Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.cer (raw, json)
Hash identifier: PDajIUYutz2kltEhZYTbAeoIe99bYQ0cEByZC6djVjg=
Subject key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5A9EC65BCD002B58155148066E8E6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207867
IP: 45.159.104.0/22
IP: 188.68.188.0/24
IP: 188.68.191.0/24
IP: 2a0f:7580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:9e:c6:5b:cd:00:2b:58:15:51:48:06:6e:8e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:b5:42:a5:68:a0:e6:67:dc:bf:fc:51:1e:
12:ec:7d:fb:13:69:e9:dd:91:78:6f:93:64:b0:9f:
55:88:a9:a1:09:b5:a0:72:ae:df:71:40:dc:40:92:
30:54:0b:ea:ea:a4:b5:9f:65:c0:de:0e:17:76:df:
7f:27:1d:fd:3a:58:40:d2:d9:be:fb:8d:13:f7:08:
f1:73:ef:b3:0d:25:51:1a:da:af:68:32:b7:44:f6:
59:1d:7f:92:5f:64:49:a0:a9:8a:43:90:6f:89:0e:
52:5e:29:82:97:4c:e8:fa:97:ae:18:d7:9c:df:08:
3d:e7:24:48:b0:ec:b6:90:93:4f:66:45:1d:4f:d2:
19:2e:87:03:c3:eb:cc:f4:f8:78:68:41:f0:b8:a4:
c3:e4:79:96:4e:fc:1d:f8:e0:e4:8e:13:41:38:44:
de:b4:c9:5c:dc:20:87:91:9b:45:7d:e8:01:4f:3d:
1f:32:47:71:a1:a9:ed:af:4a:5f:15:ee:aa:fb:97:
c3:29:6b:63:75:de:e7:dd:c5:c6:ff:b2:c1:80:8f:
cc:ad:ca:08:a2:8d:a0:2f:83:43:ef:35:06:d5:8b:
41:53:98:54:e2:a1:b6:f1:90:70:1e:bf:7f:4e:05:
03:99:b2:15:54:88:67:f6:5d:02:ef:23:8a:07:52:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.104.0/22
188.68.188.0/24
188.68.191.0/24
IPv6:
2a0f:7580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207867
Signature Algorithm: sha256WithRSAEncryption
42:85:06:61:5d:c4:c6:e5:a0:eb:5b:60:4b:e2:fe:2d:6f:be:
cc:11:f8:0a:b7:cf:73:03:95:2b:6c:8b:47:b6:3d:94:a3:80:
96:d0:fe:62:f0:f9:67:20:79:d2:0f:5e:66:f5:41:a6:5b:1d:
c6:df:88:eb:87:5b:52:97:fd:4b:49:7a:f6:33:c7:c4:ea:51:
a3:3c:ed:7b:2a:1e:29:18:56:d2:b9:7b:ae:49:69:a5:44:8c:
6b:71:70:ba:44:46:ea:6b:2e:07:e6:7a:9c:88:aa:78:e2:f0:
fa:bf:80:07:86:73:d7:5c:b6:bb:2c:71:0a:7e:01:7a:43:4d:
db:e1:6a:c6:3c:a9:41:ff:ea:10:bf:a2:88:20:ea:d3:1e:5c:
f7:9c:59:5c:1b:94:f6:4f:87:52:cf:cf:88:0f:13:47:28:9b:
5a:8a:ab:5d:a2:66:b0:9d:87:92:f2:f2:b7:5a:47:ce:02:56:
bb:71:33:cb:2d:7c:81:1d:86:39:d3:76:82:05:49:26:7a:c2:
65:38:4a:fa:b3:09:6b:7e:aa:e6:ec:05:46:32:11:68:97:42:
ea:c9:a7:9a:c7:89:6d:45:ac:c4:2a:ee:59:7c:0a:e5:e0:72:
d3:a2:2a:0e:11:25:ab:c1:18:62:10:f9:98:f2:15:cd:5f:c4:
47:1e:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:28:47 2026 by rpki-client