Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57NMfOO8UTgeLzBduPMwaa1Uj-Y.cer
File: 57NMfOO8UTgeLzBduPMwaa1Uj-Y.cer (raw, json)
Hash identifier: tR+1xV+JjmFpgzuPAFb2C+7c26FffZMWX8fAPny+pJ4=
Subject key identifier: E7:B3:4C:7C:E3:BC:51:38:1E:2F:30:5D:B8:F3:30:69:AD:54:8F:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA03C6A9161C70F58E33A60EF244A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 141.47.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:03:c6:a9:16:1c:70:f5:8e:33:a6:0e:f2:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7b34c7ce3bc51381e2f305db8f33069ad548fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:e1:32:66:10:73:f0:0a:cb:19:7e:27:c9:
eb:ea:ef:8d:93:76:21:a0:ae:a3:8b:c7:6c:16:e9:
d0:13:3a:f5:3c:94:c9:b0:7b:dd:2f:25:bb:90:a1:
e0:d8:49:47:70:be:df:80:2b:d6:3d:0a:a0:e2:64:
06:22:43:b9:84:0f:bc:3b:67:68:95:3b:ca:49:5a:
d2:9c:12:23:8c:74:82:e4:de:f3:7d:92:e1:65:0e:
a8:d7:57:be:fb:45:9f:96:7e:4b:bb:fd:91:05:35:
36:be:7c:28:06:d7:16:d2:62:3e:30:c3:af:9d:45:
1a:9e:5f:82:b9:79:79:7f:be:3f:ca:9d:17:53:4a:
f9:72:f9:4f:7d:1d:97:8e:e4:95:23:c6:22:27:49:
e7:af:d6:e9:a2:25:60:a5:fe:b9:4b:41:69:08:ca:
4e:98:af:4a:6a:6c:92:e0:c0:ad:27:fb:49:d2:cf:
73:64:50:a7:03:dc:8f:ff:64:52:19:47:51:5f:09:
c3:f0:34:fd:bd:b7:fb:58:e4:78:1f:44:21:49:ea:
8f:84:51:71:bc:80:5a:66:62:c9:2f:b4:bf:a9:ae:
34:54:86:35:f6:13:5d:fa:36:0c:76:bd:2f:28:b5:
ad:35:97:ef:27:3a:25:05:13:c0:25:55:f7:21:70:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:4C:7C:E3:BC:51:38:1E:2F:30:5D:B8:F3:30:69:AD:54:8F:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:d4:92:a0:9b:4b:29:71:2e:46:e6:48:81:08:07:36:0b:66:
c8:53:f6:75:92:7e:fb:9e:52:b6:c4:23:79:5b:bd:03:3e:17:
c9:ec:8f:ff:8d:0d:8d:a3:06:1c:08:fb:87:01:8e:a6:b2:50:
e2:ef:70:26:9d:fb:fa:e2:bc:c9:db:8b:2b:42:bd:17:aa:e2:
98:e1:17:fe:51:81:e6:77:ba:b7:87:ef:9d:17:20:73:ca:f3:
73:ab:ea:30:a1:f2:a7:a2:b9:ee:f2:6b:f1:62:5c:cc:af:bc:
db:9d:bb:50:f7:e6:57:24:8e:a7:02:e3:c7:e0:a4:6e:41:1e:
f0:18:fb:6b:e2:c2:b3:e6:e8:44:52:77:33:80:e7:6b:ac:57:
70:97:18:38:9b:2e:26:7a:3f:6c:99:3a:38:05:32:d9:a9:42:
41:fa:c7:2b:ad:c8:43:1c:39:b4:f3:d7:3f:90:17:8a:1a:74:
c0:01:19:33:65:37:22:57:df:fb:fc:fc:14:e6:d6:53:f7:8d:
6f:66:f3:91:83:09:98:be:3b:95:22:05:2f:45:61:99:83:1f:
a0:76:e6:fa:08:52:d8:6d:62:68:0e:fa:e8:1d:31:75:8c:f0:
5f:05:ac:ce:c9:5f:58:6a:c5:d6:0d:84:82:28:fb:d0:a4:d1:
4f:fb:09:53
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZ8Y+gPGqRYccPWOM6YO8kSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2IzNGM3Y2UzYmM1MTM4MWUyZjMwNWRiOGYzMzA2OWFkNTQ4ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VXhMmYQc/AKyxl+J8nr6u+Nk3Yh
oK6ji8dsFunQEzr1PJTJsHvdLyW7kKHg2ElHcL7fgCvWPQqg4mQGIkO5hA+8O2do
lTvKSVrSnBIjjHSC5N7zfZLhZQ6o11e++0Wfln5Lu/2RBTU2vnwoBtcW0mI+MMOv
nUUanl+CuXl5f74/yp0XU0r5cvlPfR2XjuSVI8YiJ0nnr9bpoiVgpf65S0FpCMpO
mK9KamyS4MCtJ/tJ0s9zZFCnA9yP/2RSGUdRXwnD8DT9vbf7WOR4H0QhSeqPhFFx
vIBaZmLJL7S/qa40VIY19hNd+jYMdr0vKLWtNZfvJzolBRPAJVX3IXDcZwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFOezTHzjvFE4Hi8wXbjzMGmtVI/mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzY0OWE5
OC0zMzlhLTRmNGItODc1MC02ZTlkM2I3MzJiMDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNjQ5YTk4
LTMzOWEtNGY0Yi04NzUwLTZlOWQzYjczMmIwOC8xLzU3Tk1mT084VVRnZUx6QmR1
UE13YWExVWotWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAjS8wDQYJKoZIhvcNAQELBQADggEBACjUkqCb
SylxLkbmSIEIBzYLZshT9nWSfvueUrbEI3lbvQM+F8nsj/+NDY2jBhwI+4cBjqay
UOLvcCad+/rivMnbiytCvReq4pjhF/5RgeZ3ureH750XIHPK83Or6jCh8qeiue7y
a/FiXMyvvNudu1D35lckjqcC48fgpG5BHvAY+2viwrPm6ERSdzOA52usV3CXGDib
LiZ6P2yZOjgFMtmpQkH6xyutyEMcObTz1z+QF4oadMABGTNlNyJX3/v8/BTm1lP3
jW9m85GDCZi+O5UiBS9FYZmDH6B25voIUthtYmgO+ugdMXWM8F8FrM7JX1hqxdYN
hIIo+9Ck0U/7CVM=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:33 2026 by rpki-client