Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer (raw, json)
Hash identifier: nA6WdQ9Ela6spptLuL03ACIlb2HnQn/vjqauy7aFUpc=
Subject key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77593990347A1FB1A8A7ADAF490FC092
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12561
IP: 46.31.8.0/21
IP: 195.238.68.0/23
IP: 195.238.78.0/23
IP: 2a02:4980::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:39:90:34:7a:1f:b1:a8:a7:ad:af:49:0f:c0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:93:ce:5f:fc:c7:a5:cd:c1:98:4d:ab:4f:
33:da:e9:1a:1b:74:cf:f5:03:96:ad:00:81:25:e6:
6e:5e:77:0a:a6:78:5b:2d:fe:db:eb:5f:22:97:8d:
15:8a:1c:ed:4b:86:0e:c2:e3:4d:91:6b:fc:f1:00:
72:89:c3:a2:1f:bf:14:66:3a:d8:06:99:67:7b:4b:
a2:f6:18:cf:51:c5:71:2d:a0:16:41:c6:12:1d:c9:
0d:96:d7:86:63:b2:28:f5:2c:d2:29:5d:ff:cb:43:
2e:93:8c:8f:bf:66:ee:9d:1f:32:1e:3c:66:ba:93:
a3:0a:fb:16:9b:fd:ab:cb:db:38:72:98:5d:eb:aa:
da:68:12:b1:8a:02:c6:a1:26:f0:fa:38:e3:c2:a5:
fd:b7:68:87:a6:ab:27:2e:2e:93:91:7c:02:a2:bc:
45:35:54:a7:32:5f:fb:b5:b0:fd:33:b0:fd:ec:b1:
ce:67:7e:71:e1:51:47:37:06:12:8e:47:8b:92:f6:
64:b1:e3:9d:b4:99:44:3d:c6:5c:be:5d:23:9f:19:
4a:89:3b:33:40:ff:52:49:01:57:56:12:ed:91:a8:
92:35:6a:67:e8:63:8b:a1:1d:83:b1:7a:f5:d0:dc:
cb:90:7b:f2:fb:9a:cb:75:b2:ba:97:cc:87:e7:1a:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.8.0/21
195.238.68.0/23
195.238.78.0/23
IPv6:
2a02:4980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12561
Signature Algorithm: sha256WithRSAEncryption
af:d7:60:eb:80:6a:18:16:36:21:b5:85:ed:b3:23:3b:d2:26:
e2:65:68:0f:72:27:48:c3:8d:61:7c:97:9e:fb:f1:67:ec:99:
d9:65:99:ae:91:0e:38:9c:9d:98:fa:34:7a:b6:8f:db:bc:fe:
e5:8d:e2:ac:77:e5:98:ff:3b:6e:3f:67:f0:0e:ec:03:11:b2:
be:d4:31:4e:84:93:03:fd:21:2f:82:cc:bd:03:67:9e:c0:4c:
ac:75:16:5e:67:38:51:e8:7b:41:c6:4b:5b:9b:f0:fb:09:24:
d7:50:ac:1d:10:88:a4:29:c6:8f:ac:a5:9d:61:0c:09:f1:c1:
24:52:cb:3d:21:fa:1c:7a:f1:57:f8:2a:51:47:47:17:c6:1d:
b1:1b:46:cb:14:77:25:9f:54:e2:e5:df:cf:25:f0:7b:4c:77:
1e:94:f4:ed:c3:42:9d:ae:b5:87:e1:c4:e2:0f:07:e8:7c:a4:
b2:df:58:e2:59:30:45:79:84:85:8c:ee:6a:64:2e:56:52:a9:
3f:06:00:10:1c:59:0d:ea:49:a6:81:6a:18:0e:c2:fe:e3:30:
51:3e:f5:f9:6b:b3:73:3d:e3:26:ba:43:f7:9e:69:63:30:d8:
76:d9:24:59:3b:f1:ce:1c:a7:cd:ac:98:80:8e:4f:4e:a6:52:
66:14:78:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:13 2026 by rpki-client