Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
File: AEF766F103B2EF99DF8C71978A7FE519D730B155.cer (raw, json)
Hash identifier: KldMQ09HuX3cTDcWtu1bMUWMJnf7nhQbcxJU6H228tU=
Subject key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2132798707F0A45435EF96103062EDD331877747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Manifest: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
caRepository: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Wed 25 Feb 2026 12:36:49 +0000
Certificate not after: Wed 24 Feb 2027 12:41:49 +0000
Subordinate resources: IP: 2.56.254.0/24
IP: 2.59.148.0/23
IP: 13.141.0.0/16
IP: 169.40.32.0 -- 169.40.255.255
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:32:79:87:07:f0:a4:54:35:ef:96:10:30:62:ed:d3:31:87:77:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 25 12:36:49 2026 GMT
Not After : Feb 24 12:41:49 2027 GMT
Subject: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:33:5b:a9:b8:66:f7:91:68:b6:40:40:a0:
6a:b1:84:0d:bd:f7:16:e5:76:87:2e:73:ea:f0:53:
90:be:0f:a4:7c:8b:22:15:b9:18:86:ec:26:2d:0c:
17:2f:77:3a:37:fd:09:60:43:97:c6:f4:18:12:66:
52:a1:9e:aa:3e:09:2a:22:c4:13:94:1c:97:3e:00:
32:1e:cd:38:f3:8f:3f:01:cf:81:b2:46:0b:cf:28:
2a:45:ee:32:de:3f:aa:3e:36:2a:43:bc:d0:d9:f8:
d2:b4:75:22:45:29:25:01:d5:83:86:af:6a:08:e4:
b4:eb:90:81:73:9c:b7:07:f4:bf:2b:d4:f7:17:61:
ae:b7:dc:f4:7d:05:3f:6f:0d:f0:9f:bd:93:30:47:
c7:92:c7:10:c4:13:6e:07:bd:d0:6b:d4:92:cd:a2:
61:17:83:64:74:a1:5a:16:4b:2f:21:da:28:1a:ae:
b5:08:de:a4:8d:61:f6:69:7f:14:ba:81:79:25:12:
20:b8:fb:2a:6a:19:34:96:8d:9a:4a:4e:18:55:9a:
6a:a7:91:e9:9b:ea:db:e1:81:3f:09:86:81:fe:42:
ab:1b:f8:ad:d6:d2:b1:ec:ff:db:94:63:01:23:fe:
84:70:4a:d0:bf:1e:bb:54:84:f0:fc:b6:b6:ff:2b:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.254.0/24
2.59.148.0/23
13.141.0.0/16
169.40.32.0-169.40.255.255
Signature Algorithm: sha256WithRSAEncryption
54:21:a1:8a:42:bb:72:dd:9c:2a:b8:d5:99:62:6b:dd:67:76:
c8:de:1c:49:71:0d:0b:4c:04:a0:3e:e5:bf:1f:d8:c8:4a:1b:
3d:fc:3b:96:aa:3a:a7:ba:07:5d:8f:ec:49:58:b7:4c:a6:46:
ba:ea:b0:49:13:6c:d7:43:67:61:9b:6f:3d:2a:bd:5c:a6:df:
26:67:6b:07:d2:12:3b:01:e0:c0:98:3c:9d:17:fd:c1:3b:6c:
ec:22:98:d6:24:9d:1d:6f:f0:15:73:b3:e5:82:9b:24:94:ca:
44:27:8c:82:8b:ad:a6:2f:31:d0:55:aa:b4:ed:30:33:87:b4:
a2:81:3b:e2:0d:13:1c:f4:14:12:38:65:d7:15:02:8a:a1:f6:
7e:2c:f3:5b:7f:ad:82:aa:7c:88:43:1e:8a:cf:d0:08:c1:0a:
21:90:c4:7e:28:ef:ea:a3:72:78:fb:f7:25:f3:7d:92:5f:e2:
01:ac:97:c4:98:4e:a2:08:5e:2d:38:61:97:56:b7:08:59:39:
b6:73:e5:05:14:6b:39:15:6e:79:8d:06:63:f1:c6:9a:67:db:
3a:55:8a:2a:62:8d:f4:70:dc:02:93:9b:cb:ac:99:1e:be:a5:
73:3b:f8:fb:da:cb:51:d9:25:19:cf:49:05:73:43:1a:ca:c0:
96:3a:9a:da
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIUITJ5hwfwpFQ175YQMGLt0zGHd0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMjUxMjM2NDlaFw0yNzAyMjQxMjQxNDlaMDMxMTAvBgNV
BAMTKEFFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIxNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BjNbqbhm95FotkBAoGqxhA29
9xbldocuc+rwU5C+D6R8iyIVuRiG7CYtDBcvdzo3/QlgQ5fG9BgSZlKhnqo+CSoi
xBOUHJc+ADIezTjzjz8Bz4GyRgvPKCpF7jLeP6o+NipDvNDZ+NK0dSJFKSUB1YOG
r2oI5LTrkIFznLcH9L8r1PcXYa633PR9BT9vDfCfvZMwR8eSxxDEE24HvdBr1JLN
omEXg2R0oVoWSy8h2igarrUI3qSNYfZpfxS6gXklEiC4+ypqGTSWjZpKThhVmmqn
kemb6tvhgT8JhoH+Qqsb+K3W0rHs/9uUYwEj/oRwStC/HrtUhPD8trb/K3S5AgMB
AAGjggLmMIIC4jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSu92bxA7Lvmd+M
cZeKf+UZ1zCxVTAfBgNVHSMEGDAWgBSrLcwWnJXysU3zHdJKH2cDTqd3nDAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02N2Q1LTRh
YzItYWJjNC1hMzMyNTkwYjk5YWYvNC9BQjJEQ0MxNjlDOTVGMkIxNERGMzFERDI0
QTFGNjcwMzRFQTc3NzlDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcXkzTUZw
eVY4ckZOOHgzU1NoOW5BMDZuZDV3LmNlcjCCASwGCCsGAQUFBwELBIIBHjCCARow
VgYIKwYBBQUHMAWGSnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzMw
MzI3YjllLTIyN2EtNGViZC04MjViLTNiOTgwOTVkYzkyNy0wLzAvMIGCBggrBgEF
BQcwCoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUt
MjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZGMTAzQjJFRjk5
REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1Lm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6
Ly9tYWdlbGxhbi5pcHhvLmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgME
AAI4/gMEAQI7lAMDAA2NMAsDBAWpKCADAwCpKDANBgkqhkiG9w0BAQsFAAOCAQEA
VCGhikK7ct2cKrjVmWJr3Wd2yN4cSXENC0wEoD7lvx/YyEobPfw7lqo6p7oHXY/s
SVi3TKZGuuqwSRNs10NnYZtvPSq9XKbfJmdrB9ISOwHgwJg8nRf9wTts7CKY1iSd
HW/wFXOz5YKbJJTKRCeMgoutpi8x0FWqtO0wM4e0ooE74g0THPQUEjhl1xUCiqH2
fizzW3+tgqp8iEMeis/QCMEKIZDEfijv6qNyePv3JfN9kl/iAayXxJhOogheLThh
l1a3CFk5tnPlBRRrORVueY0GY/HGmmfbOlWKKmKN9HDcApOby6yZHr6lczv4+9rL
UdklGc9JBXNDGsrAljqa2g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:44 2026 by rpki-client