Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer (raw, json)
Hash identifier: WR0HxeXP9GDznbe8sZ9a16C5TvNsBu71Y/WROL4S/KU=
Subject key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7834C1FF7F8B01B88300C1E5B8499367
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 213.177.177.0/24
IP: 2a14:400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:c1:ff:7f:8b:01:b8:83:00:c1:e5:b8:49:93:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:24:6e:a7:ec:6d:11:b8:75:c8:8a:3d:9b:
8c:5e:59:eb:60:f8:fa:b1:03:49:e4:7e:cf:4b:c8:
a1:06:a5:79:d6:6b:a4:76:1d:43:99:f5:b4:45:de:
b3:e4:b7:d5:df:00:2c:59:3d:18:c5:51:f5:6a:a2:
dd:a1:02:aa:96:e1:34:e4:aa:45:05:fc:8a:7f:a7:
9f:69:7c:10:7c:9d:f1:d2:df:11:e8:73:94:ea:67:
ca:fd:8a:17:8c:6d:f1:af:23:eb:5f:75:42:3b:40:
fa:cf:0c:ef:a0:02:7a:74:68:7e:25:e1:b9:87:65:
d1:6e:31:73:44:d4:cb:3d:cd:69:27:99:3f:83:ab:
1d:4c:a2:c0:9a:f1:7d:f0:59:81:44:58:ef:bc:13:
3f:41:aa:37:17:7f:e8:b5:38:e8:75:6c:ee:bb:c1:
81:8e:c4:07:9e:69:f0:92:d6:31:3f:df:01:12:f9:
b1:2a:5e:f6:b9:dc:c1:14:f1:5f:80:dd:c9:61:91:
bf:a3:20:29:70:ca:46:6f:9e:93:2f:fc:58:2e:2d:
23:65:41:8b:48:1c:6e:40:58:10:53:60:a0:e0:60:
79:d7:0b:7e:08:64:29:7d:6b:ab:fc:a5:ca:14:72:
93:4c:6f:42:90:ad:ba:92:f2:eb:d2:fc:2c:6d:b9:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.177.0/24
IPv6:
2a14:400::/29
Signature Algorithm: sha256WithRSAEncryption
22:d3:a9:00:06:c5:7b:03:3e:dc:76:01:77:d9:7b:5c:19:33:
3e:2c:aa:24:2a:ad:58:8e:39:7e:19:90:53:b5:e4:47:7a:39:
f6:93:3a:81:c1:83:02:36:e0:5f:51:36:18:b8:de:90:4b:d6:
cc:41:fd:48:13:91:c6:04:fc:0e:b7:58:91:c7:bd:44:a1:0c:
44:13:5b:02:a1:e8:54:82:d6:bb:b3:b5:8f:52:ad:9e:16:9b:
90:65:9d:44:b9:b1:ab:a6:1d:9c:13:f1:3f:a3:d3:29:64:b1:
1b:5c:33:0c:5f:55:0f:84:c5:46:5a:8c:96:16:72:c7:34:a9:
96:a4:30:5d:51:57:f2:e2:e8:24:cc:73:6c:29:39:ec:ae:6d:
a8:d1:ee:cc:ec:44:88:37:a4:53:80:91:0a:77:dd:99:89:ca:
27:cb:d2:e4:38:72:d5:4c:14:82:85:e4:32:1f:58:67:f0:f0:
66:cd:34:86:fd:84:ef:51:e3:99:59:9f:e1:db:ed:f1:44:62:
cb:ef:ca:14:ae:93:ac:7a:cf:61:15:f7:a8:5b:52:19:46:42:
9a:87:93:57:aa:c8:31:86:a4:1f:5c:5d:80:5c:18:2e:bc:78:
d4:86:f3:bc:28:e8:e9:1b:5f:9c:84:3f:a3:96:61:04:2c:7a:
58:15:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:08 2026 by rpki-client