$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer File: 149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer (raw, json) Hash identifier: y71+RU9g54azV5dgw7DVE0zHxfVhDYGxNOf9szJbWnM= Subject key identifier: 14:9C:5E:DA:A1:88:1E:A8:6C:B9:53:CB:D9:AE:82:76:E2:D1:46:FA Authority key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 Certificate issuer: /CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Certificate serial: 33715E33439083501ADB0B0939ED07DA38781E5F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 16 Jul 2026 09:21:07 +0000 Certificate not after: Thu 15 Jul 2027 09:26:07 +0000 Subordinate resources: IP: 2a13:c8c4:2240::/42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:71:5e:33:43:90:83:50:1a:db:0b:09:39:ed:07:da:38:78:1e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Validity Not Before: Jul 16 09:21:07 2026 GMT Not After : Jul 15 09:26:07 2027 GMT Subject: CN=149C5EDAA1881EA86CB953CBD9AE8276E2D146FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:41:09:85:74:b7:a7:32:76:56:99:89:1c: 2f:b2:e5:ff:dc:f0:df:3c:95:b3:93:d3:3f:46:d9: d8:92:62:13:58:8c:78:21:ff:ff:f5:c1:b1:0c:b0: 0e:a4:d1:f9:34:dc:8c:59:b7:c6:c6:bf:a0:d5:6b: b7:5a:71:62:d7:8c:c3:94:22:9f:26:4d:54:5a:5a: bc:52:85:2c:08:94:b7:d5:79:c8:2c:30:bf:63:eb: 4c:f5:96:89:c4:ea:b1:e8:97:1d:e1:fb:38:9c:65: 71:67:d9:7c:04:68:ef:fc:26:b5:6b:37:f7:67:3f: 89:2e:31:03:18:7f:92:f4:d3:19:0c:cc:d6:9b:99: f3:fb:68:e1:a5:2a:45:4e:21:dd:30:16:c8:5c:c1: 33:28:c7:41:eb:11:8f:78:4d:d6:d3:41:a2:fb:95: 65:ff:5c:58:48:fd:36:ee:c8:7a:1a:f6:d2:25:5e: 96:53:0c:12:66:f7:5d:9b:57:1f:32:e3:b0:8b:cd: f2:41:b7:8a:4b:2d:35:12:b2:dd:21:07:00:ab:05: 11:cb:33:72:9c:a5:9b:a9:c4:86:c4:1d:a7:47:89: e3:a3:ac:c3:35:58:cf:f5:1b:76:25:60:1c:56:8e: 00:de:0f:a9:32:0f:86:a5:34:56:53:2c:f6:bb:04: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:9C:5E:DA:A1:88:1E:A8:6C:B9:53:CB:D9:AE:82:76:E2:D1:46:FA X509v3 Authority Key Identifier: keyid:30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:2240::/42 Signature Algorithm: sha256WithRSAEncryption 9a:2a:92:db:93:9a:74:98:a4:64:fe:b9:fa:09:7b:53:09:0c: 92:d2:90:36:b3:2c:96:0d:4e:8d:c3:db:c0:67:68:1f:4d:0d: 91:92:2f:ee:3c:41:18:51:83:ce:6a:7c:0e:d9:80:4d:36:14: b3:57:fc:e4:34:a9:b5:c8:bf:0b:8f:a7:a7:5a:19:04:f0:87: 85:65:9f:d2:26:e8:d4:af:cc:81:65:27:65:2e:26:ae:f3:47: 8d:ad:86:4a:d5:59:1b:e9:79:3b:c5:67:e0:ef:92:38:bd:8a: fb:b8:0b:3f:f0:65:fa:8b:40:7f:d4:5b:b6:e6:63:c1:cc:de: 0b:81:50:af:22:ee:66:02:cf:61:94:bc:5b:49:99:81:d5:9b: e9:dd:9e:30:95:d5:37:e2:29:4e:0e:41:28:5e:72:f1:dc:20: bb:cd:e4:15:8d:71:53:39:66:f4:13:dc:6a:d9:38:bd:6c:67: 64:d9:43:4f:1a:5d:66:92:ad:cd:6d:ae:18:03:ed:cb:94:b2: a9:59:61:95:31:07:8e:1d:a1:f3:f4:0a:40:26:b3:d7:5e:19: ab:f8:fb:f5:98:11:9a:51:e5:23:a5:76:c7:e9:23:88:52:51: 39:1e:d3:cb:3b:f8:79:ee:b9:f2:26:1c:57:ea:4f:b4:9d:53: ca:48:3c:93 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUM3FeM0OQg1Aa2wsJOe0H2jh4Hl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJE Q0I1NkM1ODAeFw0yNjA3MTYwOTIxMDdaFw0yNzA3MTUwOTI2MDdaMDMxMTAvBgNV BAMTKDE0OUM1RURBQTE4ODFFQTg2Q0I5NTNDQkQ5QUU4Mjc2RTJEMTQ2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFEEJhXS3pzJ2VpmJHC+y5f/c 8N88lbOT0z9G2diSYhNYjHgh///1wbEMsA6k0fk03IxZt8bGv6DVa7dacWLXjMOU Ip8mTVRaWrxShSwIlLfVecgsML9j60z1lonE6rHolx3h+zicZXFn2XwEaO/8JrVr N/dnP4kuMQMYf5L00xkMzNabmfP7aOGlKkVOId0wFshcwTMox0HrEY94TdbTQaL7 lWX/XFhI/TbuyHoa9tIlXpZTDBJm912bVx8y47CLzfJBt4pLLTUSst0hBwCrBRHL M3KcpZupxIbEHadHieOjrMM1WM/1G3YlYBxWjgDeD6kyD4alNFZTLPa7BM9/AgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUnF7aoYgeqGy5 U8vZroJ24tFG+jAfBgNVHSMEGDAWgBQwD4fkTiTC/u2XgOKgq/Ai3LVsWDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NzgyZDM4Yi00MDE2LTQ5 NmEtODI5OC1lM2U5N2JlZTk3YmQvMS8zMDBGODdFNDRFMjRDMkZFRUQ5NzgwRTJB MEFCRjAyMkRDQjU2QzU4LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAwMmY4ZWU2LWFiZTctNGFlOC05NjRjLTc4OGJiOThjOTc1Yy8xLzMwMEY4N0U0 NEUyNEMyRkVFRDk3ODBFMkEwQUJGMDIyRENCNTZDNTguY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9jYmE1MDFmYS01OWYwLTQwMjctYWU0MC1mZDUy NTYzODljMjgvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NiYTUwMWZhLTU5ZjAtNDAyNy1hZTQwLWZk NTI1NjM4OWMyOC8xLzE0OUM1RURBQTE4ODFFQTg2Q0I5NTNDQkQ5QUU4Mjc2RTJE MTQ2RkEubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBioTyMQiQDANBgkqhkiG9w0B AQsFAAOCAQEAmiqS25OadJikZP65+gl7UwkMktKQNrMslg1OjcPbwGdoH00NkZIv 7jxBGFGDzmp8DtmATTYUs1f85DSptci/C4+np1oZBPCHhWWf0ibo1K/MgWUnZS4m rvNHja2GStVZG+l5O8Vn4O+SOL2K+7gLP/Bl+otAf9RbtuZjwczeC4FQryLuZgLP YZS8W0mZgdWb6d2eMJXVN+IpTg5BKF5y8dwgu83kFY1xUzlm9BPcatk4vWxnZNlD TxpdZpKtzW2uGAPty5SyqVlhlTEHjh2h8/QKQCaz114Zq/j79ZgRmlHlI6V2x+kj iFJROR7Tyzv4ee658iYcV+pPtJ1Tykg8kw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:33:50 2026 by rpki-client