Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer (raw, json)
Hash identifier: nYzfmzaphk0+Y9seJ/aR2hahUtPsCp3/WKTm4vWKmes=
Subject key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 57C4BEE618BFCF27114CEC3CF7CEE41B8E57E2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 01 Mar 2026 11:20:42 +0000
Certificate not after: Sun 28 Feb 2027 11:25:42 +0000
Subordinate resources: IP: 2a14:7580:d00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:c4:be:e6:18:bf:cf:27:11:4c:ec:3c:f7:ce:e4:1b:8e:57:e2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 1 11:20:42 2026 GMT
Not After : Feb 28 11:25:42 2027 GMT
Subject: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:20:3e:3b:64:8b:16:1e:23:c3:fe:3b:54:
ab:36:f6:ea:b0:d1:3c:97:f0:81:b5:8d:74:e1:23:
b1:02:cb:75:ad:71:b1:53:b5:7e:68:a8:d2:b2:2d:
77:4d:bf:0f:4e:42:1e:0f:42:e6:d9:f0:6a:af:bd:
b6:3f:2f:4a:17:22:80:56:01:e9:90:5f:31:c3:29:
66:c4:a5:82:fd:29:22:4f:fd:49:77:92:d8:95:0f:
c2:08:fc:10:ff:29:db:0e:5e:4b:05:22:d3:37:9d:
79:48:43:4e:43:23:1e:d3:47:c5:1c:27:01:43:b9:
a8:82:f9:c6:29:ef:d7:05:e4:4e:e1:ee:84:6c:4d:
bc:e3:b2:bb:d5:2c:cf:6e:6f:c6:18:33:dd:61:61:
0b:e0:45:40:90:c5:9a:f5:bc:7c:6f:65:cf:93:49:
70:22:74:08:37:98:4b:18:33:a3:74:70:33:a6:de:
c5:39:bb:e5:8a:78:2d:bf:63:10:99:d2:78:cc:06:
89:a4:dd:26:c0:b5:e6:b9:9c:9a:3d:8b:37:f7:03:
5c:f0:f1:eb:03:11:a1:9f:fc:18:0a:f3:23:02:4c:
1d:2c:5f:a1:f9:66:07:9a:de:7e:3b:5f:06:32:59:
d1:d7:aa:e7:25:19:7a:5d:5b:97:f6:a6:b7:a2:9f:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:d00::/40
Signature Algorithm: sha256WithRSAEncryption
68:86:24:92:da:d4:f6:b2:93:4d:e9:ab:de:a0:b7:3d:b0:f5:
ce:a4:6c:63:8f:b4:b8:95:00:3f:c2:f3:db:d7:4e:87:bb:c3:
78:b6:a5:7c:75:23:da:cf:a2:7c:a0:10:7c:36:b9:ba:39:04:
97:7e:03:b8:d3:e2:54:46:a6:0f:2f:eb:3e:2c:db:2a:3b:11:
03:76:ea:f1:5f:6b:7a:37:79:88:4a:5c:85:d9:ef:9a:fb:2c:
20:e3:0d:74:cf:cb:3a:4d:e3:c4:64:bb:d7:3e:d4:0f:7d:2c:
5a:4d:e9:27:22:92:40:83:1d:88:ef:25:de:01:aa:cb:fc:6f:
c8:b9:68:09:6a:c0:a0:9c:84:39:b9:97:f7:31:63:3b:a4:94:
4a:79:0a:14:c6:c2:48:41:04:06:fc:e5:96:5b:9f:23:f3:db:
12:79:ff:e3:d2:1d:38:5b:e8:99:86:b1:10:a2:76:f1:77:54:
36:1a:2d:6a:0c:f6:b2:9b:3c:a5:f9:74:c6:d8:1e:e2:73:4c:
06:97:3f:d6:b2:d2:44:a2:9b:db:c1:2f:84:9e:6f:02:2d:d5:
12:39:fb:07:64:2f:c8:b5:c1:20:26:52:be:5e:f8:2a:5a:9f:
03:c9:88:6a:37:9b:e9:5b:ba:ee:aa:f8:7a:5a:e7:16:c2:e8:
b9:96:42:71
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUV8S+5hi/zycRTOw8987kG45X4qowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjAzMDExMTIwNDJaFw0yNzAyMjgxMTI1NDJaMDMxMTAvBgNV
BAMTKDEzRTFBOTk4Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2SA+O2SLFh4jw/47VKs29uqw
0TyX8IG1jXThI7ECy3WtcbFTtX5oqNKyLXdNvw9OQh4PQubZ8GqvvbY/L0oXIoBW
AemQXzHDKWbEpYL9KSJP/Ul3ktiVD8II/BD/KdsOXksFItM3nXlIQ05DIx7TR8Uc
JwFDuaiC+cYp79cF5E7h7oRsTbzjsrvVLM9ub8YYM91hYQvgRUCQxZr1vHxvZc+T
SXAidAg3mEsYM6N0cDOm3sU5u+WKeC2/YxCZ0njMBomk3SbAtea5nJo9izf3A1zw
8esDEaGf/BgK8yMCTB0sX6H5Zgea3n47XwYyWdHXquclGXpdW5f2prein4DTAgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQT4amY9318H/KV
XAtoj+v+D4GW6zAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFmYWIyLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8wMTU3NjQ3Yy05MWQ2LTRhMDQtOGE5MS1kMTUzODVkMWZhYjIv
MS8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2ODhGRUJGRTBGODE5NkVCLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqFHWADTANBgkqhkiG9w0BAQsFAAOCAQEAaIYk
ktrU9rKTTemr3qC3PbD1zqRsY4+0uJUAP8Lz29dOh7vDeLalfHUj2s+ifKAQfDa5
ujkEl34DuNPiVEamDy/rPizbKjsRA3bq8V9rejd5iEpchdnvmvssIOMNdM/LOk3j
xGS71z7UD30sWk3pJyKSQIMdiO8l3gGqy/xvyLloCWrAoJyEObmX9zFjO6SUSnkK
FMbCSEEEBvzlllufI/PbEnn/49IdOFvomYaxEKJ28XdUNhotagz2sps8pfl0xtge
4nNMBpc/1rLSRKKb28EvhJ5vAi3VEjn7B2QvyLXBICZSvl74KlqfA8mIajeb6Vu6
7qr4elrnFsLouZZCcQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:39:03 2026 by rpki-client