Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer (raw, json)
Hash identifier: /RCjwgzWeLVJw/o51HXrnEmO6OfR9aMGP/fRJmEoisY=
Subject key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 2FFF07C062BFC43CA8DADB455EFB2F812E3B25BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 22:49:40 +0000
Certificate not after: Tue 11 May 2027 22:54:40 +0000
Subordinate resources: IP: 2a11:f2c0:ffcd::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ff:07:c0:62:bf:c4:3c:a8:da:db:45:5e:fb:2f:81:2e:3b:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 12 22:49:40 2026 GMT
Not After : May 11 22:54:40 2027 GMT
Subject: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:bc:48:86:ea:57:a3:1f:54:46:13:70:99:
fc:de:86:55:f0:de:59:15:ce:ee:07:0f:01:50:bd:
fd:e2:ea:96:c7:b3:25:1c:23:21:8e:18:32:a3:dd:
1b:37:32:9b:8c:ca:9f:be:2a:cf:52:12:be:0a:66:
8d:33:a8:ba:2d:31:ac:a2:db:9d:2b:b0:db:4a:aa:
7c:87:4b:19:06:7f:20:98:98:0b:09:dd:f6:51:a6:
0c:ea:a8:9b:ad:3a:82:25:eb:0c:03:b3:88:d1:d1:
20:0c:d1:19:88:5a:67:cb:6c:82:72:9b:34:92:87:
59:d5:11:72:7b:c7:4d:21:1a:14:4e:6d:b2:92:a2:
b2:0b:2c:35:81:09:a9:da:ad:76:cc:0b:4f:4b:a5:
56:40:d1:86:fd:8d:d1:74:b8:ca:a6:d9:15:ea:c5:
82:b7:cd:82:8e:97:94:e4:67:36:77:4e:15:1c:cd:
94:f9:74:43:3b:0c:c1:34:4b:8d:33:18:a2:b7:23:
96:6b:99:f6:b8:b7:17:76:f7:d1:a8:7b:54:ec:8c:
7d:c2:59:51:09:d8:90:04:41:e3:69:09:3e:33:77:
12:c7:0b:bb:7f:45:63:ce:2b:3e:87:e2:f0:5c:0b:
b8:87:4e:e3:19:cc:17:cf:80:1c:27:27:68:7f:9d:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcd::/48
Signature Algorithm: sha256WithRSAEncryption
a0:b1:ed:55:7e:ed:da:8e:74:ea:39:3e:21:d8:44:e0:95:3b:
3e:56:66:2a:46:b7:49:51:ce:80:e3:8b:f2:3a:03:91:13:f7:
91:79:ea:13:94:3e:08:7e:74:be:45:d6:16:d5:46:9d:84:ea:
c0:da:ed:8e:9d:b1:9d:39:42:33:d7:6c:71:92:ec:bb:ca:6e:
41:c1:9f:1a:7a:63:21:4d:24:f6:da:cb:b7:8d:19:a4:66:03:
69:44:b7:93:f8:cb:75:c3:6f:62:35:09:41:0c:cb:da:a2:d7:
e5:dc:92:5d:07:be:75:68:72:dc:de:68:5e:93:24:29:4f:de:
36:92:da:db:c4:61:ba:3b:24:70:7a:f3:24:73:e2:35:c7:86:
8e:79:50:d0:ae:1a:2d:29:37:36:c2:19:f8:af:f3:e5:03:b4:
80:81:80:84:1f:f9:41:94:12:54:17:c8:fa:7e:dd:a8:64:0a:
bc:22:28:6a:f2:37:57:93:99:ad:f0:b9:fb:42:74:45:54:d2:
af:d1:90:f7:76:5b:ca:45:26:d4:1c:59:f8:3e:d6:07:5e:89:
88:a1:98:84:30:01:b1:8f:ee:28:f4:99:95:71:41:60:de:48:
32:9f:7e:7d:ea:13:e6:c2:27:a8:1f:3e:13:c2:68:c3:0b:56:
2e:5d:f4:47
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUL/8HwGK/xDyo2ttFXvsvgS47Jb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNjA1MTIyMjQ5NDBaFw0yNzA1MTEyMjU0NDBaMDMxMTAvBgNV
BAMTKDFGQjlDODUwRjkxM0Q2QzA5QTc3NkQ4QkIzODMyN0JFNzAxQjBGODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTLxIhupXox9URhNwmfzehlXw
3lkVzu4HDwFQvf3i6pbHsyUcIyGOGDKj3Rs3MpuMyp++Ks9SEr4KZo0zqLotMayi
250rsNtKqnyHSxkGfyCYmAsJ3fZRpgzqqJutOoIl6wwDs4jR0SAM0RmIWmfLbIJy
mzSSh1nVEXJ7x00hGhRObbKSorILLDWBCanarXbMC09LpVZA0Yb9jdF0uMqm2RXq
xYK3zYKOl5TkZzZ3ThUczZT5dEM7DME0S40zGKK3I5Zrmfa4txd299Goe1TsjH3C
WVEJ2JAEQeNpCT4zdxLHC7t/RWPOKz6H4vBcC7iHTuMZzBfPgBwnJ2h/ncdZAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfuchQ+RPWwJp3
bYuzgye+cBsPhzAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfY2M2YzBkMGY0YzA3NDI0MzkyZDgyMzg3MjBjYzZhODIvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4
NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA/80wDQYJKoZIhvcNAQELBQADggEBAKCx7VV+7dqOdOo5
PiHYROCVOz5WZipGt0lRzoDji/I6A5ET95F56hOUPgh+dL5F1hbVRp2E6sDa7Y6d
sZ05QjPXbHGS7LvKbkHBnxp6YyFNJPbay7eNGaRmA2lEt5P4y3XDb2I1CUEMy9qi
1+Xckl0HvnVoctzeaF6TJClP3jaS2tvEYbo7JHB68yRz4jXHho55UNCuGi0pNzbC
Gfiv8+UDtICBgIQf+UGUElQXyPp+3ahkCrwiKGryN1eTma3wuftCdEVU0q/RkPd2
W8pFJtQcWfg+1gdeiYihmIQwAbGP7ij0mZVxQWDeSDKffn3qE+bCJ6gfPhPCaMML
Vi5d9Ec=
-----END CERTIFICATE-----
Generated at Wed May 13 13:09:50 2026 by rpki-client