Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer (raw, json)
Hash identifier: jKKziBLg4ezs1wcKFxMN/aghzNcxsgWMQwhVefr3LnU=
Subject key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DF36BD51E593840301D70AA8B783F9912
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 May 2026 14:37:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.80.12.0/22
IP: 195.10.224.0/23
IP: 2a0f:bf40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:6b:d5:1e:59:38:40:30:1d:70:aa:8b:78:3f:99:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 4 14:37:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:64:88:c1:3a:0d:da:4b:17:1b:3b:54:de:
ee:9f:88:ba:95:15:26:00:db:a6:ca:b5:b5:cb:e3:
c1:30:9c:0e:6e:f5:02:88:f8:6c:38:d9:6f:10:f4:
2c:12:73:65:07:04:4d:0b:2c:f6:9d:1c:18:8d:d2:
b8:8b:6a:b3:82:e7:d6:46:5c:62:04:13:87:31:a0:
f2:0d:99:2c:4a:92:b7:9f:e4:ac:18:f0:f3:fb:54:
59:08:67:b3:f6:07:ea:a5:32:d4:d4:8a:17:d7:b1:
f5:b1:4c:42:7e:da:8a:4a:a6:a9:e7:be:80:00:66:
87:97:56:a4:c2:8f:1a:5e:7b:06:55:2e:7e:4a:17:
d6:d2:c9:dc:4b:3f:fe:ca:67:fa:0a:40:15:9f:d0:
9b:d7:d5:2a:35:3e:c1:19:04:4f:84:13:cf:bf:88:
8f:ed:60:22:3b:29:56:35:39:3e:79:22:49:53:a8:
3b:3f:13:9e:54:37:35:69:27:fb:53:fc:fc:81:90:
6c:84:97:be:3c:98:c8:0b:bd:63:a5:81:e2:b5:48:
d7:c7:b7:ed:1b:42:3a:e8:c7:55:2d:62:3d:2f:2f:
50:1e:cd:b2:0e:72:d8:e4:ff:5e:e7:f7:51:2f:03:
45:8a:83:d6:43:3e:98:49:c1:0c:95:88:d0:13:7b:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.12.0/22
195.10.224.0/23
IPv6:
2a0f:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
17:36:93:17:f8:33:e9:e8:56:1a:51:3a:60:bd:86:54:fb:2f:
f9:17:f0:08:77:29:40:95:b5:0b:ed:f3:20:d0:1a:2e:14:88:
5b:1a:6a:4d:31:43:98:03:c6:65:b3:98:6a:81:71:70:45:1b:
60:fe:f0:29:ba:e3:56:cd:f9:6b:a0:68:ab:7d:f4:ee:8c:cf:
8e:56:dc:fa:46:c4:a9:10:a9:38:c6:88:03:41:41:86:5d:89:
4b:ef:c4:1f:eb:7a:1b:7f:ce:e2:dc:fd:60:35:7c:7b:ba:ed:
6a:b2:0d:4c:19:95:63:7f:60:f8:e4:c9:d4:6c:f2:db:28:39:
f5:a3:34:a8:66:bb:94:4e:ea:13:0d:a3:5c:e5:5a:e0:e4:7e:
a3:15:3b:f8:93:b8:e3:ab:57:e2:56:c0:02:30:7e:f5:95:44:
a0:2b:a2:c0:68:55:c4:3b:a7:d8:3d:d3:bd:6f:c4:5e:d3:50:
4d:fa:72:f0:08:ee:d7:b4:14:69:c4:2e:fb:05:26:ff:a3:8b:
3d:44:50:23:8f:47:b8:95:38:4e:5b:f8:46:2b:60:bc:d9:95:
88:52:ef:55:59:73:59:b8:52:b7:40:c6:15:76:c9:ab:47:b3:
c0:cc:1e:52:56:6d:12:aa:78:75:7c:3c:0d:39:08:80:30:a0:
1d:2a:e5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:01:38 2026 by rpki-client