Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer (raw, json)
Hash identifier: 89L1UdAmeom0SZtYe6UZtk/1EZUeb9vOpg5Z28Ys858=
Subject key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 21CBA0229079B4182F31D60C681A7300A5EFDB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 18 Oct 2025 06:36:19 +0000
Certificate not after: Sat 17 Oct 2026 06:41:19 +0000
Subordinate resources: IP: 2a14:7581:f40::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:cb:a0:22:90:79:b4:18:2f:31:d6:0c:68:1a:73:00:a5:ef:db:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 18 06:36:19 2025 GMT
Not After : Oct 17 06:41:19 2026 GMT
Subject: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:5e:f6:a5:af:28:66:6f:83:ca:18:12:d3:
a5:e7:e2:d3:ef:c0:f2:64:7a:18:a6:10:79:ad:1f:
47:e7:6f:70:44:5b:e1:55:c7:9c:24:58:a3:a8:44:
d1:b2:88:11:94:5f:5f:54:83:7d:bd:20:91:d3:34:
16:27:c0:5b:ac:0b:47:d6:f6:4b:b5:9c:7b:9f:51:
d7:05:ca:fa:f0:15:4b:d6:66:98:68:db:c8:b1:5a:
9f:84:d5:80:c1:70:09:06:a2:98:d8:3f:b6:d3:2e:
df:06:33:3d:b0:78:f1:59:af:fd:1d:1c:08:59:52:
6b:04:cc:19:b1:a8:49:d8:c9:99:78:3b:3e:8d:70:
a3:71:64:03:51:fc:40:29:ff:96:14:5a:10:05:2e:
bb:30:c6:f8:c4:15:5c:20:a0:54:f3:00:22:6a:1a:
ea:31:f9:78:ca:31:cc:0d:a8:b4:20:cc:a8:90:5e:
a2:b3:d1:75:15:21:1b:f2:38:ad:81:c1:df:49:0b:
e9:eb:b5:e5:4c:bf:53:0b:91:42:00:c2:09:af:b7:
a3:e1:b7:f6:9f:89:7c:1d:fd:4a:86:47:38:58:06:
43:36:a5:1f:43:41:9f:35:94:f0:a9:68:a7:c3:8b:
f1:d2:b9:ae:af:4c:4e:43:96:da:0f:a1:63:76:d1:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f40::/44
Signature Algorithm: sha256WithRSAEncryption
43:43:85:63:26:4c:69:b3:4a:36:45:f2:c8:33:1e:b2:1c:cb:
06:bc:98:00:70:3c:d3:db:e5:d5:56:18:6c:fc:0a:a6:e6:7e:
1d:ed:8e:a4:37:94:4d:cb:d6:ec:7f:9f:f9:d6:81:23:91:ff:
98:59:7f:0f:98:f0:3f:cd:b7:94:2a:4c:df:fa:5c:0c:b0:e3:
da:e8:e9:d9:39:5b:6f:01:21:40:a2:66:c2:e2:ba:c4:78:7d:
a7:82:fd:78:ee:fb:9d:9b:78:c9:33:8f:6e:d4:33:d5:06:c0:
27:bd:c8:54:c5:b7:05:25:9b:14:d5:66:7c:7d:df:f0:92:0e:
b9:a5:35:de:4b:36:3b:9f:ef:d0:60:a3:77:58:5c:b7:f3:f3:
9e:ab:1c:e3:b5:f3:95:ef:5a:fd:ff:29:82:2a:08:cb:30:3c:
18:5b:63:c7:80:97:09:86:52:d2:d2:30:d8:c2:99:54:5d:51:
8f:d4:f4:87:6e:9f:74:78:c3:5d:b2:30:48:c3:fc:47:1c:bd:
4f:2e:65:75:34:39:37:77:87:08:34:bd:e0:56:75:38:fe:e1:
a8:6b:6e:ef:ed:e7:eb:89:47:bb:7f:af:49:11:a8:52:0d:6f:
b4:f7:71:56:18:83:3f:ff:e6:22:94:ee:ed:3c:b0:d0:b5:2f:
9a:f6:4e:6a
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUIcugIpB5tBgvMdYMaBpzAKXv208wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTEwMTgwNjM2MTlaFw0yNjEwMTcwNjQxMTlaMDMxMTAvBgNV
BAMTKEY5RjdBMjg4NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzl72pa8oZm+DyhgS06Xn4tPv
wPJkehimEHmtH0fnb3BEW+FVx5wkWKOoRNGyiBGUX19Ug329IJHTNBYnwFusC0fW
9ku1nHufUdcFyvrwFUvWZpho28ixWp+E1YDBcAkGopjYP7bTLt8GMz2wePFZr/0d
HAhZUmsEzBmxqEnYyZl4Oz6NcKNxZANR/EAp/5YUWhAFLrswxvjEFVwgoFTzACJq
Guox+XjKMcwNqLQgzKiQXqKz0XUVIRvyOK2Bwd9JC+nrteVMv1MLkUIAwgmvt6Ph
t/afiXwd/UqGRzhYBkM2pR9DQZ81lPCpaKfDi/HSua6vTE5DltoPoWN20WrXAgMB
AAGjggLkMIIC4DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT596KIXPMBL6E5
DTsyWfx4rvetGjAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2VkOGQwLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAv
MS9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0IzMjU5RkM3OEFFRjdBRDFBLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQqFHWBD0AwDQYJKoZIhvcNAQELBQADggEBAEND
hWMmTGmzSjZF8sgzHrIcywa8mABwPNPb5dVWGGz8Cqbmfh3tjqQ3lE3L1ux/n/nW
gSOR/5hZfw+Y8D/Nt5QqTN/6XAyw49ro6dk5W28BIUCiZsLiusR4faeC/Xju+52b
eMkzj27UM9UGwCe9yFTFtwUlmxTVZnx93/CSDrmlNd5LNjuf79Bgo3dYXLfz856r
HOO185XvWv3/KYIqCMswPBhbY8eAlwmGUtLSMNjCmVRdUY/U9Idun3R4w12yMEjD
/EccvU8uZXU0OTd3hwg0veBWdTj+4ahrbu/t5+uJR7t/r0kRqFINb7T3cVYYgz//
5iKU7u08sNC1L5r2Tmo=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:43 2025 by rpki-client