Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer
File: 1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer (raw, json)
Hash identifier: yFENu07NLy8LasWj2tFCYQ9SNKGWTbxAeThGn9b6x2Q=
Subject key identifier: D5:36:C5:6E:94:38:56:6A:67:A5:1A:55:A7:F6:4D:1E:C0:3E:18:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A06C586CA7FB42A9407AAED29042532C74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Sep 2026 12:15:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214412
IP: 185.142.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:58:6c:a7:fb:42:a9:40:7a:ae:d2:90:42:53:2c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 12:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d536c56e9438566a67a51a55a7f64d1ec03e188c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:72:e6:4a:8d:97:19:b5:09:44:61:9f:bc:
1b:44:03:ff:10:6c:98:62:b9:58:74:60:40:85:23:
63:63:87:c6:13:09:81:79:6e:1c:70:13:0d:3a:82:
ce:f4:3d:29:66:d1:5d:9f:cf:6c:2d:c5:23:4e:7f:
8b:f8:c7:23:ce:8f:8c:e2:74:6b:d8:b5:20:5f:ef:
fc:d3:8a:f6:6c:d4:27:7a:05:17:25:9d:5b:73:7d:
38:82:e0:5c:38:db:d1:e2:3e:9f:4e:4c:62:3b:d0:
01:e6:2c:d0:9f:39:cb:e2:94:db:ef:6c:69:95:9a:
07:59:bd:35:19:02:17:79:c9:a1:88:66:34:45:95:
57:55:cb:15:56:2c:4c:3b:2e:71:3a:64:d4:c5:26:
13:88:1c:25:be:c9:2a:82:f8:da:73:7c:2d:71:55:
86:78:57:52:f2:36:00:a9:27:aa:a7:bf:38:53:c9:
00:27:91:81:a5:64:9a:43:24:a5:76:5c:88:30:f0:
85:0a:6c:7e:e8:c6:e3:79:1b:79:ec:44:0e:3e:48:
f9:87:9b:fa:47:64:30:f5:13:2c:7a:09:c2:ae:af:
0b:7c:ab:7d:72:23:83:d6:30:b6:be:3c:70:28:75:
46:bb:84:bc:fd:27:f2:5b:bf:57:66:f1:09:16:2d:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:36:C5:6E:94:38:56:6A:67:A5:1A:55:A7:F6:4D:1E:C0:3E:18:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.88.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214412
Signature Algorithm: sha256WithRSAEncryption
39:c3:a8:6a:0d:64:d4:3d:33:bd:8b:46:92:ad:36:fe:33:e2:
b2:b6:be:2d:1b:34:7e:a1:57:1f:59:31:ac:65:10:29:39:53:
ae:98:27:de:44:31:1b:45:2f:68:50:70:29:b1:e0:9d:01:c6:
38:93:dd:fa:48:79:6f:03:b4:85:92:04:7b:fc:3a:1e:10:26:
7e:aa:6a:f8:91:a1:30:1d:6c:58:21:09:5a:fb:90:46:41:f8:
23:82:77:22:a4:29:9c:29:a9:58:68:82:e8:e8:44:c9:af:55:
8b:97:43:d1:9d:e2:a3:b5:e2:a2:e5:ad:85:02:83:2c:31:73:
93:1a:b6:c0:80:51:f5:56:c5:92:72:6f:18:bb:56:13:72:c2:
ff:39:e3:99:3b:47:fc:71:4d:7b:82:ee:e7:f7:fe:90:99:11:
c3:52:40:20:e2:4d:dc:ba:7e:a1:65:88:32:0e:82:5a:08:26:
54:52:17:14:7a:d5:cb:93:18:db:d7:15:ed:2a:90:ff:b3:c0:
f6:d8:a8:9b:c9:93:ec:a7:82:40:c7:18:23:6b:43:33:95:18:
eb:9d:4f:12:f0:f8:40:f5:35:9c:4f:ba:cf:4a:ae:f5:8a:ee:
01:56:e2:95:17:8e:05:e5:1c:d2:6f:00:d6:09:01:77:25:5a:
de:3a:cd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:52:34 2026 by rpki-client