Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer (raw, json)
Hash identifier: mXIG+Fbk1ZeMEodetY6GfQD8Qmj5O0LiVESKYsfWVDA=
Subject key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 03CB7CC9971BE698943376E0D772F4DDB3816331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 01:33:19 +0000
Certificate not after: Mon 10 May 2027 01:38:19 +0000
Subordinate resources: IP: 2a11:f2c0:ffc4::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:cb:7c:c9:97:1b:e6:98:94:33:76:e0:d7:72:f4:dd:b3:81:63:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 11 01:33:19 2026 GMT
Not After : May 10 01:38:19 2027 GMT
Subject: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:1e:84:d4:70:42:d8:43:54:a0:6e:fa:4d:
01:b0:20:8f:6b:83:a9:ae:30:a6:25:cd:09:77:25:
ca:a5:9e:1c:41:e3:3d:6f:bc:9c:0f:e1:c4:f9:c2:
58:e2:4f:ad:27:f0:5d:bb:d7:a5:12:10:8b:c4:3d:
af:f3:af:e4:9f:b7:56:0c:61:c8:58:6b:52:5f:ed:
60:16:86:b2:79:15:68:a0:be:a3:bf:54:b1:c2:ab:
58:90:58:d8:1b:0d:9e:d1:52:6b:0b:de:0e:df:5f:
93:c8:39:37:60:ac:19:d4:4c:20:0e:06:f7:32:f9:
61:9b:9d:0f:ce:03:49:35:da:bb:66:4d:1f:58:6d:
7b:1a:b5:9e:4f:16:a4:f7:8a:39:13:a1:72:11:e3:
87:54:ac:f2:d3:dd:4a:13:67:a1:a7:38:dc:21:0c:
ff:32:62:07:bd:7f:79:d8:6c:09:b3:6c:e7:15:d2:
08:64:f7:65:24:d2:64:46:1a:47:b7:8c:f3:db:83:
ed:da:8b:78:e0:e2:a6:39:18:23:95:c1:33:ed:77:
54:55:06:62:8a:47:bf:24:65:9b:13:09:5f:7f:0b:
76:77:fb:65:36:85:e0:1d:f3:b0:f2:59:e0:05:dc:
7e:e1:78:0f:29:39:a7:c8:ae:8e:f0:3d:b0:8b:a7:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc4::/48
Signature Algorithm: sha256WithRSAEncryption
95:27:73:1b:8f:80:e9:35:63:41:2e:69:26:8e:79:98:87:05:
35:70:09:de:9c:6e:df:bd:d1:cf:75:71:da:c2:e8:9c:9f:65:
d9:8d:13:d8:59:d8:21:cc:81:70:ff:5f:95:27:39:80:88:a9:
89:8e:49:9f:28:99:1a:1c:13:70:c0:f7:e2:b8:3c:ed:e7:38:
0f:4c:dd:f8:5e:db:52:99:b7:6f:85:8b:fc:e1:72:e7:7d:14:
b4:1d:0c:c3:5a:f3:7f:64:ea:ab:86:5e:5b:72:cc:0c:f1:19:
7a:15:08:cd:5d:99:27:f8:ef:68:26:f9:c2:97:6d:61:c6:2a:
6c:ea:c1:7c:0e:79:79:d3:0c:bc:36:80:e3:de:fc:cb:a7:d6:
8f:33:6f:b6:b2:4c:74:58:2a:b7:3f:a4:32:42:39:61:76:63:
85:0f:4d:26:8c:cf:f6:eb:43:cf:0b:e5:2c:8d:3a:86:6c:dd:
cf:a9:e2:7d:ee:20:7e:9c:07:3a:ba:45:8d:94:c2:2b:d1:c7:
0c:62:e4:d4:85:7a:df:6c:0f:7f:10:eb:8b:60:0b:9d:f5:a6:
d6:42:5f:7c:94:dc:42:cd:3b:7b:ee:e7:9b:6e:71:bc:d1:67:
7f:f6:0f:9c:86:2e:36:19:94:f8:2b:86:71:d8:9f:1e:15:ed:
b6:a1:1b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:11 2026 by rpki-client