Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71XGHBAPkKKJqA4f4HgexqRps8U.cer
File: 71XGHBAPkKKJqA4f4HgexqRps8U.cer (raw, json)
Hash identifier: S3kzr9A66dJ6/MzOleaTSbzAg++0MfB5rvlwzKI5NZg=
Subject key identifier: EF:55:C6:1C:10:0F:90:A2:89:A8:0E:1F:E0:78:1E:C6:A4:69:B3:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11BA4C43501507278003B8B1C35B73A4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/888994-5c91-4227-9f1d-2580c693ac41/1/71XGHBAPkKKJqA4f4HgexqRps8U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/888994-5c91-4227-9f1d-2580c693ac41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 13:12:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.84.245.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:a4:c4:35:01:50:72:78:00:3b:8b:1c:35:b7:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 13:12:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef55c61c100f90a289a80e1fe0781ec6a469b3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:9e:6f:8b:e3:98:e0:66:f5:24:60:9a:ed:
9c:f7:68:14:fa:b9:2d:81:69:fc:4d:29:fe:83:71:
9e:55:3e:3b:f3:4c:2b:b6:d5:20:6d:95:0b:99:e4:
95:f1:13:e3:46:16:76:0e:ef:8c:b3:22:66:62:94:
66:7a:92:00:f9:1a:bb:ec:08:8a:96:80:b4:45:45:
a7:8a:29:88:54:af:32:18:22:2a:40:29:6a:bd:44:
5b:cc:f7:bb:b5:23:27:b3:8f:d1:b5:61:72:2e:04:
ad:7f:1c:a6:0d:52:bd:31:d2:25:54:11:87:99:ab:
9c:d1:75:ea:07:1d:4d:37:1b:91:91:a8:e6:d0:2b:
89:b9:59:3c:c3:5c:18:c7:b3:79:bd:04:f2:95:c4:
f6:63:6b:89:58:73:f9:84:46:31:22:b3:ab:e2:ee:
18:52:fc:92:a3:1d:f3:05:5b:30:f0:33:71:98:01:
d2:1d:77:c0:d0:e0:04:18:e6:2d:6b:6e:cb:61:a2:
b7:b3:a4:c7:5a:8f:f2:24:1e:67:6d:d2:14:cf:45:
5d:c3:0e:33:da:10:61:32:b0:20:bc:10:fa:bd:a8:
65:1d:56:52:4a:71:f5:5a:3c:71:28:97:61:54:6d:
58:24:fc:06:29:36:f6:f6:07:aa:66:8b:b4:30:c7:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:55:C6:1C:10:0F:90:A2:89:A8:0E:1F:E0:78:1E:C6:A4:69:B3:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/888994-5c91-4227-9f1d-2580c693ac41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/888994-5c91-4227-9f1d-2580c693ac41/1/71XGHBAPkKKJqA4f4HgexqRps8U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ee:38:26:f3:d0:7f:03:cb:36:9a:12:3d:e9:c1:f5:a8:71:
86:9d:bc:62:10:bb:f6:e1:cb:44:7f:2d:b6:71:41:bf:42:7b:
4f:e0:37:84:15:2f:03:cb:43:a2:4f:55:74:88:81:e8:bf:77:
7c:3a:51:f3:6d:4a:5c:e9:1d:da:c1:16:63:aa:98:a8:8d:5e:
67:12:69:2d:b3:0d:53:ff:26:e2:ef:18:4a:aa:1b:b4:12:ef:
c4:cb:e3:e5:1c:15:cf:64:b0:a5:34:87:25:7f:8e:2e:2b:8f:
2c:0f:e4:89:de:7c:26:0e:1a:ac:52:f8:52:48:6b:d7:63:13:
d3:de:8c:a1:c6:30:d1:7f:83:ed:07:eb:71:50:12:43:11:56:
1e:58:c3:e6:4d:70:8d:6c:4a:20:9c:53:37:ff:89:d5:c4:c0:
84:ab:5d:99:8e:eb:59:34:40:c0:77:13:22:d9:ad:d4:fe:0f:
59:85:a8:59:6e:41:c9:7f:e1:e5:11:45:f1:bf:56:12:2c:84:
4c:6e:b7:31:b7:a6:c9:89:0c:77:d5:dd:48:ac:40:1a:e8:f6:
d8:98:7e:0a:02:7e:87:3e:83:5a:4e:ad:69:a6:e7:c1:ec:d7:
2e:06:42:5f:9d:09:b2:20:3b:be:2a:51:98:34:2f:f8:9b:4e:
28:26:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 18:43:28 2026 by rpki-client