
Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (raw, json)
Hash identifier: pGE698/lwy35O1BVHJwKnSpWl+FnzrVeAX2opZS61KY=
Subject key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 2ED9BCAC8833EAC99FD0BF03C7410D48D2463678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 14:35:04 +0000
Certificate not after: Mon 10 May 2027 14:40:04 +0000
Subordinate resources: IP: 2a11:f2c0:ffcf::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d9:bc:ac:88:33:ea:c9:9f:d0:bf:03:c7:41:0d:48:d2:46:36:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 11 14:35:04 2026 GMT
Not After : May 10 14:40:04 2027 GMT
Subject: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:a6:86:b6:d4:2d:c0:4e:03:e3:2d:36:73:
f9:a8:75:2f:eb:c3:1d:27:73:88:54:22:ad:3c:09:
ba:46:c4:df:bc:4a:0d:3c:9f:72:72:60:24:c5:d9:
a4:af:7d:60:d0:85:91:97:17:45:a5:19:c3:4c:2b:
ff:17:34:2a:3b:81:8f:fc:7d:ac:0b:b6:49:d3:75:
b0:32:38:b1:ff:65:cc:68:6d:71:d0:a0:c3:1d:fc:
f5:3e:e9:2c:14:f8:42:73:4e:3b:25:7f:59:2d:bd:
90:1b:e4:85:31:c5:c0:82:84:6e:b0:eb:6e:16:45:
e5:ca:b0:08:e4:7e:5b:43:f1:58:b4:32:6f:6e:72:
7e:c4:3d:68:f1:60:7e:17:29:0c:03:ba:ca:a5:06:
b6:0f:3a:75:52:02:8c:1a:47:3b:d6:27:1a:c6:ce:
51:dc:91:f2:90:d2:96:0c:de:63:55:9e:0f:2a:7e:
d8:a1:02:96:56:af:f6:b8:a3:06:87:cb:53:c0:d3:
eb:44:d9:d5:d3:8d:cb:9e:db:76:65:56:78:4f:2d:
a0:c4:1a:91:92:2e:5f:a7:2f:35:59:16:55:6b:53:
56:2d:2b:fc:f2:5e:fe:fb:74:d3:8c:3f:00:a4:de:
34:01:c2:1f:92:d4:f1:bb:a3:00:96:c6:0c:e0:cc:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcf::/48
Signature Algorithm: sha256WithRSAEncryption
4d:36:77:a6:00:84:b3:bf:c5:f8:bc:91:b9:d4:95:bf:4b:50:
99:ec:33:7d:01:82:27:6e:a7:62:96:a0:8a:13:1c:ec:66:05:
1e:46:09:09:45:50:2c:88:b9:10:b8:81:12:53:a8:bd:da:ed:
df:58:21:b9:07:c3:42:a6:f2:90:14:0b:42:c4:20:e3:32:7b:
31:1b:65:d0:81:d6:6f:d7:7b:47:eb:06:ed:d2:d7:2d:1a:a5:
25:50:3c:9d:01:08:29:1f:db:ad:d3:9a:2c:24:d9:11:88:23:
8f:cd:dc:d2:d1:52:ab:9f:e8:1f:d1:c1:d8:8d:e4:2b:72:7f:
90:a8:57:3e:67:56:9a:ae:72:43:c4:1c:f1:66:c2:1d:ac:6b:
31:f0:fe:e3:62:27:0f:ad:06:25:c0:73:82:f1:91:78:ad:82:
a6:02:42:44:e6:5f:92:2c:da:0c:f8:7f:aa:3b:3d:97:20:e7:
30:b6:0d:b5:f1:73:3a:fc:0d:90:93:e0:b1:ab:96:b2:b1:2c:
84:c8:6c:be:95:31:d5:4d:d1:68:4f:a6:a9:a4:cd:04:b5:83:
02:ea:13:c1:12:1b:e7:09:d3:3d:4b:bb:26:ab:8f:f0:2b:2f:
89:72:cc:8d:6d:61:ad:19:c2:d2:50:d9:10:a1:2c:9e:97:d3:
ef:61:5a:3e
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIULtm8rIgz6smf0L8Dx0ENSNJGNngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNjA1MTExNDM1MDRaFw0yNzA1MTAxNDQwMDRaMDMxMTAvBgNV
BAMTKDY5QkREMTA5MkFDRTlBMTBFNEM5NEZBRDhCMkRBM0REQ0NGNjRBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMqaGttQtwE4D4y02c/modS/r
wx0nc4hUIq08CbpGxN+8Sg08n3JyYCTF2aSvfWDQhZGXF0WlGcNMK/8XNCo7gY/8
fawLtknTdbAyOLH/ZcxobXHQoMMd/PU+6SwU+EJzTjslf1ktvZAb5IUxxcCChG6w
624WReXKsAjkfltD8Vi0Mm9ucn7EPWjxYH4XKQwDusqlBrYPOnVSAowaRzvWJxrG
zlHckfKQ0pYM3mNVng8qftihApZWr/a4owaHy1PA0+tE2dXTjcue23ZlVnhPLaDE
GpGSLl+nLzVZFlVrU1YtK/zyXv77dNOMPwCk3jQBwh+S1PG7owCWxgzgzF+1AgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpvdEJKs6aEOTJ
T62LLaPdzPZKnjAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfMzM5YmI0Y2ZmM2I0NDczMjg1NGQ5YWVmZjEwNjdkOTEvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzMzOWJiNGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAvNjlCREQx
MDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA/88wDQYJKoZIhvcNAQELBQADggEBAE02d6YAhLO/xfi8
kbnUlb9LUJnsM30Bgidup2KWoIoTHOxmBR5GCQlFUCyIuRC4gRJTqL3a7d9YIbkH
w0Km8pAUC0LEIOMyezEbZdCB1m/Xe0frBu3S1y0apSVQPJ0BCCkf263Tmiwk2RGI
I4/N3NLRUquf6B/RwdiN5Ctyf5CoVz5nVpquckPEHPFmwh2sazHw/uNiJw+tBiXA
c4LxkXitgqYCQkTmX5Is2gz4f6o7PZcg5zC2DbXxczr8DZCT4LGrlrKxLITIbL6V
MdVN0WhPpqmkzQS1gwLqE8ESG+cJ0z1Luyarj/ArL4lyzI1tYa0ZwtJQ2RChLJ6X
0+9hWj4=
-----END CERTIFICATE-----
Generated at Wed May 13 07:50:09 2026 by rpki-client