$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer File: AD29F7F191997039ACFD9760F915FEE62892E578.cer (raw, json) Hash identifier: b1a3Jjh6OCqVQv3BFg0/BsI0AK5ATcpf4fi1Bo5nYzQ= Subject key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 32145B77ABB2B3152449428ADB8A3DC3E6B81EFC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 08 Sep 2026 11:59:16 +0000 Certificate not after: Tue 07 Sep 2027 12:04:16 +0000 Subordinate resources: IP: 2a0a:d685:100:: -- 2a0a:d685:2ff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 02:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:14:5b:77:ab:b2:b3:15:24:49:42:8a:db:8a:3d:c3:e6:b8:1e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Sep 8 11:59:16 2026 GMT Not After : Sep 7 12:04:16 2027 GMT Subject: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:2f:2d:ad:8b:a8:14:98:5f:e8:a8:a2:ab: 33:be:4d:fb:da:ee:ff:78:f9:10:c6:2d:eb:58:37: 9d:5b:98:a2:cb:45:8b:e4:ce:a7:61:06:cb:bb:72: 12:e0:d8:1e:4f:1f:10:bd:4b:2c:db:b5:8e:c4:a3: ba:18:30:ed:44:25:60:c3:48:d2:26:53:80:3a:a8: e1:50:86:7b:5c:c8:5b:44:45:2a:87:71:fa:21:c1: 43:e1:ff:41:64:c2:fa:db:70:71:f8:e5:b9:99:b9: b9:ea:93:95:1b:70:21:5f:3c:af:f7:cc:9a:31:8a: 34:5b:0e:bb:4d:31:65:21:d5:8c:c7:76:75:0c:25: 9a:25:17:bb:a9:0d:0a:a1:26:6f:fb:03:19:30:c8: b0:07:d3:ad:4a:10:f9:c5:a6:ce:c1:01:d2:df:53: ce:fc:ce:ff:6a:f7:53:0a:a5:20:bb:97:c2:09:88: e5:73:ca:17:d5:69:87:e7:8b:ee:55:b0:86:47:ca: b1:04:d8:9e:26:e0:f1:17:c9:09:6f:58:93:2c:af: 4e:07:39:32:f5:dc:6a:c5:44:80:69:c8:a0:03:6a: 0e:10:10:fe:33:a4:2a:0d:ef:9e:e5:3b:18:4a:6e: d2:19:52:16:58:0b:e9:86:a6:41:79:9a:08:3c:49: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:100::-2a0a:d685:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption af:05:5b:86:6f:07:e1:43:6e:21:e7:f1:e8:9a:df:ef:e4:7a: 1d:81:66:8d:c0:a6:40:af:bc:84:05:3f:f8:bf:32:ff:5e:24: 44:16:e0:84:13:bc:b2:73:43:81:f6:58:2b:e1:b8:4e:52:66: 5c:77:c2:4a:e6:cc:c0:d1:95:7e:79:e4:2b:f1:91:2c:c4:91: c5:eb:54:da:a8:51:77:b9:c6:b7:a1:77:ae:82:1d:0c:05:00: d7:02:ae:49:42:af:38:4f:0c:73:26:9e:b0:75:e3:bf:4b:a5: 7a:78:98:5e:46:3a:c2:67:44:09:4f:4f:06:e6:3f:9f:45:40: e1:52:e1:b5:ff:b2:b7:dc:27:b1:69:41:88:7a:79:45:dc:20: 03:53:40:45:30:5b:70:b7:4a:5a:70:05:ea:0c:ad:9f:f2:9e: 70:a2:af:7f:2e:d5:8d:c7:82:98:8f:f3:ed:1f:29:d2:f4:a2: 34:3b:84:bc:c4:68:37:ba:e7:fd:be:74:f5:55:af:97:a6:c6: 65:c4:59:5f:06:1a:ee:7a:13:8a:86:d5:64:1f:b8:81:a0:92: 5a:34:d8:dc:aa:41:cb:b9:91:11:37:ee:e1:0a:a2:f4:98:c4: 4f:de:36:d9:0c:2d:d5:03:09:8f:32:16:52:5a:8c:69:5f:fb: 85:3c:fa:1c -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgIUMhRbd6uysxUkSUKK24o9w+a4HvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjA5MDgxMTU5MTZaFw0yNzA5MDcxMjA0MTZaMDMxMTAvBgNV BAMTKEFEMjlGN0YxOTE5OTcwMzlBQ0ZEOTc2MEY5MTVGRUU2Mjg5MkU1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoui8trYuoFJhf6KiiqzO+Tfva 7v94+RDGLetYN51bmKLLRYvkzqdhBsu7chLg2B5PHxC9SyzbtY7Eo7oYMO1EJWDD SNImU4A6qOFQhntcyFtERSqHcfohwUPh/0FkwvrbcHH45bmZubnqk5UbcCFfPK/3 zJoxijRbDrtNMWUh1YzHdnUMJZolF7upDQqhJm/7AxkwyLAH061KEPnFps7BAdLf U878zv9q91MKpSC7l8IJiOVzyhfVaYfni+5VsIZHyrEE2J4m4PEXyQlvWJMsr04H OTL13GrFRIBpyKADag4QEP4zpCoN757lOxhKbtIZUhZYC+mGpkF5mgg8SYhTAgMB AAGjggMoMIIDJDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStKffxkZlwOaz9 l2D5Ff7mKJLleDAfBgNVHSMEGDAWgBQjihGuJFNX5y/rOXhce8A6lzpE4TAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzIzOEExMUFF MjQ1MzU3RTcyRkVCMzk3ODVDN0JDMDNBOTczQTQ0RTEuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1 ODI4ZTM2OTUvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2QyNTUwY2FhLWUzOTItNDg0OC05MmZiLWEz ZDU4MjhlMzY5NS8xL0FEMjlGN0YxOTE5OTcwMzlBQ0ZEOTc2MEY5MTVGRUU2Mjg5 MkU1NzgubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEjAQAwYAKgrWhQEDBgAqCtaFAjAN BgkqhkiG9w0BAQsFAAOCAQEArwVbhm8H4UNuIefx6Jrf7+R6HYFmjcCmQK+8hAU/ +L8y/14kRBbghBO8snNDgfZYK+G4TlJmXHfCSubMwNGVfnnkK/GRLMSRxetU2qhR d7nGt6F3roIdDAUA1wKuSUKvOE8McyaesHXjv0uleniYXkY6wmdECU9PBuY/n0VA 4VLhtf+yt9wnsWlBiHp5RdwgA1NARTBbcLdKWnAF6gytn/KecKKvfy7VjceCmI/z 7R8p0vSiNDuEvMRoN7rn/b509VWvl6bGZcRZXwYa7noTiobVZB+4gaCSWjTY3KpB y7mRETfu4Qqi9JjET9422Qwt1QMJjzIWUlqMaV/7hTz6HA== -----END CERTIFICATE-----Generated at Mon Sep 21 16:09:10 2026 by rpki-client