Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer (raw, json)
Hash identifier: uzub+U1KCkZ5+NSEHOS4tdiYpVnxNY9G0PNhWgnuoEQ=
Subject key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1A6D6E33FAC1DD43E93918CCB01368E4CC2936CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 03:45:35 +0000
Certificate not after: Tue 11 May 2027 03:50:35 +0000
Subordinate resources: IP: 2a11:f2c0:ffd0::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:6d:6e:33:fa:c1:dd:43:e9:39:18:cc:b0:13:68:e4:cc:29:36:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 12 03:45:35 2026 GMT
Not After : May 11 03:50:35 2027 GMT
Subject: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:81:19:86:dd:fc:e2:9b:7f:d5:0c:63:45:
69:69:8f:71:12:a2:28:2c:ba:7d:4e:69:33:81:65:
e6:e5:c9:bb:59:cc:47:8f:c7:1f:b3:38:b2:1d:40:
b4:7c:d7:7c:4e:0a:f6:0e:09:5a:44:48:0b:59:2b:
99:7d:ab:c0:e9:7d:c2:84:7b:c0:5e:db:bd:05:92:
c5:61:2a:dc:24:2f:b0:02:a7:c4:01:fe:a4:52:c1:
07:ad:ef:e2:8b:e8:21:e9:71:bb:c3:6e:91:2d:78:
ca:0a:8b:c5:1d:15:8b:4c:e9:72:1d:41:90:d8:28:
9c:b5:5d:db:db:f1:da:8b:3e:3b:43:f9:40:dd:e1:
f7:22:ad:b0:c7:b1:20:8b:f4:4e:ee:65:64:a0:6f:
9d:c7:c0:38:db:f9:86:a8:86:39:90:a0:20:0f:20:
75:7c:09:3b:eb:4a:26:81:64:c2:f3:d3:2b:7b:83:
c8:c6:72:a2:ab:dd:92:9a:30:95:c6:ca:db:35:ad:
33:b8:99:84:9d:ff:a5:f4:8d:13:d6:5e:e0:5b:f2:
ab:33:09:2f:58:ab:89:a6:77:47:fd:48:c2:71:50:
58:ab:48:1a:db:b0:8c:86:79:87:16:56:80:3b:ce:
f6:43:e8:92:58:f2:40:cd:59:89:7d:b1:2f:f9:f9:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffd0::/44
Signature Algorithm: sha256WithRSAEncryption
90:8f:da:11:25:5a:0c:0c:14:05:9c:27:42:12:12:0e:8a:b5:
c7:ed:98:ab:a0:5e:e7:c2:7d:e0:05:55:59:f5:bf:3e:9c:b8:
ac:ec:4c:15:53:2c:88:d9:7a:d9:91:0f:48:f6:3f:d8:29:29:
de:e3:58:90:96:54:c1:ce:75:31:d2:a8:2c:df:ad:d1:dd:31:
d9:5e:17:97:17:cf:3a:ec:a7:2b:00:66:54:57:97:9e:5e:39:
7e:fa:df:3b:9a:d2:56:44:fb:9e:8d:1f:34:82:1e:5d:c7:e4:
ff:e6:7b:74:79:1c:2a:08:ef:18:ef:38:d7:78:56:77:67:11:
50:86:22:3c:e9:37:40:20:66:75:6b:4a:ff:2c:86:6a:35:f8:
bb:7e:48:95:bb:ce:ad:b8:47:8c:9f:30:c8:30:4a:4f:d0:93:
7a:a0:1f:7c:6c:38:fb:58:4d:f7:1f:e2:7d:90:b0:8a:3b:4f:
2f:ef:89:7b:be:0d:79:3f:dd:4a:4e:0a:dc:4e:56:7d:7c:7b:
51:e5:f0:5b:84:04:39:03:69:14:e0:c9:e1:39:3a:d1:eb:4f:
48:59:df:05:a7:6a:c6:08:7b:0b:48:d6:d0:00:e1:6d:c3:69:
ae:b5:39:78:1c:14:ac:de:2a:4e:82:5a:ad:1e:f5:f1:a5:e4:
f8:00:dc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:25 2026 by rpki-client