Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer (raw, json)
Hash identifier: SuvRelDkFOkCXyoDp4sGkEl5D/hEyjpMVft/u87kO3o=
Subject key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 597C109E39D5F2669A398D2303CFF358A30B8117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 29 Apr 2026 21:26:15 +0000
Certificate not after: Wed 28 Apr 2027 21:31:15 +0000
Subordinate resources: IP: 2a14:7581:d000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7c:10:9e:39:d5:f2:66:9a:39:8d:23:03:cf:f3:58:a3:0b:81:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 29 21:26:15 2026 GMT
Not After : Apr 28 21:31:15 2027 GMT
Subject: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:fd:3a:e1:ad:ca:37:5b:0b:f5:bf:3c:6a:
67:70:87:cc:48:35:f3:fd:08:19:7c:63:b2:56:cd:
a3:30:10:1c:be:ba:c6:1e:56:65:b6:f3:23:8b:10:
95:cd:7e:2c:1d:93:c7:98:9f:1c:1c:6c:78:16:9a:
3a:d0:59:78:43:dd:69:48:46:7c:28:6f:ed:e0:43:
7f:df:62:6d:8c:4a:b6:01:15:5e:07:7a:8b:a9:c5:
cf:03:1a:d3:b9:38:5b:62:6c:2e:a4:51:81:69:a5:
2f:e5:da:7b:3b:05:4c:68:87:f9:5a:80:c1:66:e7:
f4:a1:54:d8:4c:31:3b:ff:31:59:54:9a:11:31:89:
bd:16:60:bc:4c:5a:53:8c:87:80:aa:03:a6:4b:f8:
bc:95:0e:7e:79:c3:7f:d6:32:d5:8c:f3:c8:c7:b1:
2f:f3:77:d8:39:33:18:c7:52:de:af:0f:8a:bb:a1:
83:4b:ed:6b:75:20:56:37:b4:77:27:32:c6:65:38:
8b:dd:09:81:f7:65:c3:15:8a:32:06:e5:8f:b6:d2:
cd:4d:15:ce:33:cb:3b:8b:1a:eb:75:bc:ac:ab:da:
9d:64:19:e5:d7:c1:a3:c2:56:5c:50:8c:02:e0:55:
35:fb:8b:bd:35:4a:92:4b:e5:26:28:93:a9:cf:93:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:d000::/36
Signature Algorithm: sha256WithRSAEncryption
95:85:7b:f1:81:8f:1f:60:17:71:b9:05:9b:55:ed:1a:58:e1:
d4:f5:e8:63:74:50:5b:5d:f3:30:70:b3:6f:d9:a4:f1:ac:c5:
f0:26:57:05:f3:15:f3:1c:cd:67:2e:e6:09:d9:de:57:88:5a:
d2:c9:9a:34:ff:ed:f5:71:e2:bb:6c:b0:03:4b:5b:57:9a:7c:
d6:15:eb:84:08:b0:3c:2c:a5:b6:4a:36:b7:90:81:fe:28:38:
aa:0b:1a:80:05:18:03:f4:93:32:8a:52:67:b1:59:d8:25:9e:
b9:97:27:bb:7b:ec:fe:32:60:c6:c3:8f:54:2f:d0:84:c3:39:
f8:33:6e:3e:c9:69:28:de:24:c1:45:59:69:49:92:36:5f:de:
48:31:64:62:09:02:23:0a:0a:8e:b1:a8:8a:b9:35:44:69:d1:
00:79:cb:ad:d4:73:40:d9:8d:7e:a0:57:c6:c0:b0:5f:48:61:
b1:8c:f2:6d:03:a4:6b:f8:5e:5c:fa:58:2c:29:f7:02:10:37:
8b:6c:63:60:65:b8:2c:25:92:21:7d:cd:70:9d:d1:58:ff:54:
6f:1d:f3:ce:ab:d0:1f:6c:ff:43:c1:44:c8:c9:43:48:e6:a1:
2f:69:29:87:8e:05:7d:3b:e7:34:ae:cc:8d:ab:27:65:b3:1d:
ff:5a:c1:28
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUWXwQnjnV8maaOY0jA8/zWKMLgRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA0MjkyMTI2MTVaFw0yNzA0MjgyMTMxMTVaMDMxMTAvBgNV
BAMTKDFGNEM4MjgyNzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr//064a3KN1sL9b88amdwh8xI
NfP9CBl8Y7JWzaMwEBy+usYeVmW28yOLEJXNfiwdk8eYnxwcbHgWmjrQWXhD3WlI
Rnwob+3gQ3/fYm2MSrYBFV4Heoupxc8DGtO5OFtibC6kUYFppS/l2ns7BUxoh/la
gMFm5/ShVNhMMTv/MVlUmhExib0WYLxMWlOMh4CqA6ZL+LyVDn55w3/WMtWM88jH
sS/zd9g5MxjHUt6vD4q7oYNL7Wt1IFY3tHcnMsZlOIvdCYH3ZcMVijIG5Y+20s1N
Fc4zyzuLGut1vKyr2p1kGeXXwaPCVlxQjALgVTX7i701SpJL5SYok6nPk965AgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfTIKCdqmWaGWr
K1lTPRyxvsiQuzAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjViZGI4LzAv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgv
MC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1MzNEMUNCMUJFQzg5MEJCLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWB0DANBgkqhkiG9w0BAQsFAAOCAQEAlYV7
8YGPH2AXcbkFm1XtGljh1PXoY3RQW13zMHCzb9mk8azF8CZXBfMV8xzNZy7mCdne
V4ha0smaNP/t9XHiu2ywA0tbV5p81hXrhAiwPCyltko2t5CB/ig4qgsagAUYA/ST
MopSZ7FZ2CWeuZcnu3vs/jJgxsOPVC/QhMM5+DNuPslpKN4kwUVZaUmSNl/eSDFk
YgkCIwoKjrGoirk1RGnRAHnLrdRzQNmNfqBXxsCwX0hhsYzybQOka/heXPpYLCn3
AhA3i2xjYGW4LCWSIX3NcJ3RWP9Ubx3zzqvQH2z/Q8FEyMlDSOahL2kph44FfTvn
NK7MjasnZbMd/1rBKA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:48:48 2026 by rpki-client