Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
File: C972E8671DEDC43FE908B548531C969A051CD34C.cer (raw, json)
Hash identifier: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=
Subject key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 5DBB83070279A57233112209A826F274CDD74F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Manifest: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
caRepository: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Mon 23 Feb 2026 14:54:59 +0000
Certificate not after: Mon 22 Feb 2027 14:59:59 +0000
Subordinate resources: IP: 81.22.128.0/20
IP: 89.185.0.0/22
IP: 89.185.22.0 -- 89.185.31.255
IP: 109.72.112.0 -- 109.72.121.255
IP: 109.72.123.0 -- 109.72.127.255
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:bb:83:07:02:79:a5:72:33:11:22:09:a8:26:f2:74:cd:d7:4f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 23 14:54:59 2026 GMT
Not After : Feb 22 14:59:59 2027 GMT
Subject: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:54:f9:02:be:22:4b:fb:6b:29:6a:09:a9:
42:b4:b6:23:c9:35:35:92:7f:bb:e9:1d:00:1d:23:
5c:70:f7:f5:1a:70:fc:6f:f8:c9:54:2f:18:1f:95:
32:3a:41:a6:0a:da:68:c6:88:e6:35:8b:d2:e5:18:
57:ed:62:e8:8b:34:a2:4c:39:94:30:52:9f:49:2b:
0c:40:f1:41:12:af:be:73:a1:f7:2c:0b:6f:18:60:
de:6b:fd:f9:cd:f1:5b:db:79:33:d6:b3:e2:a5:a7:
3d:77:ad:8c:0e:55:4f:d9:c2:2d:00:47:e2:6f:8a:
75:b2:69:2c:6e:d6:97:70:9b:df:5c:be:e9:44:3f:
08:d4:e9:bd:b1:b2:ce:4c:cb:34:dd:ef:66:a9:6f:
6f:e4:70:87:33:68:4b:72:23:93:7a:19:7e:de:36:
b7:80:ac:e5:5c:19:c9:d0:ac:c5:e4:bb:65:fc:a0:
73:71:9e:6e:b0:1f:a5:9d:f0:4e:16:a6:c3:3d:66:
63:00:e8:05:c7:28:44:a5:00:b9:0b:01:69:d5:44:
25:26:61:65:5b:f6:27:c6:a3:eb:b7:11:a6:b3:96:
21:d5:14:b9:89:28:2c:3b:ac:4f:02:78:f4:ae:fa:
f7:4c:41:08:8f:89:b6:e2:4c:c7:85:52:f2:0e:69:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/20
89.185.0.0/22
89.185.22.0-89.185.31.255
109.72.112.0-109.72.121.255
109.72.123.0-109.72.127.255
Signature Algorithm: sha256WithRSAEncryption
88:f2:9e:d4:77:44:32:6a:e8:8d:3f:7c:99:7a:b3:02:56:b5:
5f:14:4f:df:90:7d:76:6c:a1:ea:f1:53:b6:75:cc:92:36:73:
53:63:54:fa:2c:7c:54:ab:f6:b2:a4:32:71:13:09:5a:c6:44:
b1:9c:2b:cf:36:5f:de:25:24:7d:d5:ef:3b:88:b3:30:06:21:
b9:d9:39:58:93:cc:50:08:f6:16:44:41:82:2a:1b:15:00:03:
2d:56:33:c9:c6:1f:33:0a:0a:44:75:b3:ac:8b:49:82:24:b5:
d6:93:05:31:a4:3d:dd:43:09:bf:f4:a9:b2:17:0b:34:12:c1:
72:69:96:cc:4f:9a:ee:85:16:bf:d3:d0:77:24:01:cd:91:50:
e3:95:81:ed:c2:e1:43:d1:33:b3:17:45:cc:0c:f0:5c:7f:b4:
74:6b:55:07:17:ef:63:0f:fc:7e:ed:90:10:ef:05:4a:92:cf:
54:a8:57:29:ea:15:c5:64:02:f2:41:0a:24:6b:55:fa:42:c3:
92:41:bf:f1:29:af:cb:88:50:7d:9e:ad:a3:8c:e0:e2:95:fb:
6a:30:0c:98:b6:31:ad:a3:3c:b1:4c:1c:5a:42:cb:ef:ef:ae:
ea:b1:8d:f6:3c:12:12:dc:cc:6d:f1:3d:63:c4:ad:de:35:d3:
2e:45:6d:76
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIUXbuDBwJ5pXIzESIJqCbydM3XTyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4
Mzg2NTdhMzAeFw0yNjAyMjMxNDU0NTlaFw0yNzAyMjIxNDU5NTlaMDMxMTAvBgNV
BAMTKEM5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0QzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Q1T5Ar4iS/trKWoJqUK0tiPJ
NTWSf7vpHQAdI1xw9/UacPxv+MlULxgflTI6QaYK2mjGiOY1i9LlGFftYuiLNKJM
OZQwUp9JKwxA8UESr75zofcsC28YYN5r/fnN8VvbeTPWs+Klpz13rYwOVU/Zwi0A
R+JvinWyaSxu1pdwm99cvulEPwjU6b2xss5MyzTd72apb2/kcIczaEtyI5N6GX7e
NreArOVcGcnQrMXku2X8oHNxnm6wH6Wd8E4WpsM9ZmMA6AXHKESlALkLAWnVRCUm
YWVb9ifGo+u3EaazliHVFLmJKCw7rE8CePSu+vdMQQiPibbiTMeFUvIOablZAgMB
AAGjggL+MIIC+jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJcuhnHe3EP+kI
tUhTHJaaBRzTTDAfBgNVHSMEGDAWgBTPBjHTOjydxcRUJNVcPnZjg4ZXozAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02YzNhLTQw
YTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1NDI0RDU1
QzNFNzY2MzgzODY1N0EzLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvendZeDB6
bzhuY1hFVkNUVlhENTJZNE9HVjZNLmNlcjCCASwGCCsGAQUFBwELBIIBHjCCARow
VgYIKwYBBQUHMAWGSnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2Rk
ZDE4MThiLTlmYmYtNDQwYy1hYWVjLTQ0YTRkMTU5MGY4Ny0wLzAvMIGCBggrBgEF
BQcwCoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGRkMTgxOGIt
OWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2NzFERURDNDNG
RTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6
Ly9tYWdlbGxhbi5pcHhvLmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRAMD4wPAQCAAEwNgME
BFEWgAMEAlm5ADAMAwQBWbkWAwQFWbkAMAwDBARtSHADBAFtSHgwDAMEAG1IewME
B21IADANBgkqhkiG9w0BAQsFAAOCAQEAiPKe1HdEMmrojT98mXqzAla1XxRP35B9
dmyh6vFTtnXMkjZzU2NU+ix8VKv2sqQycRMJWsZEsZwrzzZf3iUkfdXvO4izMAYh
udk5WJPMUAj2FkRBgiobFQADLVYzycYfMwoKRHWzrItJgiS11pMFMaQ93UMJv/Sp
shcLNBLBcmmWzE+a7oUWv9PQdyQBzZFQ45WB7cLhQ9EzsxdFzAzwXH+0dGtVBxfv
Yw/8fu2QEO8FSpLPVKhXKeoVxWQC8kEKJGtV+kLDkkG/8Smvy4hQfZ6to4zg4pX7
ajAMmLYxraM8sUwcWkLL7++u6rGN9jwSEtzMbfE9Y8St3jXTLkVtdg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:33 2026 by rpki-client