$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer File: AD29F7F191997039ACFD9760F915FEE62892E578.cer (raw, json) Hash identifier: UaT2T+A+1mEnEGFNa0ifcwWPDZ4pmnvM/DYRoddIiqQ= Subject key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 0D7DFB4B2D39B5E1C1C2C92F40DCCDA1B55178D0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 16 Jun 2026 11:17:50 +0000 Certificate not after: Tue 15 Jun 2027 11:22:50 +0000 Subordinate resources: IP: 2a0a:d685:100:: -- 2a0a:d685:2ff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 15:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7d:fb:4b:2d:39:b5:e1:c1:c2:c9:2f:40:dc:cd:a1:b5:51:78:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Jun 16 11:17:50 2026 GMT Not After : Jun 15 11:22:50 2027 GMT Subject: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:2f:2d:ad:8b:a8:14:98:5f:e8:a8:a2:ab: 33:be:4d:fb:da:ee:ff:78:f9:10:c6:2d:eb:58:37: 9d:5b:98:a2:cb:45:8b:e4:ce:a7:61:06:cb:bb:72: 12:e0:d8:1e:4f:1f:10:bd:4b:2c:db:b5:8e:c4:a3: ba:18:30:ed:44:25:60:c3:48:d2:26:53:80:3a:a8: e1:50:86:7b:5c:c8:5b:44:45:2a:87:71:fa:21:c1: 43:e1:ff:41:64:c2:fa:db:70:71:f8:e5:b9:99:b9: b9:ea:93:95:1b:70:21:5f:3c:af:f7:cc:9a:31:8a: 34:5b:0e:bb:4d:31:65:21:d5:8c:c7:76:75:0c:25: 9a:25:17:bb:a9:0d:0a:a1:26:6f:fb:03:19:30:c8: b0:07:d3:ad:4a:10:f9:c5:a6:ce:c1:01:d2:df:53: ce:fc:ce:ff:6a:f7:53:0a:a5:20:bb:97:c2:09:88: e5:73:ca:17:d5:69:87:e7:8b:ee:55:b0:86:47:ca: b1:04:d8:9e:26:e0:f1:17:c9:09:6f:58:93:2c:af: 4e:07:39:32:f5:dc:6a:c5:44:80:69:c8:a0:03:6a: 0e:10:10:fe:33:a4:2a:0d:ef:9e:e5:3b:18:4a:6e: d2:19:52:16:58:0b:e9:86:a6:41:79:9a:08:3c:49: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:100::-2a0a:d685:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 11:00:1c:77:7e:ee:ac:38:fe:52:da:92:01:8f:14:75:e8:02: 75:48:79:4d:6a:c2:d2:42:6e:78:90:d0:40:07:b6:9e:a9:e1: 08:95:bb:75:1f:b5:0b:ab:9e:b3:fb:b2:83:52:c5:b5:a2:31: 54:c5:03:61:72:36:1d:6c:b9:e3:f3:69:57:53:ec:a8:f8:2d: 83:ad:77:bb:a9:cd:b7:9c:94:36:51:16:2b:47:06:a4:ae:a6: 97:f2:2d:7f:0f:cb:b5:75:6f:ee:e2:34:42:f5:88:cd:d3:aa: 81:8e:52:a8:7d:a9:9e:50:cc:f2:8e:15:dd:df:1c:1e:ea:0c: 65:34:dc:0d:78:c8:21:fd:2c:ea:5e:d2:cb:ac:0d:18:04:b8: 58:dc:81:98:a1:d2:a6:88:72:32:65:c2:86:1d:30:58:28:be: fc:44:63:ce:4e:78:0c:5d:a2:1e:5d:66:fa:30:de:a2:75:84: 6f:3b:5a:6a:e9:d7:99:96:61:79:8e:39:5f:ba:99:be:87:4e: 27:d1:94:f0:b5:c6:6d:cc:a2:b7:cc:9c:02:e9:f6:f0:f0:48: 05:b4:00:a7:74:6d:a8:df:13:9e:2b:f0:e0:03:e9:a4:3b:66: 27:b7:f9:6d:34:b8:41:1a:eb:e1:1e:20:33:25:37:96:a4:17: 56:c7:a0:c4 -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgIUDX37Sy05teHBwskvQNzNobVReNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA2MTYxMTE3NTBaFw0yNzA2MTUxMTIyNTBaMDMxMTAvBgNV BAMTKEFEMjlGN0YxOTE5OTcwMzlBQ0ZEOTc2MEY5MTVGRUU2Mjg5MkU1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoui8trYuoFJhf6KiiqzO+Tfva 7v94+RDGLetYN51bmKLLRYvkzqdhBsu7chLg2B5PHxC9SyzbtY7Eo7oYMO1EJWDD SNImU4A6qOFQhntcyFtERSqHcfohwUPh/0FkwvrbcHH45bmZubnqk5UbcCFfPK/3 zJoxijRbDrtNMWUh1YzHdnUMJZolF7upDQqhJm/7AxkwyLAH061KEPnFps7BAdLf U878zv9q91MKpSC7l8IJiOVzyhfVaYfni+5VsIZHyrEE2J4m4PEXyQlvWJMsr04H OTL13GrFRIBpyKADag4QEP4zpCoN757lOxhKbtIZUhZYC+mGpkF5mgg8SYhTAgMB AAGjggMoMIIDJDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStKffxkZlwOaz9 l2D5Ff7mKJLleDAfBgNVHSMEGDAWgBSAg4Zz7Skdwaz64Dfoj5x6eLcSfjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzgwODM4Njcz RUQyOTFEQzFBQ0ZBRTAzN0U4OEY5QzdBNzhCNzEyN0UuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1 ODI4ZTM2OTUvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2QyNTUwY2FhLWUzOTItNDg0OC05MmZiLWEz ZDU4MjhlMzY5NS8xL0FEMjlGN0YxOTE5OTcwMzlBQ0ZEOTc2MEY5MTVGRUU2Mjg5 MkU1NzgubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEjAQAwYAKgrWhQEDBgAqCtaFAjAN BgkqhkiG9w0BAQsFAAOCAQEAEQAcd37urDj+UtqSAY8UdegCdUh5TWrC0kJueJDQ QAe2nqnhCJW7dR+1C6ues/uyg1LFtaIxVMUDYXI2HWy54/NpV1PsqPgtg613u6nN t5yUNlEWK0cGpK6ml/Itfw/LtXVv7uI0QvWIzdOqgY5SqH2pnlDM8o4V3d8cHuoM ZTTcDXjIIf0s6l7Sy6wNGAS4WNyBmKHSpohyMmXChh0wWCi+/ERjzk54DF2iHl1m +jDeonWEbztaaunXmZZheY45X7qZvodOJ9GU8LXGbcyit8ycAun28PBIBbQAp3Rt qN8Tnivw4APppDtmJ7f5bTS4QRrr4R4gMyU3lqQXVsegxA== -----END CERTIFICATE-----Generated at Sun Jul 12 06:50:55 2026 by rpki-client