Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
File: 7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer (raw, json)
Hash identifier: 0fCvGWkcy01p+n1ThfTWHcAWnWSP9G5h0DTknKV6Gt0=
Subject key identifier: EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F94786A24ECAD128ABB3A88E54947F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.125.141.0/24
IP: 2a01:e080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:47:86:a2:4e:ca:d1:28:ab:b3:a8:8e:54:94:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:81:83:df:a5:64:f8:e6:1f:61:88:88:0f:
b5:35:cf:9e:bc:a4:21:fc:52:b2:6e:2a:f4:f2:5e:
1b:4f:86:a2:02:80:43:2f:b6:b1:49:04:8a:c2:e5:
d0:95:b2:87:69:03:c2:9d:6a:0a:eb:ef:e2:39:84:
48:a1:12:54:ff:8a:24:4e:ca:cf:4e:63:1c:cf:f9:
14:47:27:dc:80:df:29:34:4a:06:38:13:06:b7:81:
9f:36:a0:ba:df:b8:b9:ec:8e:4c:7d:8d:1a:ae:42:
b7:be:d0:13:47:b2:64:62:b1:2e:17:7e:fa:59:c7:
0e:f2:a9:25:54:6d:3d:d6:2e:6c:a7:3c:18:30:a9:
81:e4:31:63:be:79:ea:de:63:8b:bd:bc:1b:4d:73:
78:9f:7a:ad:a5:ea:5a:10:86:44:68:bd:69:9a:80:
b1:78:e6:d4:df:3a:e6:8b:d9:f0:09:2e:ec:f4:94:
ad:a0:f9:22:51:69:80:71:c9:0d:d0:4d:b0:de:76:
ca:ee:35:a0:10:bb:fe:70:54:76:bc:77:8d:fc:19:
1c:f4:e8:ed:a0:ba:b8:01:df:44:e4:23:67:39:6c:
bd:5b:c9:3a:a7:73:11:df:f7:81:0f:7a:22:4a:1e:
f8:b0:e8:72:43:52:69:94:81:33:9d:c1:1c:99:40:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.141.0/24
IPv6:
2a01:e080::/29
Signature Algorithm: sha256WithRSAEncryption
26:80:74:04:94:0c:e8:7a:8f:34:62:a9:54:5a:42:3e:17:61:
cb:6b:18:e1:2b:3e:5f:db:c6:a0:86:55:52:e9:d1:d1:85:dc:
77:c2:24:f9:d2:cc:36:1e:81:38:f6:65:9e:ee:74:e6:4a:c1:
fe:db:43:e5:dc:41:22:35:f2:33:dd:c0:b8:27:22:fc:18:cd:
13:13:66:ab:8e:87:91:ab:92:c1:e2:e6:c4:16:ec:31:b8:a9:
fd:6b:54:0e:85:df:cf:c1:b8:30:03:58:3c:0b:69:9b:30:98:
ec:6c:39:b1:2f:a0:3a:b5:44:a1:31:43:80:b3:cb:45:3c:74:
49:b9:49:dd:7b:3e:76:67:6c:5e:e4:15:ab:5b:cc:9d:53:df:
0e:e6:06:f9:b6:96:1c:8f:c5:d4:ff:8c:28:e5:37:2d:88:29:
2c:1a:5b:c9:15:66:dc:9a:fd:d2:08:7f:e0:01:da:99:b6:56:
71:3e:f7:59:26:8a:ad:9f:f7:cf:37:bc:1a:16:66:10:30:27:
8d:c0:b4:09:52:1f:d8:ed:c4:78:80:71:a3:a8:70:c9:92:17:
b6:ec:0b:78:a6:5a:76:1a:91:ff:24:f1:0d:bb:48:83:44:f4:
47:9a:cc:e7:f8:88:b3:e9:e7:61:69:fe:25:3d:93:d3:d9:8c:
24:c5:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:12 2026 by rpki-client