Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
File: 2UivxK9I3Sso6FSZZFe04qhDTWE.cer (raw, json)
Hash identifier: X8ynW9TnbzVJBFbkIzjybt8iei4XHLgSd0aTpb/Scqw=
Subject key identifier: D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D0653FE221D62B3D96869F82CFEB33863
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Mar 2026 13:41:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.3.236.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:53:fe:22:1d:62:b3:d9:68:69:f8:2c:fe:b3:38:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 13:41:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d948afc4af48dd2b28e854996457b4e2a8434d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:e8:51:f5:60:e7:18:3c:96:d4:4d:9b:f1:
dc:cc:c8:83:58:9e:11:fc:6e:50:4d:fb:82:ac:c9:
04:aa:5c:c5:a9:75:43:3e:cc:5e:98:95:a0:79:b7:
c7:92:28:a0:43:82:14:27:2f:46:38:52:4b:19:fc:
70:71:36:38:d7:f9:93:fb:ce:1b:dc:27:e0:4f:4c:
c1:f0:6a:6e:c0:50:2f:e6:a2:6e:f0:04:72:6d:c0:
88:be:48:b3:20:25:30:30:e6:5c:c5:cd:85:45:f2:
1f:cb:6b:89:14:36:4f:03:a1:01:e8:78:22:02:55:
fc:ab:61:ce:cd:43:1b:27:89:6c:ec:a5:b8:46:ae:
8d:37:4b:2d:ac:78:1e:94:c2:0d:83:2b:3d:2c:5c:
41:56:f7:06:5b:de:01:78:8b:e1:7b:77:10:30:4e:
36:f9:97:7e:78:54:bb:6a:4e:a8:52:47:79:1e:37:
1b:7f:b1:6e:e4:0e:f0:d9:68:4c:7c:63:54:42:e8:
1a:df:91:0c:7f:c0:a4:5b:0a:8a:77:40:5b:ff:d8:
2a:55:16:b5:dc:2f:13:b0:f6:fa:b8:e7:50:0e:a4:
98:75:27:e9:a3:27:25:b1:21:84:e9:9e:3c:43:0d:
a6:ad:e7:fb:0f:0d:0f:c9:cc:57:9d:2b:ff:ee:6c:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.236.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:d8:e0:dd:4d:e3:e7:c9:02:9d:2d:da:a5:fb:95:a1:d4:23:
6c:d1:96:84:82:7a:16:48:83:7f:9e:d5:33:3f:96:1d:94:20:
cc:87:21:5d:25:45:f2:26:35:cf:de:b4:b2:66:e0:8c:c9:24:
6a:80:f2:42:72:51:73:1a:aa:15:e7:49:bf:bf:4a:62:64:ce:
a6:57:40:9c:30:fe:13:b8:94:9e:87:a9:8c:43:53:d3:a1:10:
b7:c3:8b:f5:8b:c0:a7:8c:fa:48:04:74:26:22:1f:88:69:71:
33:bd:08:f9:df:0d:c0:9a:05:a1:12:fb:20:d3:b6:b4:7c:c5:
8d:a2:2d:5e:46:cd:e3:fc:72:4e:c6:fe:18:19:fd:f8:af:96:
0f:26:89:33:55:c8:47:c4:c5:32:36:f0:0b:28:f9:d8:6e:ce:
68:81:10:cd:6a:9b:88:f0:9f:b2:8e:bd:95:30:86:37:9d:93:
f5:ea:cc:7c:db:94:20:67:79:85:ed:f8:cc:6b:b5:85:8e:0d:
80:7d:4c:2a:58:ef:95:7a:17:ec:f2:5f:75:e6:c4:dd:ee:ca:
85:4a:de:1a:f1:3e:50:d7:e2:b4:2c:94:ee:b6:c8:87:d1:a1:
c1:2c:7e:26:d4:a5:66:0f:8d:7a:0f:5c:6a:f0:4c:76:22:e8:
c7:a7:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:30:16 2026 by rpki-client