Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4W18aCexRufirc7Dy30-7Pe8j8o.cer
File: 4W18aCexRufirc7Dy30-7Pe8j8o.cer (raw, json)
Hash identifier: Mzipfr916tSTnmpiocZ2/L7NIxYmPd/ib9Vq3NmGWTw=
Subject key identifier: E1:6D:7C:68:27:B1:46:E7:E2:AD:CE:C3:CB:7D:3E:EC:F7:BC:8F:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E6BE5216D4CFE7ACC99F5A1413E19907
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c20500-4a68-4fee-9e57-2fbf615fffa2/1/4W18aCexRufirc7Dy30-7Pe8j8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c20500-4a68-4fee-9e57-2fbf615fffa2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 06:40:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.85.132.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:be:52:16:d4:cf:e7:ac:c9:9f:5a:14:13:e1:99:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 06:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e16d7c6827b146e7e2adcec3cb7d3eecf7bc8fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:26:c4:ba:f3:2d:b2:85:57:0f:b9:3b:9e:
90:fb:92:ca:e1:46:62:e5:d0:48:f9:91:67:09:59:
c9:ec:6d:92:c6:0b:35:c6:79:ce:80:89:16:5a:f4:
e8:7c:a3:69:4b:82:04:f0:8e:ce:92:f4:d6:08:df:
bf:3f:7b:99:b4:f3:c5:46:f7:13:ce:9c:09:2d:86:
72:e0:07:8e:e2:8a:29:9d:e6:04:cd:c6:2c:bc:34:
db:01:4e:f2:06:18:5a:e6:2e:2d:eb:d9:91:19:ea:
a3:0b:98:99:23:d6:f6:27:eb:2b:b3:21:21:94:15:
4b:f6:64:b0:4f:52:4c:9d:0f:50:cd:39:44:df:7f:
24:09:6f:5a:90:63:0c:b8:a2:d2:3b:89:35:a5:9c:
c5:1e:c0:b3:f5:8a:46:d5:b9:66:d5:0e:6c:31:f0:
d7:7b:d0:51:14:3f:ff:02:a2:f4:38:84:8b:3e:c1:
86:40:21:99:80:c8:a6:1c:a7:28:b9:9b:bf:43:d9:
59:91:fa:dd:00:1d:44:19:b8:50:1f:fb:4a:ce:a2:
93:1d:ec:d5:f2:32:e2:ce:64:4d:98:2c:a4:ee:ea:
8e:fc:16:88:7f:0c:f9:6d:14:68:dd:6e:27:2c:e0:
66:06:a8:eb:80:29:ad:59:ce:90:66:9d:da:84:52:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6D:7C:68:27:B1:46:E7:E2:AD:CE:C3:CB:7D:3E:EC:F7:BC:8F:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c20500-4a68-4fee-9e57-2fbf615fffa2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c20500-4a68-4fee-9e57-2fbf615fffa2/1/4W18aCexRufirc7Dy30-7Pe8j8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.132.0/24
Signature Algorithm: sha256WithRSAEncryption
45:06:f0:e9:ca:05:c1:14:7b:d5:d8:59:87:9b:d5:2e:9a:87:
f8:a6:1a:03:dc:28:57:ac:2d:05:74:61:c0:e3:ce:7a:af:03:
ca:83:80:ea:a1:49:70:1c:67:17:2a:db:60:b1:c1:08:c4:98:
bf:66:7f:3a:c2:0b:6f:04:53:6a:02:60:e6:b3:d7:62:35:73:
11:3e:db:9b:f8:68:91:39:3a:57:2d:af:ee:11:6c:3d:2d:0a:
10:67:1d:78:88:b6:57:a4:b9:62:ea:34:d0:54:fb:04:50:1a:
1e:0c:75:4e:77:3a:e9:33:f5:c8:eb:9f:b5:71:f4:20:45:a3:
e6:13:4f:f6:04:f9:32:2b:11:5b:e2:5e:0e:91:ae:ce:b4:4e:
33:9b:13:3f:d8:b4:68:3d:98:32:2b:3f:52:18:0c:c7:fc:0e:
e8:72:7e:9d:2b:4f:fe:23:8b:1f:e4:4d:52:61:87:32:de:36:
2d:3b:69:b8:c2:41:c2:29:22:11:bb:c4:c6:52:76:3c:c8:7f:
c1:31:d9:ad:37:21:12:81:8a:57:07:4f:d8:5d:b6:d1:ea:1c:
53:71:eb:f1:07:8a:8f:1a:aa:b4:22:d9:84:bd:04:04:e2:24:
2b:2d:ee:cc:f9:29:95:12:4d:b9:e7:19:1d:bf:e0:7f:6f:a6:
2a:79:f7:ab
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaDmvlIW1M/nrMmfWhQT4ZkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTI4MDY0MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTZkN2M2ODI3YjE0NmU3ZTJhZGNlYzNjYjdkM2VlY2Y3YmM4ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/AmxLrzLbKFVw+5O56Q+5LK4UZi
5dBI+ZFnCVnJ7G2Sxgs1xnnOgIkWWvTofKNpS4IE8I7OkvTWCN+/P3uZtPPFRvcT
zpwJLYZy4AeO4oopneYEzcYsvDTbAU7yBhha5i4t69mRGeqjC5iZI9b2J+srsyEh
lBVL9mSwT1JMnQ9QzTlE338kCW9akGMMuKLSO4k1pZzFHsCz9YpG1blm1Q5sMfDX
e9BRFD//AqL0OISLPsGGQCGZgMimHKcouZu/Q9lZkfrdAB1EGbhQH/tKzqKTHezV
8jLizmRNmCyk7uqO/BaIfwz5bRRo3W4nLOBmBqjrgCmtWc6QZp3ahFK1LQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOFtfGgnsUbn4q3Ow8t9Puz3vI/KMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2MyMDUw
MC00YTY4LTRmZWUtOWU1Ny0yZmJmNjE1ZmZmYTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvYzIwNTAw
LTRhNjgtNGZlZS05ZTU3LTJmYmY2MTVmZmZhMi8xLzRXMThhQ2V4UnVmaXJjN0R5
MzAtN1BlOGo4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQALVWEMA0GCSqGSIb3DQEBCwUAA4IBAQBFBvDp
ygXBFHvV2FmHm9Uumof4phoD3ChXrC0FdGHA4856rwPKg4DqoUlwHGcXKttgscEI
xJi/Zn86wgtvBFNqAmDms9diNXMRPtub+GiROTpXLa/uEWw9LQoQZx14iLZXpLli
6jTQVPsEUBoeDHVOdzrpM/XI65+1cfQgRaPmE0/2BPkyKxFb4l4Oka7OtE4zmxM/
2LRoPZgyKz9SGAzH/A7ocn6dK0/+I4sf5E1SYYcy3jYtO2m4wkHCKSIRu8TGUnY8
yH/BMdmtNyESgYpXB0/YXbbR6hxTcevxB4qPGqq0ItmEvQQE4iQrLe7M+SmVEk25
5xkdv+B/b6Yqefer
-----END CERTIFICATE-----
Generated at Wed Nov 11 20:15:34 2026 by rpki-client