Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer (raw, json)
Hash identifier: pGIApjmaMi0Zu2z9S7aYSTFNkkL7aFhyAZFBuq5zd+c=
Subject key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2D64C40D4C3ECF3E75F2FA357440378D5C7506DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 28 Feb 2026 23:20:06 +0000
Certificate not after: Sat 27 Feb 2027 23:25:06 +0000
Subordinate resources: IP: 2a14:7580:f300::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:64:c4:0d:4c:3e:cf:3e:75:f2:fa:35:74:40:37:8d:5c:75:06:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 28 23:20:06 2026 GMT
Not After : Feb 27 23:25:06 2027 GMT
Subject: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:75:cb:9b:50:1c:89:9c:a5:fd:9d:b5:ed:
4b:9c:f5:6d:86:32:6f:43:cb:f0:00:91:83:b8:6c:
6e:48:e4:2e:e5:ad:e0:e7:05:0b:c6:76:6d:ff:29:
af:70:82:c4:b2:e9:ee:e1:eb:30:6a:17:e5:0d:cb:
c7:21:ef:b1:b8:d4:aa:16:0c:dd:14:b2:e5:61:66:
59:40:20:9c:fa:31:06:c9:b5:bc:21:ce:89:a5:a3:
c5:11:ea:12:92:98:2e:5c:c9:2e:d4:4e:a0:ad:53:
4c:50:88:f6:11:c5:db:4e:eb:d1:8e:be:ae:05:b1:
76:b9:ae:fe:7c:a8:15:9f:ba:5b:f9:08:b8:98:2b:
8b:94:81:dd:66:25:2f:37:38:92:e3:c4:05:7e:c8:
3f:67:24:01:76:c7:0e:9d:84:48:6a:bf:fa:f9:7a:
6e:86:c6:d9:1c:fe:d8:46:cb:cf:d3:d1:4d:15:7b:
d4:fa:bb:50:25:27:3c:07:91:ac:59:4c:47:1f:08:
92:4a:92:f1:47:d7:c3:52:5b:0d:c3:40:bb:6d:3b:
0e:08:a8:30:fd:a0:9b:81:2f:7e:f0:f3:85:de:0d:
61:72:a6:4b:ad:4e:4b:1c:65:62:88:0e:00:fa:96:
7e:ee:f7:a5:13:9b:e5:80:66:44:be:95:8c:6c:93:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f300::/40
Signature Algorithm: sha256WithRSAEncryption
83:58:0d:c2:b2:72:fa:74:0e:b2:e4:45:73:b9:e8:4e:57:fd:
e8:d3:81:f4:be:cd:83:a1:05:dd:31:6e:fa:d1:16:f4:0a:0e:
fb:e1:8e:bf:15:32:7d:d1:81:1f:21:5a:a0:2d:66:48:bf:49:
36:26:e0:bf:78:03:c1:81:1e:32:2b:19:d1:82:66:1e:22:be:
79:ac:55:2d:a9:1b:54:4f:cf:df:ba:17:e2:75:6c:85:b3:8e:
c4:0b:2f:79:42:86:7d:ba:26:5a:be:67:ad:89:8a:69:33:77:
aa:c7:64:e2:ca:6e:9f:dd:a2:08:94:71:3e:86:67:3a:5f:4b:
db:c0:81:23:7b:c0:c2:02:9f:79:9f:3d:ca:f0:30:c5:03:9a:
73:a4:cf:b8:d0:53:ef:8a:47:db:c3:97:b6:29:a9:13:45:3f:
06:0b:89:20:94:b4:b6:2a:8e:ff:52:9f:d7:b2:23:81:93:49:
a4:5a:df:e6:c3:3b:95:3d:4e:93:c3:07:d7:84:6d:b4:63:60:
d1:63:76:0f:d4:cc:b0:49:8d:91:fd:07:47:a2:fc:df:57:03:
e4:45:3d:0c:70:da:e7:44:fe:47:b2:0a:4d:5d:7d:c3:3d:96:
c6:ae:9e:d1:e9:bb:32:98:d4:23:cb:15:3c:7b:48:dc:8e:04:
11:34:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:09 2026 by rpki-client