$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer (raw, json) Hash identifier: QeIsnFtF/EdZr3eDL8K0OYPSz/bi5xfqK6RvjhvtAeE= Subject key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 0463823D8618D66A36EC35B03A4D2869E00D0A66 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Manifest: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft caRepository: rsync://krill.byhill.de/repo/byhill-ca/1/ Notify URL: https://krill.byhill.de/rrdp/notification.xml Certificate not before: Sat 25 Apr 2026 17:22:56 +0000 Certificate not after: Sat 24 Apr 2027 17:27:56 +0000 Subordinate resources: IP: 2a13:c8c4:7000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 07:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:63:82:3d:86:18:d6:6a:36:ec:35:b0:3a:4d:28:69:e0:0d:0a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Apr 25 17:22:56 2026 GMT Not After : Apr 24 17:27:56 2027 GMT Subject: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ac:df:b8:2e:54:fb:0a:a9:22:68:71:a7:fe: 9f:15:fe:ed:f2:4c:b7:fb:32:57:21:c5:70:3d:2f: fe:51:d5:9c:0c:a6:35:b5:5b:f8:e1:70:c0:fe:35: 97:bf:59:fd:d0:2a:75:ab:2a:7d:89:80:36:80:d0: 41:bb:d0:d7:08:a9:90:7b:0c:e5:b4:0d:f5:2f:c9: 81:6c:4f:55:e9:b5:4b:be:64:06:7f:52:d6:27:11: 56:42:71:fd:4a:f3:3f:03:cc:45:fe:7f:8c:7e:27: 64:ba:50:76:b7:53:9c:59:c4:3e:12:0a:b1:1b:1c: 28:f6:69:68:24:05:aa:5f:1e:d4:f9:d0:77:b0:bc: 47:90:f8:b9:8f:e7:e3:db:02:56:24:8f:fe:c5:42: 2e:8e:29:9e:88:16:4a:9d:8e:81:c9:f6:dc:a0:5d: 44:19:99:4c:b8:ef:a8:35:f6:6e:7f:64:45:31:d2: f1:84:24:00:dd:6d:90:e1:26:79:c0:e7:7b:34:5c: 79:7a:2c:11:84:93:80:17:87:8a:cb:cb:d3:1f:8c: 74:42:44:bd:aa:fc:6f:dd:cc:fc:fa:4c:f4:4c:68: be:f2:ef:e1:6f:b1:9b:0e:1d:b6:cf:a8:71:a2:9e: 5d:93:25:08:4b:39:fb:57:e0:76:79:90:5a:ed:ed: 81:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: CA Repository - URI:rsync://krill.byhill.de/repo/byhill-ca/1/ RPKI Manifest - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft RPKI Notify - URI:https://krill.byhill.de/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:7000::/36 Signature Algorithm: sha256WithRSAEncryption 08:95:15:43:92:9e:cf:cd:ef:13:8d:2f:15:9d:40:c1:c7:0f: d0:b0:76:4a:ab:c1:ba:6c:ed:c4:8b:6f:5a:ea:1e:4a:64:60: a1:00:55:16:da:2a:cd:17:b9:c8:4c:c3:15:9d:2b:ca:7f:2e: 54:28:3e:02:0f:78:91:ae:a5:7d:a3:67:ac:59:99:d7:fe:2c: cc:54:96:ab:f5:57:aa:dd:5a:2e:89:14:16:f5:e1:db:d5:87: 8c:30:53:30:02:81:62:07:ea:ab:f3:83:07:35:88:5e:fd:c6: 79:6c:27:23:68:6a:5a:bb:15:78:4c:c2:27:7a:0b:4e:68:6b: 59:55:2d:10:0f:20:ed:64:a5:c5:09:04:29:bf:ed:fc:27:3d: f5:7d:d4:3c:2a:e5:e1:25:47:0c:63:63:77:5f:e4:e9:36:b9: a8:cb:21:e6:9c:28:0d:ba:20:17:3b:14:79:7f:d2:4a:57:4c: d9:a8:a0:39:94:43:50:9e:38:ed:ef:c1:d2:a2:3e:35:28:9a: 1d:9f:2b:2a:0d:92:70:10:6b:a1:f0:e8:db:85:77:b0:51:ce: 03:96:4a:d5:22:a4:bb:eb:17:e9:06:ae:67:f2:07:cf:86:19: db:3a:82:e5:23:77:c6:e3:78:92:17:61:b1:ce:c0:c3:e8:55: 44:90:a0:c8 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUBGOCPYYY1mo27DWwOk0oaeANCmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA0MjUxNzIyNTZaFw0yNzA0MjQxNzI3NTZaMDMxMTAvBgNV BAMTKEY1NUMyNzQ1MzIyQ0VDMTgwNTgxNURDRDY1QkM2QUZGRDk5MTY4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDirN+4LlT7CqkiaHGn/p8V/u3y TLf7MlchxXA9L/5R1ZwMpjW1W/jhcMD+NZe/Wf3QKnWrKn2JgDaA0EG70NcIqZB7 DOW0DfUvyYFsT1XptUu+ZAZ/UtYnEVZCcf1K8z8DzEX+f4x+J2S6UHa3U5xZxD4S CrEbHCj2aWgkBapfHtT50HewvEeQ+LmP5+PbAlYkj/7FQi6OKZ6IFkqdjoHJ9tyg XUQZmUy476g19m5/ZEUx0vGEJADdbZDhJnnA53s0XHl6LBGEk4AXh4rLy9MfjHRC RL2q/G/dzPz6TPRMaL7y7+FvsZsOHbbPqHGinl2TJQhLOftX4HZ5kFrt7YHlAgMB AAGjggLDMIICvzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1XCdFMizsGAWB Xc1lvGr/2ZFo2jAfBgNVHSMEGDAWgBQedElGg9jSpOApqtRXOSjSpV+kETAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi80LzFFNzQ0OTQ2 ODNEOEQyQTRFMDI5QUFENDU3MzkyOEQyQTU1RkE0MTEuY2VyMIHlBggrBgEFBQcB CwSB2DCB1TA1BggrBgEFBQcwBYYpcnN5bmM6Ly9rcmlsbC5ieWhpbGwuZGUvcmVw by9ieWhpbGwtY2EvMS8wYQYIKwYBBQUHMAqGVXJzeW5jOi8va3JpbGwuYnloaWxs LmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVC QzZBRkZEOTkxNjhEQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8va3JpbGwuYnlo aWxsLmRlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhPIxHAwDQYJKoZI hvcNAQELBQADggEBAAiVFUOSns/N7xONLxWdQMHHD9Cwdkqrwbps7cSLb1rqHkpk YKEAVRbaKs0XuchMwxWdK8p/LlQoPgIPeJGupX2jZ6xZmdf+LMxUlqv1V6rdWi6J FBb14dvVh4wwUzACgWIH6qvzgwc1iF79xnlsJyNoalq7FXhMwid6C05oa1lVLRAP IO1kpcUJBCm/7fwnPfV91Dwq5eElRwxjY3df5Ok2uajLIeacKA26IBc7FHl/0kpX TNmooDmUQ1CeOO3vwdKiPjUomh2fKyoNknAQa6Hw6NuFd7BRzgOWStUipLvrF+kG rmfyB8+GGds6guUjd8bjeJIXYbHOwMPoVUSQoMg= -----END CERTIFICATE-----Generated at Tue May 12 22:32:46 2026 by rpki-client