Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer
File: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer (raw, json)
Hash identifier: s0HXeXBvQLUgro4znKPantpcTxJGpMKpvFn+GA0jwlM=
Subject key identifier: 3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 3DA9DF86C245BFEF200ED309D7BB5F199FAC74CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Wed 29 Apr 2026 17:18:19 +0000
Certificate not after: Wed 28 Apr 2027 17:23:19 +0000
Subordinate resources: IP: 2a11:f2c0:ffe3::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a9:df:86:c2:45:bf:ef:20:0e:d3:09:d7:bb:5f:19:9f:ac:74:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Apr 29 17:18:19 2026 GMT
Not After : Apr 28 17:23:19 2027 GMT
Subject: CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bb:ea:d1:3a:13:f9:69:19:f4:06:f9:52:96:
8a:56:04:50:e1:5e:6d:0f:ae:f0:62:0b:2b:b1:2f:
89:60:96:83:29:e5:66:28:79:71:5c:65:60:6f:33:
2b:a3:72:4f:e0:5a:2a:c2:5f:b0:74:d3:fc:d4:0d:
92:74:26:c9:ff:b9:5b:92:cc:11:3a:fe:ab:a4:2c:
ac:72:4f:16:da:08:ee:74:b0:09:ce:9e:bd:87:7e:
66:3a:cd:0b:19:be:af:04:b1:37:bb:72:ce:80:e9:
85:09:0f:1d:a1:ff:f9:00:47:3b:a1:ac:82:f1:8a:
ac:08:35:69:38:d6:49:06:44:5a:31:fe:80:e1:5f:
ee:f2:0b:9f:e8:66:1e:bc:d4:4e:54:62:f1:9c:08:
89:10:24:f4:93:6f:8a:ce:6e:44:08:19:f2:09:4e:
d7:e8:64:ee:13:38:d5:53:af:58:40:5e:16:6f:ab:
be:7b:b2:9f:97:35:e6:c9:f6:cf:bd:47:63:08:ab:
18:55:a3:01:ca:46:30:05:f6:72:4b:92:92:7e:3f:
bb:2c:b6:e4:20:32:81:62:3c:10:66:97:e3:58:f5:
d6:3f:0b:58:6e:25:8f:b8:cb:8f:71:4e:5a:11:89:
81:8b:ac:35:06:2f:04:04:03:ff:90:01:31:30:10:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe3::/48
Signature Algorithm: sha256WithRSAEncryption
a1:63:0d:b2:83:d3:6f:21:c3:41:e8:c3:9e:9a:df:06:10:d6:
16:19:48:ef:ca:fa:23:74:1e:40:21:cb:ea:92:f6:76:50:6a:
72:6f:a9:ec:16:b9:28:db:57:23:1b:a4:54:14:aa:9f:40:df:
22:0a:ab:57:52:70:b3:f0:64:b8:cb:57:c1:ae:60:99:5b:3f:
f3:da:cd:13:8e:2d:72:9b:2f:97:58:4f:20:6a:d4:9c:72:cc:
b8:af:bc:7c:be:ea:e1:e6:2d:5e:80:65:bf:df:ac:5f:e4:ba:
30:c4:82:a9:a2:e0:ee:f2:49:10:92:fc:cb:ea:10:fd:07:4c:
f8:dd:a1:99:4f:d0:85:ed:27:88:0e:10:8e:b2:3c:ef:6d:58:
01:44:ee:2d:22:eb:5d:21:60:81:be:24:b9:33:d4:f6:39:cf:
62:2b:0c:36:d7:78:58:09:29:f8:80:ee:87:96:6d:e3:34:67:
c4:a0:5b:be:ae:7e:1b:49:3b:25:bd:a8:98:a3:16:e3:5a:72:
b5:fb:1b:3b:b3:c5:9b:6b:dc:9c:3d:80:45:87:7a:a0:c9:08:
97:cd:aa:a1:6f:89:a3:59:46:52:de:26:d6:3a:76:ec:5f:29:
40:08:f5:24:5e:21:d4:5b:18:65:18:9d:fb:7d:40:57:84:92:
9b:c3:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:43:39 2026 by rpki-client