Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
File: 4H4P7Wh4uZCgYJWJih2QakdN910.cer (raw, json)
Hash identifier: NK4MKbX1MwQXFyPguG7ZRvZu8GGlgGoCF1ufernC+/A=
Subject key identifier: E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBB2BDE469C86C0E7E0FAF5E27CFD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 37.35.112.0/21
IP: 46.255.168.0/21
IP: 77.239.32.0/19
IP: 185.74.112.0/22
IP: 2a00:d420::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:b2:bd:e4:69:c8:6c:0e:7e:0f:af:5e:27:cf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e07e0fed6878b990a06095898a1d906a474df75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:69:79:03:0a:35:e8:e5:1d:4a:dc:a2:40:
c6:20:fa:f6:54:64:f5:51:ef:29:40:a2:c2:17:1c:
79:2e:c4:b8:fe:b5:75:76:ee:36:1a:ec:33:a0:20:
90:43:35:2d:ce:c4:f0:fa:7a:41:63:26:2f:5d:05:
52:76:49:4d:26:83:49:fb:9a:8f:0d:93:e1:56:d1:
ca:03:01:0f:d5:cf:69:72:75:80:ea:cf:9d:9e:f7:
9e:19:d5:e2:33:3d:d3:69:69:d2:cb:82:ac:9c:a8:
c7:25:5c:0f:c1:be:23:b9:38:20:84:e9:22:f4:3c:
23:12:03:1f:b1:c8:c8:4e:a6:e0:24:fd:d0:e0:0b:
d9:b6:1e:2f:18:fc:92:6a:3a:49:a0:01:90:5c:36:
ab:29:9b:d3:0b:65:d7:40:4c:1a:07:1d:b2:7c:10:
c3:fe:ed:cd:90:f6:9a:a3:fd:81:33:d8:41:53:8d:
1a:03:d7:03:9e:3a:39:64:36:26:f9:4d:63:fd:d9:
54:ba:86:5d:6f:69:ef:c8:a5:dc:90:9f:72:59:28:
ec:37:b7:15:11:72:55:01:39:fd:3a:95:f8:ee:65:
4e:f0:30:0e:34:fd:e8:54:9f:39:f5:80:6d:46:68:
f1:48:68:8d:6e:e6:a6:ed:ad:b1:1c:ff:53:6d:df:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.112.0/21
46.255.168.0/21
77.239.32.0/19
185.74.112.0/22
IPv6:
2a00:d420::/29
Signature Algorithm: sha256WithRSAEncryption
39:28:03:49:3e:51:ad:ee:bb:89:65:2e:a3:f7:3d:78:33:69:
d2:4f:53:0e:1e:15:13:00:40:8e:03:71:36:af:2c:dc:2e:81:
04:80:e1:b0:2f:4e:eb:3b:dc:45:e8:5f:da:cf:6c:db:78:f8:
12:06:2b:98:ea:1b:62:a1:bf:12:58:5f:9c:ca:aa:7f:7a:b1:
43:e5:79:de:f5:2b:0a:f7:ec:5d:a1:84:ed:72:4a:f6:58:3a:
47:de:45:e8:de:cc:c2:d2:57:a8:96:b6:6d:2a:21:a6:e3:e3:
0f:51:dc:4f:c0:56:43:cc:bc:ed:c4:a4:f5:7d:ca:e9:e5:39:
e6:21:a3:bb:79:fa:4e:e3:06:01:b2:89:b8:17:75:a6:71:ee:
95:fb:ca:14:a6:03:e7:32:4c:ea:af:69:22:37:61:7c:1b:8d:
04:75:bf:71:40:21:90:4b:bb:28:72:8f:ee:0c:74:a1:16:b7:
8c:97:61:98:21:7f:fc:e5:06:03:a3:75:0e:2a:7b:18:96:00:
e3:43:b3:b4:9e:a8:36:5e:11:59:10:bb:66:2b:d9:83:6b:7c:
f3:ee:6f:37:ca:a4:c1:2e:7c:71:bc:9c:b2:42:fd:a9:96:78:
00:af:a1:4c:79:ab:cd:95:ca:d9:08:66:c6:26:df:7e:3e:eb:
73:a4:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:25 2026 by rpki-client