Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
File: F78178425D897035E1D77343191BF013B39B03A5.cer (raw, json)
Hash identifier: MbaiFxPrNQS7WzVFE9cXnFowQyhU8T9XUPIk8S8oIgY=
Subject key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 41B6FB915475D5529497D5C3A751BA1A5B05FE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 28 Jan 2026 22:08:37 +0000
Certificate not after: Wed 27 Jan 2027 22:13:37 +0000
Subordinate resources: IP: 2a14:7581:7000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b6:fb:91:54:75:d5:52:94:97:d5:c3:a7:51:ba:1a:5b:05:fe:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 28 22:08:37 2026 GMT
Not After : Jan 27 22:13:37 2027 GMT
Subject: CN=F78178425D897035E1D77343191BF013B39B03A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:15:13:09:2a:64:df:a0:63:7d:b1:7a:cb:
dd:de:e2:55:a0:d5:1f:5b:09:52:af:55:a5:ee:39:
1d:e4:20:40:68:3a:86:fd:46:9b:77:a4:7d:0b:88:
a0:77:8f:49:bb:e3:e2:88:af:72:85:57:48:65:af:
bd:57:b2:bd:1c:69:51:bc:b0:50:eb:d2:15:26:7e:
e9:4c:f2:07:ac:67:70:46:c8:f6:fa:f7:f9:70:ec:
0d:e1:a6:d3:a3:4f:81:f6:41:1e:60:64:1c:4f:65:
87:3b:b3:90:ab:1e:ba:bc:0a:5d:b1:3c:ae:07:a2:
b5:a4:91:ba:8e:c8:22:93:aa:59:e0:44:20:1f:93:
3e:fc:43:d6:73:bb:56:c6:06:e2:c7:16:a2:a5:2b:
2e:34:94:80:95:67:61:e0:45:b6:44:eb:e7:b8:00:
7e:46:30:85:f4:10:78:44:2c:07:2d:e7:6d:34:22:
b5:0d:93:de:c3:41:b0:09:4c:7d:cf:ad:aa:39:46:
1a:0d:c6:9a:44:ea:a3:03:15:39:4d:f9:10:78:69:
7c:78:d7:fd:e8:59:22:45:04:68:9f:a3:96:50:f4:
99:78:98:d8:39:c1:db:9a:c9:66:a5:a1:46:b2:f5:
37:5e:9a:a4:e7:f9:17:e5:e1:3b:a4:bd:3e:b1:44:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7000::/36
Signature Algorithm: sha256WithRSAEncryption
71:1e:db:05:95:f4:16:38:b9:7a:3c:74:50:00:e5:58:66:37:
17:d6:24:2c:95:40:5c:cb:86:ac:15:0b:0a:22:a1:34:1f:37:
65:33:a9:76:3b:da:6c:d4:f0:e0:51:43:1c:bd:e0:88:7a:d4:
87:b7:e1:c0:dc:6f:14:4a:70:4c:b0:b6:ed:7e:90:af:4c:9d:
39:b6:d5:fe:cf:b0:e5:b0:1e:4e:22:81:0c:a3:5c:a8:51:22:
01:44:4f:5b:a3:1b:44:bc:35:ad:41:b5:35:3a:46:71:0c:ac:
88:5c:20:8d:60:51:ec:c2:14:9c:36:91:42:21:1d:50:68:46:
62:1d:a6:66:ed:d7:3e:34:02:c4:11:6c:23:f6:6a:eb:01:7d:
70:c4:72:71:61:4d:e5:8c:7b:93:cc:40:70:bd:5a:87:b1:f7:
2e:2a:49:88:f8:89:12:92:a8:df:ad:f3:62:02:a6:71:1b:29:
e3:d4:a4:5a:0b:dc:8a:4e:94:b7:b2:1e:46:fe:8a:9f:4d:99:
cc:d7:e8:c6:4f:e6:d6:ce:6f:9c:2e:b5:3f:5b:cc:87:d0:6c:
68:ab:6b:3f:ea:83:bb:c3:83:e1:ed:9c:ea:35:fb:24:d9:ab:
e4:67:27:91:62:24:00:c1:88:f4:29:c1:de:f1:37:61:92:79:
0a:b0:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:25 2026 by rpki-client