Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
File: CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer (raw, json)
Hash identifier: JI++IWBD+h+we8w/CwhIrprQOKXDpPdNYlWuVSjImWA=
Subject key identifier: CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 5B13D5D588C74A8BA1A555D75DE06AEDA81CEF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Wed 20 May 2026 13:18:31 +0000
Certificate not after: Wed 19 May 2027 13:23:31 +0000
Subordinate resources: IP: 2a11:f2c0:ffe4::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:13:d5:d5:88:c7:4a:8b:a1:a5:55:d7:5d:e0:6a:ed:a8:1c:ef:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 20 13:18:31 2026 GMT
Not After : May 19 13:23:31 2027 GMT
Subject: CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:cd:15:db:89:9a:87:b2:ad:69:58:e5:dc:
46:a3:5b:a5:1c:93:39:e2:43:43:14:26:ca:ca:4f:
53:c4:05:4d:2d:5d:86:9f:68:ad:3e:06:e9:c3:0b:
8f:0e:99:b1:4f:25:3b:02:40:33:0d:95:23:a5:a2:
d6:da:b7:dc:4a:7e:08:71:e7:a6:15:cd:3a:bd:f7:
00:b0:c8:dc:db:bd:5d:34:d6:90:30:ec:aa:59:7b:
98:f3:ba:f8:bc:11:fe:6a:12:e0:72:41:9d:08:60:
a0:43:91:b9:14:a9:db:7d:b8:05:35:86:31:97:cf:
c4:86:7e:30:6d:36:82:3c:80:57:d6:34:5f:19:57:
63:9f:80:44:0c:c2:e3:6a:d7:43:3b:77:39:c7:4d:
2e:c6:54:e7:46:92:fb:46:db:3a:3a:ab:2a:cb:37:
75:ed:74:38:e0:96:63:2e:d6:5c:dc:b6:a1:fd:6b:
fa:f9:53:57:04:45:2d:c0:f8:14:ca:d5:32:12:25:
0c:a5:28:88:a0:75:5c:d8:07:f2:73:1d:ae:56:e6:
97:1f:3d:75:05:2f:c3:b6:1d:fa:b0:60:49:de:cb:
20:26:7b:18:aa:10:f8:da:90:84:7b:24:20:70:e0:
23:fb:8d:67:7f:8e:2b:89:7d:40:9b:13:56:b1:dc:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe4::/48
Signature Algorithm: sha256WithRSAEncryption
20:9f:2b:b9:be:5a:ab:d5:a2:04:83:8b:30:8e:8f:5b:f0:e5:
96:8c:f8:ed:2b:24:36:54:21:f8:e9:e7:ec:1f:92:e1:fd:b9:
3c:ad:d2:70:4f:fc:7d:2a:54:7a:22:27:0f:6e:a9:7a:54:9e:
9a:33:c3:1a:26:2d:d4:17:77:44:7b:1c:6c:bb:db:d1:9a:5e:
ef:ef:32:1b:c6:06:7d:b3:31:c6:eb:ec:23:56:e1:7a:68:a7:
14:97:3b:94:80:d0:88:53:97:79:d1:ca:a9:38:ac:23:6a:de:
49:32:1c:8f:31:04:55:bc:67:9e:e3:e6:07:0e:b3:b0:35:b7:
0d:b9:66:2a:ae:26:23:9b:57:7c:ef:bc:86:b7:aa:02:42:3a:
06:d6:0f:9c:f3:f8:e1:3f:a6:0e:0c:44:6e:91:0b:18:b0:6a:
c7:94:d5:cd:42:c5:79:da:34:48:7f:8d:bf:8b:0e:78:b5:f6:
db:14:e2:ae:9d:9c:be:5d:b4:81:c3:77:c8:af:e3:59:19:b4:
f7:ff:5c:13:91:43:d4:50:9e:d9:82:d3:fb:a0:ad:dd:d9:ce:
a2:76:2d:8c:b4:d6:de:c5:0c:32:b4:06:4c:32:8b:e3:71:87:
6b:ff:78:90:fc:4c:8d:70:9f:2e:bb:f8:98:47:9d:a3:d4:f5:
ec:f0:c5:a8
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUWxPV1YjHSouhpVXXXeBq7agc704wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNjA1MjAxMzE4MzFaFw0yNzA1MTkxMzIzMzFaMDMxMTAvBgNV
BAMTKENENkJGNEFGQTI0MTIzMEVDNTgzQkREQTM5N0VGRENBNjMyODQ0MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABM0V24mah7KtaVjl3EajW6Uc
kzniQ0MUJsrKT1PEBU0tXYafaK0+BunDC48OmbFPJTsCQDMNlSOlotbat9xKfghx
56YVzTq99wCwyNzbvV001pAw7KpZe5jzuvi8Ef5qEuByQZ0IYKBDkbkUqdt9uAU1
hjGXz8SGfjBtNoI8gFfWNF8ZV2OfgEQMwuNq10M7dznHTS7GVOdGkvtG2zo6qyrL
N3XtdDjglmMu1lzctqH9a/r5U1cERS3A+BTK1TISJQylKIigdVzYB/JzHa5W5pcf
PXUFL8O2HfqwYEneyyAmexiqEPjakIR7JCBw4CP7jWd/jiuJfUCbE1ax3FMhAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNa/SvokEjDsWD
vdo5fv3KYyhEFDAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfODJkNWYzODQ0OWU5NDJhOWE5YWIyODE4MDA1NmFiZmMvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzgyZDVmMzg0NDllOTQyYTlhOWFiMjgxODAwNTZhYmZjLzAvQ0Q2QkY0
QUZBMjQxMjMwRUM1ODNCRERBMzk3RUZEQ0E2MzI4NDQxNC5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA/+QwDQYJKoZIhvcNAQELBQADggEBACCfK7m+WqvVogSD
izCOj1vw5ZaM+O0rJDZUIfjp5+wfkuH9uTyt0nBP/H0qVHoiJw9uqXpUnpozwxom
LdQXd0R7HGy729GaXu/vMhvGBn2zMcbr7CNW4XpopxSXO5SA0IhTl3nRyqk4rCNq
3kkyHI8xBFW8Z57j5gcOs7A1tw25ZiquJiObV3zvvIa3qgJCOgbWD5zz+OE/pg4M
RG6RCxiwaseU1c1CxXnaNEh/jb+LDni19tsU4q6dnL5dtIHDd8iv41kZtPf/XBOR
Q9RQntmC0/ugrd3ZzqJ2LYy01t7FDDK0Bkwyi+Nxh2v/eJD8TI1wny67+JhHnaPU
9ezwxag=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:24 2026 by rpki-client