Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer
File: 75F554161E3D1197F4F9B22E7171E99E87BEB830.cer (raw, json)
Hash identifier: f3bMSvopwymgbJ56OuAIEAMfpgZI7KPSeOWAeIXrsA4=
Subject key identifier: 75:F5:54:16:1E:3D:11:97:F4:F9:B2:2E:71:71:E9:9E:87:BE:B8:30
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 19538AE6FD601CBABF84FFCC3BFB1706E5C85FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 09 Feb 2026 02:15:45 +0000
Certificate not after: Mon 08 Feb 2027 02:20:45 +0000
Subordinate resources: IP: 2a14:7580:9000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:53:8a:e6:fd:60:1c:ba:bf:84:ff:cc:3b:fb:17:06:e5:c8:5f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 9 02:15:45 2026 GMT
Not After : Feb 8 02:20:45 2027 GMT
Subject: CN=75F554161E3D1197F4F9B22E7171E99E87BEB830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:ef:ca:a3:a0:af:d1:89:91:65:19:f3:fe:
26:56:a4:14:41:ae:16:5d:ce:5d:25:5a:5e:37:c3:
64:ec:84:0e:b5:2f:84:5e:13:d0:7a:9b:e5:40:87:
cf:a8:14:39:b5:ce:29:3e:db:bc:2e:c0:d5:6a:5b:
82:af:55:55:65:04:98:08:b9:64:82:9b:94:1d:5c:
6c:4c:db:47:99:fd:9b:83:f3:55:64:da:f7:c5:16:
f2:9f:fb:0b:a4:8f:29:8b:da:a8:f6:6d:83:8c:45:
e3:63:f7:76:67:89:01:23:7f:f9:4e:f8:7a:bc:50:
9c:3d:7a:5a:41:f8:4e:fc:e8:81:9a:72:11:37:d3:
bc:c1:71:b8:64:29:4a:5a:6e:b7:c8:ed:de:51:d0:
9b:0c:83:01:a5:72:aa:04:e4:02:e5:98:39:13:58:
60:d3:2c:46:ee:c1:3e:67:11:32:24:6f:18:4b:1d:
1f:db:5a:c3:31:9b:22:fb:ef:89:47:64:fb:9f:d1:
6f:3e:2d:17:59:5f:d1:d5:87:84:68:c3:c3:50:e2:
a5:3a:9d:7c:4f:d1:0f:72:ce:86:a6:0e:c6:4b:e5:
ad:f5:d7:c7:4e:84:b1:b5:4d:a3:ec:4d:89:fc:4c:
79:b7:3a:4f:34:0c:bb:90:3d:27:f1:aa:0c:36:2a:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
75:F5:54:16:1E:3D:11:97:F4:F9:B2:2E:71:71:E9:9E:87:BE:B8:30
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:9000::/36
Signature Algorithm: sha256WithRSAEncryption
25:e0:1a:44:58:3e:71:8c:0d:84:66:c1:fa:f1:0e:6f:2e:44:
6c:29:71:65:df:2e:30:19:e6:22:60:8b:92:77:2f:29:53:f9:
50:2d:33:f9:45:0c:ba:a6:02:a6:2b:49:37:f1:82:43:fa:ac:
37:f0:24:fb:ef:a4:27:ee:29:25:a5:1a:9f:51:98:b4:fa:72:
8d:4c:12:99:8d:07:70:5e:3d:33:af:f0:73:92:da:96:23:8e:
a8:34:e0:b8:5a:8f:33:21:df:f4:0e:7e:9f:b6:47:42:8e:c1:
24:44:b5:ca:e8:a0:37:c0:99:c7:9e:e5:8c:28:c6:08:ee:7a:
00:dd:2e:f5:a5:19:9c:08:e1:3f:b0:38:f1:7e:29:ee:6a:65:
70:59:a8:b1:cb:f8:39:cb:51:53:f5:24:8f:31:e1:af:c1:58:
da:a3:11:25:ff:4f:e1:61:c8:5c:93:c5:cd:fd:95:a1:86:a0:
40:8b:4b:9f:f0:b8:79:f9:16:7f:b5:34:6b:f0:52:6c:b0:2a:
43:58:7b:5f:70:a3:01:ce:81:e2:8d:6e:f4:0e:2f:b3:63:c5:
a1:3a:db:2e:f7:1a:06:0f:bc:f4:81:d5:e2:ed:44:22:5f:a4:
04:4a:47:e3:13:23:87:2b:89:6f:dc:f2:d7:57:5f:cf:7b:ff:
34:f5:75:7d
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUGVOK5v1gHLq/hP/MO/sXBuXIX94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjAyMDkwMjE1NDVaFw0yNzAyMDgwMjIwNDVaMDMxMTAvBgNV
BAMTKDc1RjU1NDE2MUUzRDExOTdGNEY5QjIyRTcxNzFFOTlFODdCRUI4MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4O/Ko6Cv0YmRZRnz/iZWpBRB
rhZdzl0lWl43w2TshA61L4ReE9B6m+VAh8+oFDm1zik+27wuwNVqW4KvVVVlBJgI
uWSCm5QdXGxM20eZ/ZuD81Vk2vfFFvKf+wukjymL2qj2bYOMReNj93ZniQEjf/lO
+Hq8UJw9elpB+E786IGachE307zBcbhkKUpabrfI7d5R0JsMgwGlcqoE5ALlmDkT
WGDTLEbuwT5nETIkbxhLHR/bWsMxmyL774lHZPuf0W8+LRdZX9HVh4Row8NQ4qU6
nXxP0Q9yzoamDsZL5a3118dOhLG1TaPsTYn8THm3Ok80DLuQPSfxqgw2Kk+NAgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR19VQWHj0Rl/T5
si5xcemeh764MDAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0OWI4LzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS83MjdiNWVmNy1kMTIxLTRhZTItYmFiNi00MTBkMjA1MzQ5Yjgv
MS83NUY1NTQxNjFFM0QxMTk3RjRGOUIyMkU3MTcxRTk5RTg3QkVCODMwLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWAkDANBgkqhkiG9w0BAQsFAAOCAQEAJeAa
RFg+cYwNhGbB+vEOby5EbClxZd8uMBnmImCLkncvKVP5UC0z+UUMuqYCpitJN/GC
Q/qsN/Ak+++kJ+4pJaUan1GYtPpyjUwSmY0HcF49M6/wc5LaliOOqDTguFqPMyHf
9A5+n7ZHQo7BJES1yuigN8CZx57ljCjGCO56AN0u9aUZnAjhP7A48X4p7mplcFmo
scv4OctRU/UkjzHhr8FY2qMRJf9P4WHIXJPFzf2VoYagQItLn/C4efkWf7U0a/BS
bLAqQ1h7X3CjAc6B4o1u9A4vs2PFoTrbLvcaBg+89IHV4u1EIl+kBEpH4xMjhyuJ
b9zy11dfz3v/NPV1fQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:41 2026 by rpki-client