$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer File: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (raw, json) Hash identifier: hjMiN5NA4RDFhIFmGTRUJv0QKbxVbSoKkWLb1JxBiHE= Subject key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 1081100A71469CEB6995E8BA52606223B2DCC861 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 19 Oct 2026 23:57:25 +0000 Certificate not after: Tue 19 Oct 2027 00:02:25 +0000 Subordinate resources: IP: 2a06:1283:8900::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 13:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:81:10:0a:71:46:9c:eb:69:95:e8:ba:52:60:62:23:b2:dc:c8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Oct 19 23:57:25 2026 GMT Not After : Oct 19 00:02:25 2027 GMT Subject: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:e2:9a:04:da:56:e4:42:45:2a:3f:3e:b9: 27:83:7e:fa:11:8d:e5:77:4b:cd:a5:03:cc:ed:43: 41:bb:c2:6a:36:57:ba:24:1d:23:dd:88:bc:7f:e2: 11:38:cb:5a:a3:97:c8:6c:90:12:b2:5c:e7:bc:94: e2:96:4a:74:55:79:97:13:2e:44:59:c9:0e:55:fa: b2:51:5d:ff:c0:5a:8e:b7:ab:c2:e9:85:2d:e2:3c: cd:8d:73:ba:85:88:92:17:93:6f:f6:d1:1b:9a:d6: 67:e2:da:af:98:42:58:0f:e3:c1:d1:34:86:cc:4c: 33:6a:75:54:4e:69:85:9f:aa:42:a9:a5:d6:10:be: 2d:dc:3d:fc:f0:f4:40:ee:b7:85:e1:f8:07:bc:4a: 0f:8e:31:ac:bd:bf:ad:88:5a:0b:cb:9a:90:b3:78: 1e:1a:55:cc:44:ef:c0:de:12:4d:1e:34:31:ca:f3: bf:5f:04:31:c6:6b:68:c4:b0:a1:b1:67:89:d6:29: 1a:f4:7b:8c:bf:bb:4b:cf:0a:70:db:67:53:42:c2: 54:dd:a5:34:24:3f:54:86:53:bb:35:eb:a2:f0:79: b3:22:d9:f1:d9:29:84:d4:8e:a9:09:0f:94:f9:f8: a7:fd:32:75:b5:1d:04:33:16:ce:3e:06:6d:d5:b7: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8900::/40 Signature Algorithm: sha256WithRSAEncryption 21:ba:6a:e3:76:c2:f4:20:a1:de:47:fd:0b:58:be:cd:0f:68: b8:8b:5a:58:e6:54:28:dd:98:4b:ea:8d:ca:6f:3b:67:90:10: 4e:a6:8f:80:34:22:40:b6:06:b8:af:21:ef:8c:17:65:5f:03: 91:95:f1:c1:5c:82:5b:0b:e4:84:1b:fd:94:34:f7:71:95:d0: 45:74:6c:67:bc:62:38:31:82:6e:b9:38:a1:9e:a2:cc:8c:bf: 45:a9:96:bc:0d:1d:96:0e:6a:5a:e8:4a:78:b9:ba:4e:ee:12: 44:37:e4:a0:b5:81:af:ba:cb:bd:23:7e:2c:72:4c:52:af:21: cd:ec:a2:67:6b:73:43:1e:8d:4f:0a:78:00:80:e3:c1:50:bb: f5:8e:d8:bf:a1:c3:4d:f4:ea:cd:b6:0d:ef:0d:fc:82:3d:d6: 1d:c7:86:53:77:3f:5e:28:e4:99:0d:5e:00:3d:fa:32:c0:46: 50:a2:c6:8c:50:cf:a4:1a:a9:f7:67:3a:29:f8:22:40:b8:18: 89:04:3f:ba:af:53:4f:40:b3:f4:d4:2b:92:b3:45:90:4b:9f: 38:88:bc:5e:86:d3:f0:cc:f5:fa:30:b6:3a:6a:01:fb:e8:da: 4d:2e:b0:a8:42:75:fe:14:b0:c5:88:59:0d:c3:df:13:0f:02: 43:f6:17:6d -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUEIEQCnFGnOtplei6UmBiI7LcyGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjEwMTkyMzU3MjVaFw0yNzEwMTkwMDAyMjVaMDMxMTAvBgNV BAMTKDVGQkJEMEYzRDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+eKaBNpW5EJFKj8+uSeDfvoR jeV3S82lA8ztQ0G7wmo2V7okHSPdiLx/4hE4y1qjl8hskBKyXOe8lOKWSnRVeZcT LkRZyQ5V+rJRXf/AWo63q8LphS3iPM2Nc7qFiJIXk2/20Rua1mfi2q+YQlgP48HR NIbMTDNqdVROaYWfqkKppdYQvi3cPfzw9EDut4Xh+Ae8Sg+OMay9v62IWgvLmpCz eB4aVcxE78DeEk0eNDHK879fBDHGa2jEsKGxZ4nWKRr0e4y/u0vPCnDbZ1NCwlTd pTQkP1SGU7s166LwebMi2fHZKYTUjqkJD5T5+Kf9MnW1HQQzFs4+Bm3Vt7FjAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfu9Dz17geiv2Z 5aNLZ4NN080TyTAfBgNVHSMEGDAWgBTVTUQ7Z8HMXqG1RG6gZDysOnqLLDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS80L0Q1NEQ0NDNC NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYw MzUzZjY5NDIvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1 NjAzNTNmNjk0Mi8xLzVGQkJEMEYzRDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDND RDEzQzkubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoGEoOJMA0GCSqGSIb3DQEB CwUAA4IBAQAhumrjdsL0IKHeR/0LWL7ND2i4i1pY5lQo3ZhL6o3KbztnkBBOpo+A NCJAtga4ryHvjBdlXwORlfHBXIJbC+SEG/2UNPdxldBFdGxnvGI4MYJuuTihnqLM jL9FqZa8DR2WDmpa6Ep4ubpO7hJEN+SgtYGvusu9I34sckxSryHN7KJna3NDHo1P CngAgOPBULv1jti/ocNN9OrNtg3vDfyCPdYdx4ZTdz9eKOSZDV4APfoywEZQosaM UM+kGqn3Zzop+CJAuBiJBD+6r1NPQLP01CuSs0WQS584iLxehtPwzPX6MLY6agH7 6NpNLrCoQnX+FLDFiFkNw98TDwJD9hdt -----END CERTIFICATE-----Generated at Sat Oct 24 03:18:56 2026 by rpki-client