Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer (raw, json)
Hash identifier: dYjn0iuDvhotsJ90//3qtrQGarNf3rs8zVxZnPjhi6M=
Subject key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 744DE27BFEA935902AE8AB3C994AA20225D6BAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 19 Sep 2026 18:23:37 +0000
Certificate not after: Sat 18 Sep 2027 18:28:37 +0000
Subordinate resources: IP: 2a14:7581:f40::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4d:e2:7b:fe:a9:35:90:2a:e8:ab:3c:99:4a:a2:02:25:d6:ba:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 19 18:23:37 2026 GMT
Not After : Sep 18 18:28:37 2027 GMT
Subject: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:5e:f6:a5:af:28:66:6f:83:ca:18:12:d3:
a5:e7:e2:d3:ef:c0:f2:64:7a:18:a6:10:79:ad:1f:
47:e7:6f:70:44:5b:e1:55:c7:9c:24:58:a3:a8:44:
d1:b2:88:11:94:5f:5f:54:83:7d:bd:20:91:d3:34:
16:27:c0:5b:ac:0b:47:d6:f6:4b:b5:9c:7b:9f:51:
d7:05:ca:fa:f0:15:4b:d6:66:98:68:db:c8:b1:5a:
9f:84:d5:80:c1:70:09:06:a2:98:d8:3f:b6:d3:2e:
df:06:33:3d:b0:78:f1:59:af:fd:1d:1c:08:59:52:
6b:04:cc:19:b1:a8:49:d8:c9:99:78:3b:3e:8d:70:
a3:71:64:03:51:fc:40:29:ff:96:14:5a:10:05:2e:
bb:30:c6:f8:c4:15:5c:20:a0:54:f3:00:22:6a:1a:
ea:31:f9:78:ca:31:cc:0d:a8:b4:20:cc:a8:90:5e:
a2:b3:d1:75:15:21:1b:f2:38:ad:81:c1:df:49:0b:
e9:eb:b5:e5:4c:bf:53:0b:91:42:00:c2:09:af:b7:
a3:e1:b7:f6:9f:89:7c:1d:fd:4a:86:47:38:58:06:
43:36:a5:1f:43:41:9f:35:94:f0:a9:68:a7:c3:8b:
f1:d2:b9:ae:af:4c:4e:43:96:da:0f:a1:63:76:d1:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f40::/44
Signature Algorithm: sha256WithRSAEncryption
5a:68:84:fa:7b:8e:23:eb:65:b3:18:d3:be:0e:40:4f:89:df:
9a:b4:1d:60:7c:2a:0c:4f:e7:70:24:10:9b:a1:34:28:bf:5c:
fc:1f:86:a4:5b:39:0d:37:78:e1:c4:67:c9:df:03:c4:48:66:
1f:20:be:eb:58:c7:9f:46:23:43:04:66:be:17:cb:1b:93:b3:
45:56:0d:66:db:ca:bf:44:24:6a:d3:d2:e4:06:08:fd:43:7d:
0f:52:cb:99:c8:7b:3b:81:41:46:fb:c5:93:6c:04:48:c0:bb:
57:fe:c9:e7:32:ad:e0:be:dc:c9:b5:0c:9c:35:0c:86:b6:52:
c5:a2:c3:44:7e:97:77:75:14:a9:62:45:ad:d0:e3:23:63:db:
db:c8:e3:fe:19:d8:58:24:55:b1:ce:8a:52:68:1b:8d:eb:c8:
a8:86:e0:b4:a7:98:32:49:e9:3d:37:dc:67:d6:dd:1d:7e:8b:
d0:45:3e:33:29:36:0a:a2:40:cf:6e:fe:59:90:b2:d9:f7:c8:
a7:c3:5a:be:b0:1e:85:98:03:5a:b3:79:a1:b1:df:83:31:d9:
61:65:bc:45:8a:76:17:38:63:45:67:44:fb:02:e1:59:10:51:
67:96:db:17:0e:03:88:a1:92:b8:b7:56:cc:79:6b:e3:dd:61:
90:59:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:40:15 2026 by rpki-client