Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer
File: D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer (raw, json)
Hash identifier: Q2vhZWloe/hFTaW+/yQJuXwBq/8isuRI5XNeSyWobfQ=
Subject key identifier: D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 5DB77280B0010DD48ECD4958DCA0FF80C4572C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Manifest: rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.mft
caRepository: rsync://rpki.cc/repo/networkservices/1/
Notify URL: https://rpki.cc/rrdp/notification.xml
Certificate not before: Mon 02 Feb 2026 17:43:41 +0000
Certificate not after: Mon 01 Feb 2027 17:48:41 +0000
Subordinate resources: IP: 2a14:6f45::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b7:72:80:b0:01:0d:d4:8e:cd:49:58:dc:a0:ff:80:c4:57:2c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Feb 2 17:43:41 2026 GMT
Not After : Feb 1 17:48:41 2027 GMT
Subject: CN=D7C7075EDD2768C681D7419F3A12E49EA69B5976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:91:e5:b5:ee:68:4c:1c:6a:6c:ee:cc:e7:
0b:59:39:cb:e9:be:be:33:8e:f2:c2:8a:d0:32:73:
2f:13:00:86:5d:1a:33:d4:1d:3f:e1:bf:77:ff:f0:
4e:7b:10:15:65:78:79:9c:38:2e:9e:1c:33:42:75:
95:e7:75:d3:a3:a8:d0:9e:00:f5:b6:44:03:b7:27:
01:42:2c:34:6f:aa:44:d6:2c:c5:a4:70:83:02:33:
ba:e5:c3:18:be:f7:63:89:95:1f:75:e7:dc:9d:c3:
79:c1:72:3c:e8:de:67:84:c1:e3:60:3e:ac:33:ed:
89:fd:9d:e1:37:a2:ee:cc:99:d8:b0:15:b7:12:d0:
3b:d3:20:d5:ea:e2:62:89:1e:23:47:54:7c:8e:1e:
ed:fc:54:e3:dd:32:1a:9b:de:6d:20:c7:aa:d5:68:
c3:97:2c:91:15:d4:e8:d8:c9:1f:6c:ca:d8:ec:d4:
aa:84:a5:73:c3:4c:88:e1:72:3a:63:b0:9f:27:f3:
20:0d:91:0e:c9:89:51:a2:ec:8a:f6:93:c1:19:0b:
75:82:eb:b3:d4:00:7e:0c:f3:d5:44:5e:a9:5c:55:
0f:cf:af:f6:66:8c:10:e6:3e:5f:ed:e2:f1:90:be:
76:02:69:39:88:63:13:2e:2e:f1:6f:df:20:96:25:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.cc/repo/networkservices/1/
RPKI Manifest - URI:rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.mft
RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45::/36
Signature Algorithm: sha256WithRSAEncryption
0d:09:fb:96:ce:d6:c1:70:01:f6:4a:ad:3e:57:0a:a6:40:13:
30:60:8f:6b:27:c2:3f:44:1d:02:fc:69:aa:f5:8a:0f:48:43:
b9:74:07:91:20:a1:d7:de:29:fe:a0:83:d2:3f:ec:05:19:86:
4d:43:70:4a:bc:33:44:cb:fb:d6:eb:22:6b:70:62:54:a5:d7:
2e:a2:9b:0c:93:23:f5:af:9f:4e:3b:c3:02:43:36:7b:3b:df:
56:64:27:9b:5a:b8:f7:dd:13:4f:14:b7:26:b0:0d:29:f1:c4:
8e:4e:de:5b:ea:e2:75:e5:e5:1e:1e:b3:18:30:ee:fb:77:b4:
ee:1c:9f:23:84:d3:13:2d:f5:b8:e4:94:cb:29:52:8a:10:8e:
d9:41:5d:1f:3c:9d:77:c5:42:5d:f2:56:be:04:2b:d9:0f:77:
a2:a4:b4:79:04:5c:1d:5e:74:9e:60:67:d4:bb:3f:3c:63:54:
a5:99:50:39:ab:a3:a8:31:5d:10:d4:91:ea:64:65:c6:6b:43:
ac:00:7d:d3:e2:09:7c:35:15:94:81:8d:75:c4:ce:d0:60:95:
01:d2:2e:fb:f3:56:f4:b5:50:12:58:6c:78:5c:07:f6:e6:54:
68:0d:e8:24:15:87:c7:15:7f:e1:e4:f6:f2:26:dc:ce:36:17:
fb:17:ca:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:39 2026 by rpki-client