Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
File: 60D5CF86368D32D8BD736410814916DA300E83CF.cer (raw, json)
Hash identifier: h9K1/FoQIn4IQ+Pj55UDAEkL6w9NDH2w/iYJJkzSELI=
Subject key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 039EE6A060DAFC40E6FF95B3ABBA8A532FCF213E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 11 Sep 2026 07:34:27 +0000
Certificate not after: Fri 10 Sep 2027 07:39:27 +0000
Subordinate resources: IP: 152.237.224.0/19
IP: 177.177.226.0 -- 177.177.255.255
IP: 186.241.160.0/19
IP: 201.4.16.0/20
IP: 201.50.16.0/20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9e:e6:a0:60:da:fc:40:e6:ff:95:b3:ab:ba:8a:53:2f:cf:21:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 07:34:27 2026 GMT
Not After : Sep 10 07:39:27 2027 GMT
Subject: CN=60D5CF86368D32D8BD736410814916DA300E83CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:1f:ca:d0:94:b1:2f:7d:52:f6:7a:55:57:
5e:3f:1e:dd:dd:71:ca:8d:e0:e0:31:fd:ac:a0:82:
c6:9a:4b:20:5c:95:22:0e:b3:e3:22:18:c8:d8:a1:
b3:89:cc:f9:37:6e:08:ec:3a:59:00:85:86:69:f8:
53:b8:1d:e5:aa:39:66:98:e5:08:ac:ce:ff:08:0f:
4a:d7:ab:1d:88:37:8f:cf:ff:da:4f:db:e4:b5:ff:
c8:49:6c:6a:61:3b:2c:e2:33:cb:04:a0:1a:5d:ad:
f9:a2:02:a3:ee:a1:1f:d3:d5:1c:60:73:b3:72:75:
c7:8d:b0:fe:51:53:ef:43:84:2d:39:d8:5d:19:e8:
0e:16:1e:29:f7:43:95:d6:fb:53:ae:94:04:08:97:
2c:d0:1f:fc:b7:3e:b5:37:22:bf:f9:d7:09:a1:d9:
34:1c:fe:8c:83:6c:af:0e:6b:29:4f:e8:e0:7f:50:
5f:0e:30:9b:6c:c3:6d:e6:b0:e1:1d:08:5a:d1:fc:
35:53:2a:11:df:d0:e3:da:23:5f:59:a5:dc:e8:99:
d4:72:21:7d:cc:19:79:e8:63:91:04:e8:c8:be:70:
20:e2:00:c7:56:ab:20:af:40:62:a4:39:4c:91:2b:
a5:75:ba:88:8e:73:03:c2:ab:22:bf:01:1c:5f:ed:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.224.0/19
177.177.226.0-177.177.255.255
186.241.160.0/19
201.4.16.0/20
201.50.16.0/20
Signature Algorithm: sha256WithRSAEncryption
91:03:61:b7:ee:bd:92:a0:e1:83:43:61:4f:a3:41:ab:13:0d:
2f:bd:24:bb:69:13:14:8e:c4:37:a5:05:d8:97:d4:46:34:8b:
80:b4:2d:5f:a9:9b:01:c9:66:9b:02:a4:76:f3:bb:25:ba:ed:
e8:b8:e1:a1:de:91:71:23:89:74:e3:c0:62:74:9f:2b:8b:3e:
41:69:6f:c1:5e:69:fe:07:63:4e:be:dd:5d:88:15:fc:d5:0c:
fb:d7:9d:0f:4b:b0:9c:22:72:cf:d7:bb:e5:26:30:28:bc:35:
53:b4:20:cb:08:a2:a9:3d:81:c8:1b:00:55:85:f4:e4:3c:11:
90:ab:4d:81:08:08:a1:c9:b4:50:8c:8f:bd:6a:2a:c0:14:d7:
d6:2c:35:21:08:38:f6:6a:47:28:61:4e:a6:ea:38:42:62:d6:
b9:5e:d1:41:e7:45:a7:71:7a:6c:2f:87:77:ce:1f:bc:9c:ff:
fc:16:b8:d6:1e:83:a0:7b:ee:4d:6d:6e:05:9f:26:d3:5c:b1:
2f:91:6b:c7:6b:00:c3:4b:30:00:3a:0b:c4:ba:2b:30:61:c0:
fc:b7:ec:32:d9:6d:04:c5:58:22:4a:c7:eb:2e:59:99:d1:d7:
c7:b0:e1:e3:9c:28:01:eb:7c:1f:f6:25:20:5c:02:0b:88:49:
05:53:89:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:41 2026 by rpki-client