Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1-WDdbYGBnf_qdOiYYNeRQOmSprM.cer
File: 1-WDdbYGBnf_qdOiYYNeRQOmSprM.cer (raw, json)
Hash identifier: KCyqAuXquG/MpWQbzHFUwB5h9xdIffXQIRAFgg9ql5g=
Subject key identifier: F9:60:DD:6D:81:81:9D:FF:EA:74:E8:98:60:D7:91:40:E9:92:A6:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A193B02585321D71CE8363FF6E442CEAD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/1-WDdbYGBnf_qdOiYYNeRQOmSprM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 31 Oct 2026 20:39:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.230.120.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:b0:25:85:32:1d:71:ce:83:63:ff:6e:44:2c:ea:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 20:39:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f960dd6d81819dffea74e89860d79140e992a6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:68:0b:64:0b:a0:3b:f2:11:84:7b:a8:b6:
73:07:e8:9f:d6:ab:f3:65:05:c0:4e:1c:5e:86:58:
f6:23:95:ae:09:0f:27:ad:01:e2:7c:61:3d:bf:18:
af:36:9c:b9:0d:07:e0:01:ac:a1:93:66:e0:d8:11:
de:cc:b4:0f:53:8d:7e:7d:5d:d5:30:3a:a1:66:38:
65:88:52:4a:2e:28:90:af:16:d5:80:fc:2d:d4:09:
56:9e:3d:b5:ab:61:13:a7:ef:df:94:0d:3b:73:80:
3b:a1:04:59:34:d0:ee:6d:a4:65:2e:42:3b:49:87:
c4:a4:51:d9:e9:88:49:b9:fb:35:73:c7:ca:f9:af:
04:9e:18:c0:e4:d6:f5:bb:15:52:03:2b:57:04:bb:
63:1b:65:6f:fb:18:a9:37:16:da:7f:1b:9b:ae:2f:
f0:70:90:9d:df:f4:a7:75:4e:ca:28:fa:bf:51:3b:
18:2a:23:bb:2f:1c:44:d9:bd:45:9f:3d:cb:5a:26:
29:80:71:86:b1:96:25:a9:d8:28:fc:38:59:44:4f:
1f:73:7c:4d:f7:74:8a:3a:e2:e9:5f:bd:e7:26:e8:
f4:fc:ef:b2:22:bb:d9:e2:16:3c:e8:ea:01:f3:f4:
1c:26:20:3f:3d:42:07:43:f7:f8:09:5f:9a:a2:cf:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:60:DD:6D:81:81:9D:FF:EA:74:E8:98:60:D7:91:40:E9:92:A6:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/1-WDdbYGBnf_qdOiYYNeRQOmSprM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:19:b7:6b:d8:38:ea:b6:c5:99:14:05:f6:94:de:8c:c9:9f:
71:89:93:9f:d0:46:11:e9:84:67:7f:89:d6:01:1d:8f:06:cb:
bb:cf:51:b1:7d:9e:fb:43:ed:7d:4c:f2:15:60:ed:2a:cc:06:
54:ef:4e:c6:bf:6e:b7:68:aa:e8:50:c7:ff:57:d6:89:44:0b:
cb:a6:54:e5:d9:a7:89:ab:ce:2a:1f:d3:27:94:09:c1:4c:7b:
1f:ef:60:5e:bb:64:d6:ce:e6:6f:71:be:ca:38:95:3d:b7:62:
e9:01:4d:2e:95:59:81:14:56:ea:da:0e:bc:0e:62:17:8b:e5:
98:4f:81:0a:0b:af:ee:89:22:77:eb:a2:f2:ce:d8:6c:0d:74:
4f:6c:03:b9:dd:a1:6f:fe:d3:9a:b6:93:4c:74:57:e9:16:d4:
02:98:f1:5d:ef:a5:84:96:44:38:e7:0b:80:07:e3:31:f4:4b:
4a:e9:d4:3a:a4:e9:cf:67:64:fc:06:43:01:4b:03:fd:bd:af:
43:64:b9:bb:9a:ba:22:94:7d:9a:35:41:dd:7e:25:f8:1d:24:
83:66:72:d1:22:98:c2:a0:28:53:cc:7c:ba:66:05:26:ee:cb:
65:30:f6:f3:4d:5f:bc:8d:4a:5a:f7:1e:98:e3:6c:7a:99:08:
cd:36:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:39:56 2026 by rpki-client