Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
File: 7B-pzoPKFB0pqr7sAMX598upk8Y.cer (raw, json)
Hash identifier: JL4koYPARRiMyPTT4hdegYOrCzYgtX6i0ryywNbtRds=
Subject key identifier: EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E137C62720312ADA069EFCC65F3630449
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 10 May 2026 20:02:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 171.33.243.0/24
IP: 212.108.104.0/24
IP: 2a12:44c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:13:7c:62:72:03:12:ad:a0:69:ef:cc:65:f3:63:04:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 10 20:02:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:c8:0c:f0:2c:7f:c7:40:d2:1f:b7:14:40:
9a:c6:b4:81:7e:ab:e0:a0:61:fb:ba:b7:7d:b6:4a:
42:a1:14:66:24:e2:ea:4c:f2:fa:3b:3a:fb:82:8e:
76:b0:ad:a0:28:61:db:3e:16:60:da:f9:0e:3c:4f:
99:92:e6:7c:19:99:e8:5d:aa:0e:0c:31:a2:04:5e:
03:53:97:55:5f:cb:5e:d7:7c:33:31:65:05:12:c3:
cc:ff:5b:cd:ed:ed:e1:99:cf:1f:91:e0:1a:b9:31:
31:40:61:b1:0d:ee:29:ef:c0:84:65:06:b3:e8:44:
b6:dc:34:86:2e:59:12:e6:b7:51:da:b9:88:9c:d7:
0f:05:9b:43:31:8e:6e:10:94:87:cc:6f:75:c8:fc:
a8:bc:c8:a6:0c:fd:36:5d:f0:2a:ad:6d:da:25:91:
14:ba:87:1a:94:fd:f5:5f:95:cc:18:40:ec:01:8b:
1b:35:4a:12:f9:4f:1e:25:68:29:c7:96:69:46:d0:
70:48:13:5e:aa:35:7e:ae:12:ed:e1:d3:7d:d9:6e:
46:ef:86:f9:42:0e:f7:9e:de:2a:1b:c0:a1:56:aa:
0f:fe:18:61:5c:00:6d:47:c0:15:47:15:c8:d4:77:
2d:26:c1:04:c0:2a:d3:c2:0f:68:06:d7:60:06:31:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.243.0/24
212.108.104.0/24
IPv6:
2a12:44c0::/29
Signature Algorithm: sha256WithRSAEncryption
56:82:6b:46:f4:63:94:6b:d4:75:be:e7:d4:46:2a:45:66:1a:
a8:1a:a4:f5:4a:f0:3c:8b:f7:8a:82:0e:fe:98:e4:7a:28:95:
99:4d:01:88:9b:59:9a:58:08:33:95:a3:4d:6a:1a:5e:ae:89:
88:c6:38:b5:ec:43:c0:1a:f1:82:c2:49:d5:d8:d2:00:f2:37:
82:d8:b0:0e:0a:52:4d:2a:4e:c1:30:3c:41:f0:27:85:34:3a:
3f:0a:9c:91:f4:00:4a:29:53:96:af:73:44:9c:57:13:d9:67:
28:2a:e3:fa:d1:c9:15:21:c5:82:7c:f6:00:84:f9:78:38:59:
fc:f6:b1:db:eb:57:50:36:65:e6:f8:46:68:d9:d2:cd:c2:89:
84:3c:dc:e5:f9:d7:14:0c:71:d9:2b:9e:77:92:ef:40:22:c2:
73:cb:a7:4e:96:5b:1e:95:e0:8e:50:03:64:12:88:84:71:8d:
a1:dc:91:19:2f:6f:5d:fd:d8:11:f2:39:1b:50:e2:65:fb:b0:
0e:49:52:9f:6b:90:11:4b:07:df:9c:7d:1f:f0:40:43:2a:54:
34:3b:39:05:8a:b2:d2:0d:6e:10:38:55:b8:fa:58:70:42:b1:
8d:ee:9d:16:04:3a:6a:39:58:e9:bb:1d:41:a1:78:1c:b2:51:
7d:a5:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 20:59:32 2026 by rpki-client