Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
File: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer (raw, json)
Hash identifier: vO9w0giTjgGO45RBWmYt9MBVOfJpci60MP5RZ4t88sw=
Subject key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE37B3666972A65F3D9E0A1E3E7ECB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 167.104.200.0/21
IP: 2a06:8f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:37:b3:66:69:72:a6:5f:3d:9e:0a:1e:3e:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d886f55b45a068985743450b7ae50f4ca73d6109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:92:6c:5f:4d:2d:21:85:10:0e:cb:bf:b4:
ad:99:b8:26:93:0a:4a:97:f9:82:94:0a:49:b3:d8:
78:0b:7a:28:6a:86:94:c2:61:aa:1d:c6:73:92:08:
e3:fa:d5:7f:b4:fc:52:87:75:c2:1d:1b:90:55:ea:
81:76:8e:fa:fe:7e:95:16:b4:5f:fa:01:e7:36:95:
2f:b6:a2:b7:f4:e1:fd:89:5c:e3:39:8d:3e:d6:85:
b1:f6:71:8e:5f:00:b1:0f:5c:b8:43:d8:b2:88:b3:
62:c3:9c:f3:64:54:56:e1:b8:24:c2:d6:06:86:27:
d5:6a:76:2c:60:ba:ac:1c:fd:b5:28:ff:b8:f0:b2:
4f:80:9e:e7:64:eb:00:18:c1:cb:0a:31:9b:40:72:
57:4b:de:75:e1:54:e5:cb:3e:2e:0d:3b:cd:d1:39:
f3:e0:0e:2f:05:ae:6b:e6:88:24:25:17:e5:44:15:
3e:c4:ac:7f:12:b2:a9:c1:1b:07:95:dc:a6:99:89:
7b:c3:31:64:13:c0:ac:ac:5d:1b:58:f9:36:93:37:
ef:07:46:58:2c:97:32:e0:24:07:60:89:7d:ad:50:
8b:33:9c:92:c3:6c:2a:83:ee:7b:e7:35:1e:2a:85:
db:0a:10:6e:c3:b5:ea:11:53:77:29:31:68:f8:39:
68:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.200.0/21
IPv6:
2a06:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
0e:de:bf:6b:74:ec:89:8d:64:6f:5e:41:9c:a3:2a:c1:c2:10:
a0:58:8f:06:51:77:6b:4e:ba:c8:af:98:d6:20:e4:61:b8:6b:
3e:e2:7d:2d:da:18:85:f0:ae:00:61:e0:66:eb:58:51:a5:b8:
02:25:f9:be:e2:fd:0f:e2:37:b3:59:9e:c0:3c:a0:a8:49:72:
d3:ec:c6:67:39:90:86:90:c7:1a:16:22:81:2c:db:50:20:a2:
a7:85:a8:6d:7f:64:37:09:86:02:6c:96:78:c3:43:40:17:e6:
1c:74:71:69:ef:b1:9a:d4:61:23:94:f5:60:4a:cb:76:47:19:
93:c7:bb:64:4d:44:f5:6d:a6:28:c3:6e:61:67:ed:78:f7:49:
3d:33:9d:b1:f2:45:9d:a3:10:c2:73:76:2f:1d:41:1c:78:80:
66:48:b5:18:7e:f7:db:c4:8d:fe:b2:b3:2f:41:a5:81:76:a3:
e2:cd:94:83:0e:ed:46:2e:37:d2:45:fd:6e:27:a8:f1:6e:c0:
9e:7f:d1:16:ed:ff:f6:cd:c3:5a:92:a5:ca:be:2b:af:fb:2b:
13:ae:c6:2f:22:ef:8d:c1:c7:39:65:f3:23:b7:65:60:11:0c:
17:e2:f0:48:54:b6:2e:bc:6a:0a:aa:5c:5a:1e:e2:bd:90:08:
de:02:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:16 2026 by rpki-client