Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
File: 4742E76772F118A935D69FD40F69858085C80999.cer (raw, json)
Hash identifier: YOEqdU/ioph2JNLoh5g8pHmTk2iN8H8Yw5adZ8GfBFo=
Subject key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 300993E71000E1426EB84F67EF2F77786C5E8880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 22:49:44 +0000
Certificate not after: Mon 10 May 2027 22:54:44 +0000
Subordinate resources: IP: 2a11:f2c0:fffa::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:09:93:e7:10:00:e1:42:6e:b8:4f:67:ef:2f:77:78:6c:5e:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 11 22:49:44 2026 GMT
Not After : May 10 22:54:44 2027 GMT
Subject: CN=4742E76772F118A935D69FD40F69858085C80999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:ee:9c:c8:9a:29:68:3e:54:f9:ff:65:bf:
2e:e8:9b:63:ee:0c:88:0e:af:eb:68:54:e7:29:b0:
7c:39:2f:13:30:d5:7f:b0:bd:8a:e0:e7:21:85:fa:
e8:86:2d:49:2e:70:ee:55:0a:6b:85:7d:60:da:a8:
65:e4:9d:76:2d:ae:25:76:a9:59:49:9f:aa:a0:09:
14:a3:f3:da:61:6b:67:ac:fc:ae:fd:40:06:61:c6:
7a:68:ae:4a:df:33:76:47:e2:a4:76:73:e3:c3:28:
41:9d:8d:ad:5f:41:43:62:b5:22:2d:79:d0:c3:79:
ac:75:af:05:b1:5e:07:a0:4a:b7:df:60:19:24:9d:
47:10:31:92:59:4e:47:c2:62:9f:29:21:43:d1:9c:
b1:78:7c:a0:33:c0:55:cb:16:ba:ba:fb:bb:b3:48:
f0:f8:d0:3d:68:37:f0:cc:b9:8c:d2:e8:e1:37:74:
0a:57:d6:41:22:9d:62:07:4b:e1:9a:38:c6:8b:fe:
1e:fc:c3:a8:57:5c:ed:5c:70:4f:a7:17:54:0f:67:
da:4a:b0:a0:5f:af:c6:c8:2c:c5:ca:ee:cb:7d:c2:
dc:49:b1:76:a0:24:0b:53:88:b8:bf:be:83:c7:0d:
a3:e2:ff:58:67:61:2c:54:b2:68:14:0b:4c:47:f6:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
2e:09:eb:80:cf:c5:fe:a2:be:24:1b:6a:82:b8:d9:a2:bc:88:
2c:e3:96:10:f0:b1:68:8a:46:59:75:b8:9d:6c:8f:a0:3e:7a:
8c:97:8a:9d:13:49:45:87:bd:2e:2d:0e:4b:b2:20:5c:4d:b4:
77:fe:4f:c7:e2:44:4a:2a:d2:41:27:52:0e:e0:8b:43:23:8e:
53:fc:40:7c:5f:b2:0a:b7:ae:35:43:84:b7:f3:6d:57:51:42:
f8:66:de:5b:31:94:c4:6f:c1:99:49:19:3c:9e:c4:56:17:1e:
51:21:64:26:6d:74:2c:1d:25:75:24:92:e1:4d:2a:e2:f5:9b:
97:a2:84:92:e8:e8:13:2d:b8:f8:09:0c:1d:26:c7:b5:e8:10:
2c:e6:b4:74:ee:29:62:f1:8d:ef:52:d3:d7:fc:42:69:70:41:
f4:bc:06:ea:6b:5c:3c:98:af:e2:9d:90:96:85:cc:97:d0:23:
fb:fe:53:17:ff:b1:8b:77:51:35:42:00:08:8b:c1:36:3d:25:
ea:d6:f9:c7:62:26:be:61:eb:ec:a6:8c:2f:70:c7:99:c4:8a:
bb:9e:de:ae:8d:2f:2c:b7:6a:d4:67:f7:89:0c:63:7a:cd:b4:
a9:a0:93:7e:fe:bc:fd:b0:6c:6d:2f:a8:b7:a6:28:38:56:48:
31:90:b3:5c
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUMAmT5xAA4UJuuE9n7y93eGxeiIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNjA1MTEyMjQ5NDRaFw0yNzA1MTAyMjU0NDRaMDMxMTAvBgNV
BAMTKDQ3NDJFNzY3NzJGMTE4QTkzNUQ2OUZENDBGNjk4NTgwODVDODA5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDt+6cyJopaD5U+f9lvy7om2Pu
DIgOr+toVOcpsHw5LxMw1X+wvYrg5yGF+uiGLUkucO5VCmuFfWDaqGXknXYtriV2
qVlJn6qgCRSj89pha2es/K79QAZhxnporkrfM3ZH4qR2c+PDKEGdja1fQUNitSIt
edDDeax1rwWxXgegSrffYBkknUcQMZJZTkfCYp8pIUPRnLF4fKAzwFXLFrq6+7uz
SPD40D1oN/DMuYzS6OE3dApX1kEinWIHS+GaOMaL/h78w6hXXO1ccE+nF1QPZ9pK
sKBfr8bILMXK7st9wtxJsXagJAtTiLi/voPHDaPi/1hnYSxUsmgUC0xH9g2xAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHQudncvEYqTXW
n9QPaYWAhcgJmTAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfNjBhMDkwYzI3YzA2NGUwNzhhN2Y2ZTQ0NmE0ZmJmNzAvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAvNDc0MkU3
Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA//owDQYJKoZIhvcNAQELBQADggEBAC4J64DPxf6iviQb
aoK42aK8iCzjlhDwsWiKRll1uJ1sj6A+eoyXip0TSUWHvS4tDkuyIFxNtHf+T8fi
REoq0kEnUg7gi0MjjlP8QHxfsgq3rjVDhLfzbVdRQvhm3lsxlMRvwZlJGTyexFYX
HlEhZCZtdCwdJXUkkuFNKuL1m5eihJLo6BMtuPgJDB0mx7XoECzmtHTuKWLxje9S
09f8QmlwQfS8BuprXDyYr+KdkJaFzJfQI/v+Uxf/sYt3UTVCAAiLwTY9JerW+cdi
Jr5h6+ymjC9wx5nEirue3q6NLyy3atRn94kMY3rNtKmgk37+vP2wbG0vqLemKDhW
SDGQs1w=
-----END CERTIFICATE-----
Generated at Wed May 13 12:38:49 2026 by rpki-client