Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer
File: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer (raw, json)
Hash identifier: 8nu3Xd4YsBEhmxHDQPhArOG8rrlHNZQ06737COjygk0=
Subject key identifier: 9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 27B187810C1831109E6FFAAF89E03985D7A479B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 28 Apr 2026 14:12:14 +0000
Certificate not after: Tue 27 Apr 2027 14:17:14 +0000
Subordinate resources: IP: 2a11:f2c0:ffe1:: -- 2a11:f2c0:ffe2:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b1:87:81:0c:18:31:10:9e:6f:fa:af:89:e0:39:85:d7:a4:79:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Apr 28 14:12:14 2026 GMT
Not After : Apr 27 14:17:14 2027 GMT
Subject: CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:af:8c:39:b0:a5:71:89:6d:e5:7f:06:6b:
0d:cb:e4:e7:a0:41:06:15:32:56:71:ff:9f:5d:2e:
5c:e4:91:1c:a6:0f:dc:a0:c5:f7:0d:2a:5e:5e:93:
ea:64:be:d9:9e:ed:f6:42:d2:66:da:ef:64:2c:46:
90:cf:3a:df:24:b7:45:77:51:cd:fc:a5:a2:72:4b:
a6:53:c5:b0:40:3e:ac:38:8f:e0:16:8f:36:e7:b1:
38:74:00:99:9e:08:6e:23:46:f9:16:cb:d5:2f:b9:
c0:61:c8:e0:c1:8d:a8:9e:6e:61:ec:e3:33:53:77:
0d:53:f4:be:34:67:78:f6:8d:30:19:4b:1f:5a:c4:
00:f3:84:21:07:3a:23:1d:cd:41:8b:c7:b9:fc:64:
3e:8f:89:87:57:a5:5b:df:5d:aa:49:4a:83:5f:e3:
20:ab:38:f3:7e:02:70:ed:44:8c:f4:26:a1:11:5b:
8d:94:3c:de:99:28:75:30:f9:17:d4:83:3c:87:55:
59:57:3b:66:9c:a7:f0:de:ad:b7:6a:57:46:ee:21:
b6:87:da:84:0c:4d:6b:7b:e4:7d:10:97:e0:21:c1:
e0:cf:e9:f1:6c:65:48:11:e9:a1:3b:9c:31:fe:de:
28:b6:52:8e:23:f6:c3:a5:a9:21:8d:4f:d3:32:a6:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe1::-2a11:f2c0:ffe2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
62:5f:28:f1:09:ee:ac:ac:5f:bc:bf:91:17:5d:79:a5:f1:db:
e6:ee:07:dc:1a:ed:44:36:de:f0:6a:8a:38:ce:d2:2a:db:24:
1e:54:3e:45:f6:8c:39:39:12:5b:c3:ed:47:8f:55:8a:95:97:
31:bf:e3:5e:aa:16:7b:e8:66:bb:e4:a6:7e:64:34:97:f6:87:
65:b9:93:42:1a:39:c5:03:e3:17:bb:57:5a:e6:60:13:21:18:
27:70:e3:72:08:19:2e:36:bc:6e:9f:f7:75:12:e2:d9:ce:b4:
00:e1:13:6f:f4:90:55:8c:57:f1:f8:93:e7:24:37:f6:c2:11:
9e:3d:6e:2b:42:59:c5:47:74:2e:84:ee:f8:a4:1a:04:55:78:
b7:6d:8b:ab:80:fb:b5:5c:27:6c:ef:d6:a7:2d:7b:d1:eb:e5:
f7:51:61:69:b8:41:26:df:a9:ca:e0:59:1a:ad:86:8d:3f:8d:
f4:08:9e:e5:b0:0d:61:9d:bb:eb:3c:cc:18:4f:cb:e2:43:93:
e5:7a:aa:7b:2a:f4:c9:b8:8d:60:d3:68:5a:7d:bd:bf:01:6e:
11:55:17:91:be:75:ce:2b:16:8a:2a:2f:58:4e:ff:05:38:12:
36:c5:f7:ec:d6:be:a2:0a:09:45:27:7d:ff:51:a8:93:1e:84:
60:ac:a4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:43:49 2026 by rpki-client