Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
File: 96bbW7t29jQkBjgoT45bto_DF2I.cer (raw, json)
Hash identifier: PTRZ85XDwlF9vdfLXI4EFjzRVJBTRnBLNn8Xafzb7NI=
Subject key identifier: F7:A6:DB:5B:BB:76:F6:34:24:06:38:28:4F:8E:5B:B6:8F:C3:17:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAB065AF8D8518C7E50D93C42E8E3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43727
AS: 44604
AS: 62288
AS: 203454
IP: 5.187.64.0/19
IP: 31.210.192.0/19
IP: 77.241.240.0/20
IP: 91.195.126.0/23
IP: 91.202.24.0/22
IP: 93.157.144.0/21
IP: 109.106.128.0/19
IP: 178.210.32.0/19
IP: 185.33.160.0/22
IP: 185.177.96.0/22
IP: 2a00:1440::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:b0:65:af:8d:85:18:c7:e5:0d:93:c4:2e:8e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7a6db5bbb76f634240638284f8e5bb68fc31762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:39:ca:4b:8d:95:c8:35:76:76:ea:b0:26:
24:23:27:aa:19:79:17:0f:5b:51:7c:f6:3c:89:32:
e1:4c:56:13:8b:1a:97:44:47:d7:b5:a3:f0:95:f6:
36:0e:e6:7d:a6:9e:78:13:f7:5b:ce:4a:17:8b:6a:
73:e7:d5:e6:65:3a:dd:5a:e1:f4:6d:9b:8b:43:47:
57:5c:cc:6c:bb:39:48:dc:28:ef:54:ee:65:ed:f1:
11:d9:6a:72:ec:fb:c8:58:1a:51:57:bf:84:81:61:
9e:7d:d8:98:84:16:10:47:23:c9:f7:d2:94:17:a0:
e9:21:72:44:25:b4:0f:7d:c2:99:22:a1:47:cd:59:
d6:82:92:84:24:61:c5:91:22:0f:58:aa:6b:71:b5:
95:63:c0:3c:50:0e:1d:6c:bb:80:0a:7b:40:57:81:
87:1e:c3:dd:3c:b8:ac:45:5c:5b:f0:02:fd:7c:9a:
b5:f9:fb:87:64:38:10:da:91:1f:f7:c5:d3:9d:25:
05:b5:cb:69:21:88:a9:40:7d:33:2c:61:0e:ff:8f:
41:2e:c4:24:1d:18:37:ca:a2:9d:9f:b0:7b:85:cc:
ca:b9:aa:05:98:6a:a7:a9:87:a4:03:c7:0e:cf:21:
30:85:34:68:52:60:7c:3c:b5:67:8c:e6:c2:51:13:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A6:DB:5B:BB:76:F6:34:24:06:38:28:4F:8E:5B:B6:8F:C3:17:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.64.0/19
31.210.192.0/19
77.241.240.0/20
91.195.126.0/23
91.202.24.0/22
93.157.144.0/21
109.106.128.0/19
178.210.32.0/19
185.33.160.0/22
185.177.96.0/22
IPv6:
2a00:1440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43727
44604
62288
203454
Signature Algorithm: sha256WithRSAEncryption
79:d4:70:f8:36:be:de:fd:82:92:9a:5d:79:3c:e0:66:2d:89:
da:cc:a9:c5:e3:09:9f:2c:24:34:6a:76:6a:98:da:6b:28:be:
d6:db:d2:e0:ec:a0:20:d7:91:30:f3:3e:54:db:c8:80:eb:de:
94:be:06:24:6d:14:96:04:78:05:b8:37:a5:fd:19:62:91:7a:
d9:34:5c:18:00:5e:e4:b8:49:7d:53:3f:b4:29:47:fb:f6:5d:
e5:ac:23:1b:d5:08:17:b5:32:11:e4:9a:aa:21:94:00:00:c6:
e3:01:c5:93:c0:86:04:0a:3f:20:7f:06:8f:cb:e0:e7:ed:f1:
cc:ee:be:33:35:fb:75:54:dc:c5:96:40:11:75:52:45:33:64:
68:22:87:35:d7:45:2c:8f:00:93:0c:d9:c1:ea:3b:38:88:3f:
e2:79:f2:53:22:9c:ab:ad:42:56:46:51:c9:45:5a:86:9a:ad:
35:c1:cc:28:66:b1:1f:fa:27:19:a0:66:e0:d8:45:fc:41:80:
31:b3:36:f0:ab:dd:76:a7:e5:94:46:5d:e0:50:a1:b3:47:8d:
ee:f2:b4:46:90:f0:3c:68:26:c3:d9:4e:0c:5b:e6:80:5f:a1:
30:9f:ef:22:25:66:aa:79:08:d2:e0:85:06:bb:92:9a:81:22:
b3:ae:7b:05
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgISAZ8Y+rBlr42FGMflDZPELo46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2E2ZGI1YmJiNzZmNjM0MjQwNjM4Mjg0ZjhlNWJiNjhmYzMxNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCk5ykuNlcg1dnbqsCYkIyeqGXkX
D1tRfPY8iTLhTFYTixqXREfXtaPwlfY2DuZ9pp54E/dbzkoXi2pz59XmZTrdWuH0
bZuLQ0dXXMxsuzlI3CjvVO5l7fER2Wpy7PvIWBpRV7+EgWGefdiYhBYQRyPJ99KU
F6DpIXJEJbQPfcKZIqFHzVnWgpKEJGHFkSIPWKprcbWVY8A8UA4dbLuACntAV4GH
HsPdPLisRVxb8AL9fJq1+fuHZDgQ2pEf98XTnSUFtctpIYipQH0zLGEO/49BLsQk
HRg3yqKdn7B7hczKuaoFmGqnqYekA8cOzyEwhTRoUmB8PLVnjObCURPYRwIDAQAB
o4IC9DCCAvAwHQYDVR0OBBYEFPem21u7dvY0JAY4KE+OW7aPwxdiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzUxNDQz
Ny05M2VhLTQ4YzEtOTEyNy04Yjc3MTYzNTRjOGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvNTE0NDM3
LTkzZWEtNDhjMS05MTI3LThiNzcxNjM1NGM4ZC8xLzk2YmJXN3QyOWpRa0JqZ29U
NDVidG9fREYySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF
BwEHAQH/BFUwUzBCBAIAATA8AwQFBbtAAwQFH9LAAwQETfHwAwQBW8N+AwQCW8oY
AwQDXZ2QAwQFbWqAAwQFstIgAwQCuSGgAwQCubFgMA0EAgACMAcDBQAqABRAMCkG
CCsGAQUFBwEIAQH/BBowGKAWMBQCAwCqzwIDAK48AgMA81ACAwMavjANBgkqhkiG
9w0BAQsFAAOCAQEAedRw+Da+3v2CkppdeTzgZi2J2sypxeMJnywkNGp2apjaayi+
1tvS4OygINeRMPM+VNvIgOvelL4GJG0UlgR4Bbg3pf0ZYpF62TRcGABe5LhJfVM/
tClH+/Zd5awjG9UIF7UyEeSaqiGUAADG4wHFk8CGBAo/IH8Gj8vg5+3xzO6+MzX7
dVTcxZZAEXVSRTNkaCKHNddFLI8AkwzZweo7OIg/4nnyUyKcq61CVkZRyUVahpqt
NcHMKGaxH/onGaBm4NhF/EGAMbM28KvddqfllEZd4FChs0eN7vK0RpDwPGgmw9lO
DFvmgF+hMJ/vIiVmqnkI0uCFBruSmoEis657BQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:25 2026 by rpki-client