Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer (raw, json)
Hash identifier: U5NI8mNcSnozwb6/OWPhXFOUZvA1pYOQuL9B3xPWJeE=
Subject key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 60B63D1A65CE453B2BB9CEF1C77E6275AB6829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 12 Jun 2026 15:51:22 +0000
Certificate not after: Fri 11 Jun 2027 15:56:22 +0000
Subordinate resources: IP: 2a14:7580:f300::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b6:3d:1a:65:ce:45:3b:2b:b9:ce:f1:c7:7e:62:75:ab:68:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 12 15:51:22 2026 GMT
Not After : Jun 11 15:56:22 2027 GMT
Subject: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:75:cb:9b:50:1c:89:9c:a5:fd:9d:b5:ed:
4b:9c:f5:6d:86:32:6f:43:cb:f0:00:91:83:b8:6c:
6e:48:e4:2e:e5:ad:e0:e7:05:0b:c6:76:6d:ff:29:
af:70:82:c4:b2:e9:ee:e1:eb:30:6a:17:e5:0d:cb:
c7:21:ef:b1:b8:d4:aa:16:0c:dd:14:b2:e5:61:66:
59:40:20:9c:fa:31:06:c9:b5:bc:21:ce:89:a5:a3:
c5:11:ea:12:92:98:2e:5c:c9:2e:d4:4e:a0:ad:53:
4c:50:88:f6:11:c5:db:4e:eb:d1:8e:be:ae:05:b1:
76:b9:ae:fe:7c:a8:15:9f:ba:5b:f9:08:b8:98:2b:
8b:94:81:dd:66:25:2f:37:38:92:e3:c4:05:7e:c8:
3f:67:24:01:76:c7:0e:9d:84:48:6a:bf:fa:f9:7a:
6e:86:c6:d9:1c:fe:d8:46:cb:cf:d3:d1:4d:15:7b:
d4:fa:bb:50:25:27:3c:07:91:ac:59:4c:47:1f:08:
92:4a:92:f1:47:d7:c3:52:5b:0d:c3:40:bb:6d:3b:
0e:08:a8:30:fd:a0:9b:81:2f:7e:f0:f3:85:de:0d:
61:72:a6:4b:ad:4e:4b:1c:65:62:88:0e:00:fa:96:
7e:ee:f7:a5:13:9b:e5:80:66:44:be:95:8c:6c:93:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f300::/40
Signature Algorithm: sha256WithRSAEncryption
23:6e:aa:f8:69:28:10:10:aa:87:77:50:dc:a9:73:18:89:30:
3f:89:6d:91:51:6c:96:9c:9c:d4:f1:7f:d6:57:15:4e:a6:f1:
4e:27:12:ae:f4:30:48:ff:d3:cb:05:5c:52:23:6f:f7:bc:36:
53:c5:5e:12:b0:f7:a6:54:60:14:23:57:68:b2:f6:58:2a:1a:
3d:0f:ba:c7:80:e9:c8:a6:aa:ec:2a:7f:a3:a3:b3:16:99:af:
ec:0c:8a:68:08:42:6b:a5:ae:3c:4f:c7:d9:ef:db:2f:6d:97:
74:22:11:3b:94:cd:21:ee:c0:34:e4:7c:dc:f1:aa:b4:5e:02:
95:a6:97:97:c3:80:25:f6:c5:9d:7e:72:5a:02:18:07:da:d2:
c3:e0:95:d9:db:5a:c5:46:04:74:d4:9b:20:d8:69:c0:bf:5e:
5a:81:bc:63:da:21:77:ab:bc:06:49:56:0f:72:3e:ba:25:73:
b7:89:c8:d0:6a:95:c5:9c:39:fb:8e:ec:62:02:94:31:0c:77:
57:ce:94:34:8b:2b:41:18:1d:fb:b6:1d:d3:b5:0f:58:1c:63:
7e:94:f4:d2:5b:fa:7d:d2:1c:e6:10:ac:4b:43:60:9c:5a:f1:
1e:fa:67:61:52:a0:b1:cd:96:be:3f:79:fd:43:f8:60:5e:84:
6b:f3:9d:67
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgITYLY9GmXORTsruc7xx35idatoKTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhhODNkNDg2NTJmM2IyZGY3NGY2YmY5YmFhOGE5YzE3NGNj
ZmQzNzcyMB4XDTI2MDYxMjE1NTEyMloXDTI3MDYxMTE1NTYyMlowMzExMC8GA1UE
AxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMoHdcubUByJnKX9nbXtS5z1bYYy
b0PL8ACRg7hsbkjkLuWt4OcFC8Z2bf8pr3CCxLLp7uHrMGoX5Q3LxyHvsbjUqhYM
3RSy5WFmWUAgnPoxBsm1vCHOiaWjxRHqEpKYLlzJLtROoK1TTFCI9hHF207r0Y6+
rgWxdrmu/nyoFZ+6W/kIuJgri5SB3WYlLzc4kuPEBX7IP2ckAXbHDp2ESGq/+vl6
bobG2Rz+2EbLz9PRTRV71Pq7UCUnPAeRrFlMRx8IkkqS8UfXw1JbDcNAu207Dgio
MP2gm4EvfvDzhd4NYXKmS61OSxxlYogOAPqWfu73pROb5YBmRL6VjGyTRGMCAwEA
AaOCAuMwggLfMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFPQAcv/cDxsVpp5b
x5ovWIz5OfT0MB8GA1UdIwQYMBaAFKg9SGUvOy33T2v5uqipwXTM/TdyMA4GA1Ud
DwEB/wQEAwIBBjCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5j
LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5
OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0E4M0Q0ODY1MkYzQjJERjc0RjZCRjlCQUE4
QTlDMTc0Q0NGRDM3NzIuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZI
cnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9xRDFJWlM4
N0xmZFBhX202cUtuQmRNejlOM0kuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBf
BggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8w
gYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8w
L0Y0MDA3MkZGREMwRjFCMTVBNjlFNUJDNzlBMkY1ODhDRjkzOUY0RjQubWZ0MDwG
CCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlm
aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGACoUdYDzMA0GCSqGSIb3DQEBCwUAA4IBAQAjbqr4
aSgQEKqHd1DcqXMYiTA/iW2RUWyWnJzU8X/WVxVOpvFOJxKu9DBI/9PLBVxSI2/3
vDZTxV4SsPemVGAUI1dosvZYKho9D7rHgOnIpqrsKn+jo7MWma/sDIpoCEJrpa48
T8fZ79svbZd0IhE7lM0h7sA05Hzc8aq0XgKVppeXw4Al9sWdfnJaAhgH2tLD4JXZ
21rFRgR01Jsg2GnAv15agbxj2iF3q7wGSVYPcj66JXO3icjQapXFnDn7juxiApQx
DHdXzpQ0iytBGB37th3TtQ9YHGN+lPTSW/p90hzmEKxLQ2CcWvEe+mdhUqCxzZa+
P3n9Q/hgXoRr851n
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:35:34 2026 by rpki-client