$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (raw, json) Hash identifier: EdwXjb+WYDK6QiRhUSjJHcf+DUC+lEkWQDa3ePFThcg= Subject key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 5C1C9B577D3013977E191BAB9E2880117C5396B6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 07 Sep 2026 13:12:26 +0000 Certificate not after: Mon 06 Sep 2027 13:17:26 +0000 Subordinate resources: IP: 2a14:7586:6300::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1c:9b:57:7d:30:13:97:7e:19:1b:ab:9e:28:80:11:7c:53:96:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:26 2026 GMT Not After : Sep 6 13:17:26 2027 GMT Subject: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d0:43:05:a5:29:a4:51:f6:9c:1f:49:b6:1d: 51:d8:c6:b3:ef:a8:c7:3e:7d:2f:2e:0c:da:da:8d: 30:c9:d9:a9:83:fe:8c:76:8a:37:7a:5b:b0:b4:2f: f7:fe:c6:0b:db:88:83:b3:9c:58:ef:ae:e8:6e:52: 83:c4:ed:aa:e6:5c:27:aa:3c:32:3d:ef:7c:b5:df: d5:da:1e:8e:d1:d0:e5:86:fa:d8:21:40:85:ac:36: b1:cd:2d:05:ec:5b:66:fb:3d:50:f6:91:1e:15:66: 5d:0a:aa:c2:62:ea:9c:66:28:28:d5:c6:be:ec:7e: 62:af:9b:e6:04:92:8f:0c:ab:21:bf:a2:b5:65:32: e8:ad:d6:2f:d2:80:85:db:37:ad:a7:fb:bb:df:f8: dd:ee:be:a6:b9:34:cc:35:db:dd:c7:ae:37:33:4b: 91:04:93:74:fb:6a:66:fe:32:81:bf:1e:ff:97:0a: 87:dd:b8:cc:f2:1f:fc:14:21:7a:f8:a5:51:93:a5: 94:c5:92:8b:7f:96:b9:fa:60:42:73:8c:58:5d:71: ea:98:12:f9:c5:29:15:ae:54:ce:a6:b7:a8:a3:75: e0:61:6f:0e:fd:8f:d2:37:ae:a5:78:e9:e6:18:aa: 20:d7:c0:67:9e:9d:4a:31:23:56:96:c5:ee:d8:c0: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6300::/40 Signature Algorithm: sha256WithRSAEncryption 9e:14:86:e8:29:54:22:02:74:30:4e:ab:21:07:b9:73:7a:ed: 27:d4:9c:6b:da:fe:93:84:22:77:8c:1c:8d:d0:b3:93:41:a5: 31:4b:f3:93:b8:99:49:2e:12:83:1a:a9:f6:81:f7:fe:29:70: 86:e7:47:1e:75:5e:03:37:8c:c2:f1:a2:a4:da:48:f4:c5:6f: bd:c2:95:81:0b:44:42:6e:4f:4a:46:5d:fd:c3:20:ac:c1:2f: e5:cb:05:8c:4e:3f:d7:60:06:8c:95:e3:59:33:55:d5:44:73: 73:eb:70:d8:64:7c:ad:62:9c:f2:3b:e2:be:df:c8:e5:da:f1: f8:1f:95:d9:a9:ab:28:36:a6:04:93:21:df:64:fa:3e:57:7c: 37:7e:09:ea:2f:ce:a4:f0:cf:ea:11:63:4d:2a:22:62:bf:01: 93:87:3c:24:d3:58:b8:05:75:fe:db:f4:ef:e4:4f:48:61:0c: 59:fb:51:b3:f3:63:41:bc:d7:8c:85:92:36:e8:ad:fa:df:ad: 5a:15:e2:80:e6:95:95:47:ae:25:f1:4d:e9:f7:b4:d2:f6:27: 6e:08:1d:97:92:55:6a:a0:b2:a4:ed:24:01:43:c6:e6:02:a0: 43:9a:cc:d7:7c:cd:de:a7:0a:73:d3:2d:52:b1:ec:bf:11:d9: 3c:f6:d7:3f -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUXBybV30wE5d+GRurniiAEXxTlrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjZaFw0yNzA5MDYxMzE3MjZaMDMxMTAvBgNV BAMTKDY3RTJEQkNFOUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0EMFpSmkUfacH0m2HVHYxrPv qMc+fS8uDNrajTDJ2amD/ox2ijd6W7C0L/f+xgvbiIOznFjvruhuUoPE7armXCeq PDI973y139XaHo7R0OWG+tghQIWsNrHNLQXsW2b7PVD2kR4VZl0KqsJi6pxmKCjV xr7sfmKvm+YEko8MqyG/orVlMuit1i/SgIXbN62n+7vf+N3uvqa5NMw1293Hrjcz S5EEk3T7amb+MoG/Hv+XCofduMzyH/wUIXr4pVGTpZTFkot/lrn6YEJzjFhdceqY EvnFKRWuVM6mt6ijdeBhbw79j9I3rqV46eYYqiDXwGeenUoxI1aWxe7YwGgBAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRn4tvOnACxiYTK wu26tCxY9DmbDzAfBgNVHSMEGDAWgBSD3nA3uOIFZtL+ibqJF4g7a5ZOPjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzgzREU3MDM3 QjhFMjA1NjZEMkZFODlCQTg5MTc4ODNCNkI5NjRFM0UuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9mYjgwNjk3OC01NTcxLTRkYzktYTg3Mi05MjM5 N2M0Yzg4ODAvMC8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTky Mzk3YzRjODg4MC8wLzY3RTJEQkNFOUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQz OTlCMEYubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUdYZjMA0GCSqGSIb3DQEB CwUAA4IBAQCeFIboKVQiAnQwTqshB7lzeu0n1Jxr2v6ThCJ3jByN0LOTQaUxS/OT uJlJLhKDGqn2gff+KXCG50cedV4DN4zC8aKk2kj0xW+9wpWBC0RCbk9KRl39wyCs wS/lywWMTj/XYAaMleNZM1XVRHNz63DYZHytYpzyO+K+38jl2vH4H5XZqasoNqYE kyHfZPo+V3w3fgnqL86k8M/qEWNNKiJivwGThzwk01i4BXX+2/Tv5E9IYQxZ+1Gz 82NBvNeMhZI26K36361aFeKA5pWVR64l8U3p97TS9iduCB2XklVqoLKk7SQBQ8bm AqBDmszXfM3epwpz0y1Ssey/Edk89tc/ -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:27 2026 by rpki-client