$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer File: B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer (raw, json) Hash identifier: 4JnzDzekO7l+zkV3kW2wnM3JY7qA7frb/XwiW9pw2Ok= Subject key identifier: B3:93:6D:A7:93:A9:99:58:62:F0:71:42:C3:D0:BB:0D:2A:B2:BB:BB Authority key identifier: 69:72:7B:94:6D:87:9F:5A:52:FB:58:F2:4B:4D:4D:12:D5:9B:2C:C2 Certificate issuer: /CN=69727B946D879F5A52FB58F24B4D4D12D59B2CC2 Certificate serial: 1185BE3ED6221A189E4C57B8302EF0DA9A238022 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 20 Apr 2026 19:43:17 +0000 Certificate not after: Mon 19 Apr 2027 19:48:17 +0000 Subordinate resources: IP: 2a14:1ec0::/32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:85:be:3e:d6:22:1a:18:9e:4c:57:b8:30:2e:f0:da:9a:23:80:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69727B946D879F5A52FB58F24B4D4D12D59B2CC2 Validity Not Before: Apr 20 19:43:17 2026 GMT Not After : Apr 19 19:48:17 2027 GMT Subject: CN=B3936DA793A9995862F07142C3D0BB0D2AB2BBBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:fa:f5:78:52:0b:2c:18:da:2d:6e:65:76: e3:f0:ec:86:7b:54:2d:98:c7:ed:ef:5c:f0:c4:ec: ae:e3:9d:24:cc:40:0f:99:de:09:46:0d:87:20:96: 41:50:09:f4:56:32:71:2c:12:9f:07:c3:4b:22:66: 22:cd:b2:cd:a8:fd:bd:62:b6:28:03:e4:67:ae:e6: d6:49:c4:51:c6:dc:08:73:2a:91:cb:12:5a:c9:7c: fc:5c:80:33:ec:97:bf:bd:4c:9c:26:7f:9f:70:a8: 2a:c9:44:3e:19:b9:c1:e8:82:55:e0:63:d3:67:6d: a3:6d:41:d9:06:30:4a:21:1f:1f:ca:1e:80:c1:69: ab:22:cc:a7:eb:27:35:8b:e4:6e:82:e7:9b:45:c3: a3:d1:4f:1a:09:f6:34:f0:80:4c:77:82:87:36:48: 20:28:9c:48:76:7a:47:44:46:64:7a:00:99:7d:31: a9:e0:a0:c5:ca:97:a8:6c:60:8c:ed:9d:97:7e:81: 5a:c5:58:92:8d:c1:02:df:d5:1c:3e:99:b5:9b:27: b2:0a:ba:cc:35:8a:48:90:2c:c4:85:33:46:92:94: 71:42:03:7c:25:9b:d3:b1:c3:33:f7:9c:50:8a:b6: 8e:e7:f3:06:42:17:f7:c8:46:f7:ae:a3:27:4a:19: 61:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:93:6D:A7:93:A9:99:58:62:F0:71:42:C3:D0:BB:0D:2A:B2:BB:BB X509v3 Authority Key Identifier: keyid:69:72:7B:94:6D:87:9F:5A:52:FB:58:F2:4B:4D:4D:12:D5:9B:2C:C2 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec0::/32 Signature Algorithm: sha256WithRSAEncryption b2:1c:11:4f:c4:ba:41:18:96:35:6d:19:a3:67:b3:0d:79:9e: 63:e0:03:c9:2a:0b:00:0f:93:1f:16:62:3b:b3:4b:50:2a:3d: cf:49:3e:1e:7e:bd:d2:b4:e3:17:e7:a6:be:9c:22:d1:1d:9f: 7c:f1:2e:c1:4f:9f:d9:ed:67:21:43:1c:31:ea:d9:1f:48:11: 65:eb:31:52:a7:0a:9f:71:c1:54:99:b6:16:eb:e2:1f:49:5c: 22:bd:23:fe:f8:f6:a4:dc:ba:f4:ac:96:ee:a1:ed:f3:8c:db: 5f:c9:e3:bb:db:eb:d3:a1:7b:f9:3a:8a:27:2d:a7:79:af:d6: 44:35:2a:1d:ed:44:02:9c:cb:ee:05:23:e4:a1:c7:18:7a:3f: 8f:71:57:54:02:c9:f6:8f:ab:ca:41:6e:5f:ab:25:21:65:6c: 13:fb:ea:4c:b1:2f:a2:4e:c4:71:c3:b7:85:f6:9c:84:3a:40: fe:51:68:32:96:2f:f9:62:16:98:1a:09:2c:cb:25:0f:15:ff: 3a:c2:11:41:4c:7a:ec:53:de:53:e1:ad:85:9d:06:3b:42:d5: e1:4b:f1:37:29:ff:d1:5a:81:55:74:6d:f6:59:8c:9e:a5:3e: 1b:4f:73:dc:d9:c4:69:e5:41:4f:95:22:f0:bf:ac:d6:96:10: 34:b1:4f:93 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUEYW+PtYiGhieTFe4MC7w2pojgCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3MjdCOTQ2RDg3OUY1QTUyRkI1OEYyNEI0RDREMTJE NTlCMkNDMjAeFw0yNjA0MjAxOTQzMTdaFw0yNzA0MTkxOTQ4MTdaMDMxMTAvBgNV BAMTKEIzOTM2REE3OTNBOTk5NTg2MkYwNzE0MkMzRDBCQjBEMkFCMkJCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4Pr1eFILLBjaLW5lduPw7IZ7 VC2Yx+3vXPDE7K7jnSTMQA+Z3glGDYcglkFQCfRWMnEsEp8Hw0siZiLNss2o/b1i tigD5Geu5tZJxFHG3AhzKpHLElrJfPxcgDPsl7+9TJwmf59wqCrJRD4ZucHoglXg Y9NnbaNtQdkGMEohHx/KHoDBaasizKfrJzWL5G6C55tFw6PRTxoJ9jTwgEx3goc2 SCAonEh2ekdERmR6AJl9MangoMXKl6hsYIztnZd+gVrFWJKNwQLf1Rw+mbWbJ7IK usw1ikiQLMSFM0aSlHFCA3wlm9OxwzP3nFCKto7n8wZCF/fIRveuoydKGWHFAgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzk22nk6mZWGLw cULD0LsNKrK7uzAfBgNVHSMEGDAWgBRpcnuUbYefWlL7WPJLTU0S1ZsswjAOBgNV HQ8BAf8EBAMCAQYwgZcGA1UdHwSBjzCBjDCBiaCBhqCBg4aBgHJzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00 ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzEwLzY5NzI3Qjk0NkQ4NzlGNUE1MkZCNThG MjRCNEQ0RDEyRDU5QjJDQzIuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYB BQUHMAKGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzAvNjk3MjdC OTQ2RDg3OUY1QTUyRkI1OEYyNEI0RDREMTJENTlCMkNDMi5jZXIwggE/BggrBgEF BQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzRhZjRhNjJlLTNlZjUtNGEzNi1iMGQzLTc4 MjViZWMxMzRhYi8xLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNGFmNGE2MmUtM2VmNS00YTM2LWIwZDMt NzgyNWJlYzEzNGFiLzEvQjM5MzZEQTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQy QUIyQkJCQi5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2ku cmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhQewDANBgkqhkiG9w0B AQsFAAOCAQEAshwRT8S6QRiWNW0Zo2ezDXmeY+ADySoLAA+THxZiO7NLUCo9z0k+ Hn690rTjF+emvpwi0R2ffPEuwU+f2e1nIUMcMerZH0gRZesxUqcKn3HBVJm2Fuvi H0lcIr0j/vj2pNy69KyW7qHt84zbX8nju9vr06F7+TqKJy2nea/WRDUqHe1EApzL 7gUj5KHHGHo/j3FXVALJ9o+rykFuX6slIWVsE/vqTLEvok7EccO3hfachDpA/lFo MpYv+WIWmBoJLMslDxX/OsIRQUx67FPeU+GthZ0GO0LV4UvxNyn/0VqBVXRt9lmM nqU+G09z3NnEaeVBT5Ui8L+s1pYQNLFPkw== -----END CERTIFICATE-----Generated at Wed May 13 09:44:21 2026 by rpki-client