Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer
File: 9R2ExrZtJSOMstRz3oU5PLI8CNM.cer (raw, json)
Hash identifier: TAnV6n3nl369V9RTe1s+Uwn5EZWvx3EFa7FKRIIlek0=
Subject key identifier: F5:1D:84:C6:B6:6D:25:23:8C:B2:D4:73:DE:85:39:3C:B2:3C:08:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F5BC125C70DDA5B5F430377805F300A75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Jul 2026 13:53:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.58.40.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:c1:25:c7:0d:da:5b:5f:43:03:77:80:5f:30:0a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 13 13:53:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f51d84c6b66d25238cb2d473de85393cb23c08d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:77:3a:01:08:61:5d:e1:b5:60:7a:d4:c5:
89:2f:be:ba:05:9a:03:29:5c:e5:05:c1:30:55:9a:
de:24:e7:c7:78:5e:53:98:d5:86:2b:89:44:c7:4b:
09:b1:fb:a4:bb:db:f7:b0:11:f7:03:06:8a:6c:20:
d6:23:e6:b6:c0:c7:a2:03:50:f3:02:3e:48:67:31:
66:bb:e3:e9:d2:b9:5e:e1:d9:a7:f2:88:70:ac:48:
bd:40:8e:3d:f1:de:e4:6b:fb:24:56:c5:78:02:8b:
f1:e5:7c:cc:3b:e5:cf:10:c1:46:db:e8:04:57:76:
c9:e0:43:45:a2:e7:d2:85:48:86:72:13:56:7d:0d:
c5:4c:61:e9:19:f9:3a:2d:2b:41:b5:af:54:a9:fa:
4e:85:39:5e:a9:7f:f7:7f:18:30:6f:5c:2f:87:59:
c4:60:22:9b:d7:3d:61:39:26:b8:71:43:4c:49:a7:
ba:dd:99:35:1d:6b:cd:8e:ed:fb:3b:c8:9f:da:ff:
9f:4b:e6:21:ef:71:6d:73:37:2d:93:c6:d5:ae:1e:
38:d0:cc:74:47:5d:38:1c:4c:b0:7e:65:34:ad:fe:
0f:4b:3c:ae:93:98:22:d9:78:7f:4e:9e:eb:cf:e0:
a2:31:44:e6:41:0e:28:8b:f1:b2:ae:0d:44:a0:94:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:84:C6:B6:6D:25:23:8C:B2:D4:73:DE:85:39:3C:B2:3C:08:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.40.0/23
Signature Algorithm: sha256WithRSAEncryption
05:2a:ae:72:05:cc:04:b3:9f:19:07:8c:8f:c1:bd:1d:3c:12:
09:80:91:3a:76:21:f1:a1:be:e4:db:0c:d3:a2:96:5a:67:95:
af:54:e6:68:82:7d:70:f2:48:fd:6f:81:69:85:d0:26:07:4a:
7c:87:b5:b1:af:cc:47:da:3f:4d:e7:d3:c5:2c:0a:94:56:e8:
80:60:c2:17:ce:c5:d4:b9:bb:4d:38:d1:1c:a3:a1:76:58:c4:
ce:fe:73:9f:1e:40:84:9d:40:0f:18:95:e3:01:c2:1e:2f:5f:
a8:1d:e5:66:95:c2:d1:ef:df:5d:44:ea:63:56:88:65:39:21:
ac:8f:94:ec:6e:78:49:9d:6c:7b:e8:a7:71:03:18:62:cd:ed:
8b:8a:c9:a7:3f:3d:1c:16:d9:e3:97:b2:4a:32:5c:a0:e5:3b:
f8:d1:07:cf:84:59:a0:53:bd:27:eb:cc:e6:ee:5e:3f:0a:ee:
3f:0b:d4:38:9a:b2:2c:f1:69:e4:22:44:ff:cf:13:05:e4:4d:
62:18:93:be:5a:6a:93:54:cd:ee:cc:db:31:a8:b5:fb:9e:36:
1f:a9:5b:42:dc:9d:11:cd:60:41:a2:1d:85:64:3a:73:b2:21:
65:c1:86:62:18:b8:62:7c:ec:bc:d5:e9:c6:53:37:fa:02:d2:
b7:28:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:06 2026 by rpki-client