Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
File: CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer (raw, json)
Hash identifier: ELzBuRZc89sL18aXxSwWEMb9VWBC6/iW2XgSY7R43lw=
Subject key identifier: CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 672EAFCD430257E7FF12D95A3AA00A3A25809140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Wed 19 Aug 2026 19:58:06 +0000
Certificate not after: Wed 18 Aug 2027 20:03:06 +0000
Subordinate resources: IP: 2a11:f2c0:ffe4::/47
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2e:af:cd:43:02:57:e7:ff:12:d9:5a:3a:a0:0a:3a:25:80:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Aug 19 19:58:06 2026 GMT
Not After : Aug 18 20:03:06 2027 GMT
Subject: CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:cd:15:db:89:9a:87:b2:ad:69:58:e5:dc:
46:a3:5b:a5:1c:93:39:e2:43:43:14:26:ca:ca:4f:
53:c4:05:4d:2d:5d:86:9f:68:ad:3e:06:e9:c3:0b:
8f:0e:99:b1:4f:25:3b:02:40:33:0d:95:23:a5:a2:
d6:da:b7:dc:4a:7e:08:71:e7:a6:15:cd:3a:bd:f7:
00:b0:c8:dc:db:bd:5d:34:d6:90:30:ec:aa:59:7b:
98:f3:ba:f8:bc:11:fe:6a:12:e0:72:41:9d:08:60:
a0:43:91:b9:14:a9:db:7d:b8:05:35:86:31:97:cf:
c4:86:7e:30:6d:36:82:3c:80:57:d6:34:5f:19:57:
63:9f:80:44:0c:c2:e3:6a:d7:43:3b:77:39:c7:4d:
2e:c6:54:e7:46:92:fb:46:db:3a:3a:ab:2a:cb:37:
75:ed:74:38:e0:96:63:2e:d6:5c:dc:b6:a1:fd:6b:
fa:f9:53:57:04:45:2d:c0:f8:14:ca:d5:32:12:25:
0c:a5:28:88:a0:75:5c:d8:07:f2:73:1d:ae:56:e6:
97:1f:3d:75:05:2f:c3:b6:1d:fa:b0:60:49:de:cb:
20:26:7b:18:aa:10:f8:da:90:84:7b:24:20:70:e0:
23:fb:8d:67:7f:8e:2b:89:7d:40:9b:13:56:b1:dc:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe4::/47
Signature Algorithm: sha256WithRSAEncryption
21:16:80:46:62:fa:bd:a7:db:bd:8c:fd:d8:15:0c:44:c9:d9:
0a:07:db:5d:87:49:0c:d6:4d:8b:57:3d:20:19:3d:b4:55:76:
fc:42:a5:42:d0:94:d2:34:e9:94:d9:29:d6:d5:a0:41:55:36:
23:df:8d:6b:d8:97:b8:61:fd:dd:3e:03:f6:f2:9a:7e:3b:74:
f5:10:d3:e5:45:59:9a:01:5a:d2:d5:ad:4b:88:06:6d:19:b7:
4a:5c:c9:b3:e5:86:84:9a:86:c5:ea:a1:f7:b3:8d:46:76:03:
a9:26:b9:24:27:22:42:15:ae:e9:3a:ce:d7:25:2c:dc:43:b9:
dd:91:9d:89:68:81:42:f7:65:d2:7e:4f:53:15:7a:c4:f3:19:
1d:65:7a:81:dd:66:6c:8c:61:15:da:00:9b:e5:f4:5b:88:d2:
d6:ea:c7:68:bf:e9:c6:4f:d2:17:a4:42:a7:1e:91:e5:99:8e:
09:ab:68:43:87:63:08:5c:64:0e:6c:14:13:b8:49:ab:b6:f1:
89:44:10:d6:30:27:d7:f8:c2:24:90:9b:94:27:4b:e3:d5:c9:
91:51:d2:5f:36:61:38:95:66:56:bd:2b:2f:3b:d7:2b:82:e8:
d6:28:6e:9f:24:df:d6:8e:cd:c8:5c:41:2a:b7:11:69:11:80:
5f:f5:1d:e1
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUZy6vzUMCV+f/EtlaOqAKOiWAkUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNjA4MTkxOTU4MDZaFw0yNzA4MTgyMDAzMDZaMDMxMTAvBgNV
BAMTKENENkJGNEFGQTI0MTIzMEVDNTgzQkREQTM5N0VGRENBNjMyODQ0MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABM0V24mah7KtaVjl3EajW6Uc
kzniQ0MUJsrKT1PEBU0tXYafaK0+BunDC48OmbFPJTsCQDMNlSOlotbat9xKfghx
56YVzTq99wCwyNzbvV001pAw7KpZe5jzuvi8Ef5qEuByQZ0IYKBDkbkUqdt9uAU1
hjGXz8SGfjBtNoI8gFfWNF8ZV2OfgEQMwuNq10M7dznHTS7GVOdGkvtG2zo6qyrL
N3XtdDjglmMu1lzctqH9a/r5U1cERS3A+BTK1TISJQylKIigdVzYB/JzHa5W5pcf
PXUFL8O2HfqwYEneyyAmexiqEPjakIR7JCBw4CP7jWd/jiuJfUCbE1ax3FMhAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNa/SvokEjDsWD
vdo5fv3KYyhEFDAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfODJkNWYzODQ0OWU5NDJhOWE5YWIyODE4MDA1NmFiZmMvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzgyZDVmMzg0NDllOTQyYTlhOWFiMjgxODAwNTZhYmZjLzAvQ0Q2QkY0
QUZBMjQxMjMwRUM1ODNCRERBMzk3RUZEQ0E2MzI4NDQxNC5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwEqEfLA/+QwDQYJKoZIhvcNAQELBQADggEBACEWgEZi+r2n272M
/dgVDETJ2QoH212HSQzWTYtXPSAZPbRVdvxCpULQlNI06ZTZKdbVoEFVNiPfjWvY
l7hh/d0+A/bymn47dPUQ0+VFWZoBWtLVrUuIBm0Zt0pcybPlhoSahsXqofezjUZ2
A6kmuSQnIkIVruk6ztclLNxDud2RnYlogUL3ZdJ+T1MVesTzGR1leoHdZmyMYRXa
AJvl9FuI0tbqx2i/6cZP0hekQqcekeWZjgmraEOHYwhcZA5sFBO4Sau28YlEENYw
J9f4wiSQm5QnS+PVyZFR0l82YTiVZla9Ky871yuC6NYobp8k39aOzchcQSq3EWkR
gF/1HeE=
-----END CERTIFICATE-----
Generated at Thu Sep 17 22:43:34 2026 by rpki-client