Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93Dqo9PfpR2TxIN1uo6SmRehIoM.cer
File: 93Dqo9PfpR2TxIN1uo6SmRehIoM.cer (raw, json)
Hash identifier: 6gHtCUsTLpSSTLZPYYzYCEJBz9/alcBPXODzMob8Jl8=
Subject key identifier: F7:70:EA:A3:D3:DF:A5:1D:93:C4:83:75:BA:8E:92:99:17:A1:22:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1A648428156C807A423AB391F0F25B770
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/93Dqo9PfpR2TxIN1uo6SmRehIoM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Nov 2026 11:18:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.26.144.0/22
IP: 194.53.84.0/24
IP: 194.104.24.0/22
IP: 194.104.100.0/22
IP: 2001:67c:3c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:48:42:81:56:c8:07:a4:23:ab:39:1f:0f:25:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 4 11:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f770eaa3d3dfa51d93c48375ba8e929917a12283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:7f:3b:be:f3:60:02:7f:5f:a6:55:8b:ee:
22:6f:0f:77:da:87:ba:a2:35:9b:fd:69:76:1d:87:
74:30:b9:bc:8d:e7:0f:22:11:47:64:2c:35:e6:fa:
73:30:ec:9c:1f:35:e9:24:90:d3:a8:40:d2:07:15:
95:41:75:2f:61:f9:3a:70:2e:1c:87:5a:3d:1e:4a:
a5:88:22:13:69:a8:cd:c7:49:5c:b8:e2:ef:13:f2:
ad:51:58:fe:97:41:c9:71:d0:c2:fa:d8:70:0f:00:
8f:dd:84:a9:e5:a4:d9:cb:5a:7b:dc:10:44:4d:b2:
42:44:0f:b3:ea:40:92:ea:95:00:61:2d:c1:60:9d:
5b:5b:38:44:f9:65:c1:3d:99:48:3e:96:b4:17:ee:
0d:d1:74:b6:80:4c:d8:af:ad:c2:f2:0a:25:91:19:
fd:57:59:e7:6e:b3:20:89:58:80:d5:93:e8:87:9f:
b3:dc:9f:70:70:2a:d3:10:cf:b2:c5:84:c6:c5:26:
29:06:37:12:a9:0a:58:c4:a8:bc:c3:3e:8f:34:ae:
19:e7:d0:a6:57:e2:39:9b:b4:68:e9:e7:8f:a7:c3:
f1:20:8d:d5:b1:9e:08:29:73:6e:e9:f8:f4:f8:86:
85:da:9e:45:db:13:d0:0d:68:ee:f9:01:28:1d:1a:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:EA:A3:D3:DF:A5:1D:93:C4:83:75:BA:8E:92:99:17:A1:22:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/93Dqo9PfpR2TxIN1uo6SmRehIoM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.144.0/22
194.53.84.0/24
194.104.24.0/22
194.104.100.0/22
IPv6:
2001:67c:3c4::/48
Signature Algorithm: sha256WithRSAEncryption
35:cb:9c:3e:4f:bb:9c:64:08:66:96:ab:8c:81:af:0b:c3:d5:
86:91:30:73:45:1c:09:28:c4:02:93:f2:10:51:63:bf:87:ad:
88:17:61:f1:94:82:98:bc:08:f1:e3:4b:8b:89:2f:90:00:db:
f4:4f:d6:14:12:bc:72:ef:10:47:58:a6:c2:1b:23:6b:54:8d:
8b:9a:f7:0f:4c:c4:40:a6:45:f1:6c:f6:69:3e:b2:bd:0e:c5:
83:26:43:10:17:50:a0:49:ff:79:32:f8:83:c3:5a:e7:8c:e7:
c9:03:08:c3:1e:6c:6b:f2:26:b4:a5:07:8c:b3:05:2a:5e:87:
ad:a8:72:ba:d6:27:73:4a:aa:dd:50:72:ad:09:42:69:1a:07:
e0:5b:93:39:ff:41:27:d9:93:c5:39:8f:fc:c2:fd:a8:d9:a3:
62:da:02:63:88:d6:36:d0:f6:5f:d0:22:06:6c:cf:0a:39:7a:
32:f2:0e:25:b7:97:08:71:e2:f9:d2:a1:c5:dd:9e:3e:d1:ed:
be:76:c4:2c:de:d7:4b:93:db:74:d4:cb:e7:1c:48:31:88:37:
56:83:12:54:e8:b5:0f:c8:cb:11:ca:87:e5:dc:4b:1c:e0:3a:
be:7e:28:d5:54:4b:f2:d4:0e:df:60:5d:b9:3e:72:a0:09:eb:
67:03:84:ae
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAaGmSEKBVsgHpCOrOR8PJbdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMTA0MTExODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzcwZWFhM2QzZGZhNTFkOTNjNDgzNzViYThlOTI5OTE3YTEyMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXN/O77zYAJ/X6ZVi+4ibw932oe6
ojWb/Wl2HYd0MLm8jecPIhFHZCw15vpzMOycHzXpJJDTqEDSBxWVQXUvYfk6cC4c
h1o9HkqliCITaajNx0lcuOLvE/KtUVj+l0HJcdDC+thwDwCP3YSp5aTZy1p73BBE
TbJCRA+z6kCS6pUAYS3BYJ1bWzhE+WXBPZlIPpa0F+4N0XS2gEzYr63C8golkRn9
V1nnbrMgiViA1ZPoh5+z3J9wcCrTEM+yxYTGxSYpBjcSqQpYxKi8wz6PNK4Z59Cm
V+I5m7Ro6eePp8PxII3VsZ4IKXNu6fj0+IaF2p5F2xPQDWju+QEoHRq7ewIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFPdw6qPT36Udk8SDdbqOkpkXoSKDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzlhNGMw
OS03MWYyLTQyMzQtOGQ4NC1kMjZmYTE0NTUyZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvOWE0YzA5
LTcxZjItNDIzNC04ZDg0LWQyNmZhMTQ1NTJmZi8xLzkzRHFvOVBmcFIyVHhJTjF1
bzZTbVJlaElvTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF
BwEHAQH/BDMwMTAeBAIAATAYAwQCwhqQAwQAwjVUAwQCwmgYAwQCwmhkMA8EAgAC
MAkDBwAgAQZ8A8QwDQYJKoZIhvcNAQELBQADggEBADXLnD5Pu5xkCGaWq4yBrwvD
1YaRMHNFHAkoxAKT8hBRY7+HrYgXYfGUgpi8CPHjS4uJL5AA2/RP1hQSvHLvEEdY
psIbI2tUjYua9w9MxECmRfFs9mk+sr0OxYMmQxAXUKBJ/3ky+IPDWueM58kDCMMe
bGvyJrSlB4yzBSpeh62ocrrWJ3NKqt1Qcq0JQmkaB+Bbkzn/QSfZk8U5j/zC/ajZ
o2LaAmOI1jbQ9l/QIgZszwo5ejLyDiW3lwhx4vnSocXdnj7R7b52xCze10uT23TU
y+ccSDGIN1aDElTotQ/IyxHKh+XcSxzgOr5+KNVUS/LUDt9gXbk+cqAJ62cDhK4=
-----END CERTIFICATE-----
Generated at Wed Nov 11 19:33:54 2026 by rpki-client