:60:54:ae:de:35:4c:b9:e0:
ae:05:c4:e5:b8:e1:2d:0c:7e:33:38:7b:5c:ca:7d:d1:18:2f:
68:3e:38:14:62:13:8f:cd:9d:d9:8c:b6:89:07:23:6d:ba:70:
53:8c:e5:d6:93:cb:39:7f:d1:cc:a5:e6:fc:2f:33:89:d1:a8:
7b:cc:68:a6:97:c5:a6:27:3b:ad:01:ed:33:73:b4:a5:8e:7e:
4b:c1:95:46:bc:33:3e:38:2c:e5:ea:b6:00:42:72:79:6d:c4:
48:69:4c:65:b4:b3:d8:7c:df:9b:0d:3e:a0:a7:b2:c9:8b:2c:
b8:a0:38:1c:80:13:c8:a6:fb:6c:2e:c6:39:8a:67:72:1c:8b:
50:7a:29:eb:6d:8e:a4:da:48:39:80:ed:f4:82:7a:25:fa:3e:
d3:28:c1:f1:dd:03:c8:47:e2:b4:fc:11:1b:33:f8:06:3f:00:
90:24:84:e8:c9:52:3e:4d:60:8a:c7:57:30:00:2a:6c:a6:15:
44:94:3d:d1:a5:0f:c3:a7:af:68:99:2b:6a:10:6a:d0:c2:01:
da:21:03:69
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIUSn5qu0zIrcMuxiTJFuzLzkAN0LkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNjA0MTEwMjE5MjdaFw0yNzA0MTAwMjI0MjdaMDMxMTAvBgNV
BAMTKDIwRjY5QzRDMTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYnEbMq6zY4nrNLRXaWDwXIT5S
oDRzX8apysmKFAsk4WK7P64UY+N25Ux5dNIk57pcGeB/eP6H52eYEjnD4JzaYGAM
yuWHbAJdPEnBwlfMPE60eqLJTfRNwWwhoLTZdJHt8Ea/sIA2yfZi1SDoKC1J0/Xb
A/CeJ8jUv/m1JGNr0DUVNMH4VLvv3vIlZrHe/Y6fpIkY/UeZG59pTHCezXm+9CFy
fji8M2v1hf68HYla2u8gTtH1RHTsTNLIEFv3DGXhC+6baBONTTh0Wyjm/e74+34B
Wgh3PktnV++JvxiwdtqwO3lnqgKttuHxKqeaoYbcgHfm/7Y89lo8ppqM5SrpAgMB
AAGjggLqMIIC5jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQg9pxMFGE4ywEh
xMTLs5h29KvexjAfBgNVHSMEGDAWgBQxNO6YfgjYtVg/7vYhoDFQxPNUNDAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj
N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgzRkVFRjYy
MUEwMzE1MEM0RjM1NDM0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvTVRUdW1I
NEkyTFZZUC03MklhQXhVTVR6VkRRLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzAv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkv
MC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRDQkIzOTg3NkY0QUJERUM2Lm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKAYIKwYBBQUH
AQcBAf8EGTAXMBUEAgACMA8DBQEqFB7AAwYEKhQex8AwDQYJKoZIhvcNAQELBQAD
ggEBAIdPFhcDU8BTKD30FpbVtGGU+4Pi4FF67d/iGXuF3NQCE8tDFSTUh2JhwO24
pNNgVK7eNUy54K4FxOW44S0MfjM4e1zKfdEYL2g+OBRiE4/NndmMtokHI226cFOM
5daTyzl/0cyl5vwvM4nRqHvMaKaXxaYnO60B7TNztKWOfkvBlUa8Mz44LOXqtgBC
cnltxEhpTGW0s9h835sNPqCnssmLLLigOByAE8im+2wuxjmKZ3Ici1B6KettjqTa
SDmA7fSCeiX6PtMowfHdA8hH4rT8ERsz+AY/AJAkhOjJUj5NYIrHVzAAKmymFUSU
PdGlD8Onr2iZK2oQatDCAdohA2k=
-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:00 2026 by rpki-client