Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9fMqZlil1oO3buatNGdFqzm8hyU.cer
File: 9fMqZlil1oO3buatNGdFqzm8hyU.cer (raw, json)
Hash identifier: CvXTcnNZifcoXdK3zBDVHFmU8ZDxhv5L6SyCLRho1BY=
Subject key identifier: F5:F3:2A:66:58:A5:D6:83:B7:6E:E6:AD:34:67:45:AB:39:BC:87:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D4655FBC7FEB93EF83C3D5D025785ADC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/9fMqZlil1oO3buatNGdFqzm8hyU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 31 Mar 2026 23:58:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.103.159.0 -- 193.103.161.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:46:55:fb:c7:fe:b9:3e:f8:3c:3d:5d:02:57:85:ad:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 23:58:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5f32a6658a5d683b76ee6ad346745ab39bc8725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:3d:d5:c2:fd:6f:23:83:02:86:7a:fe:2c:
ca:5e:89:a4:43:75:cb:c2:81:cf:20:ba:f5:13:57:
e9:fd:17:ac:ba:e8:6a:f7:f6:3a:43:ba:1d:21:1c:
c0:95:9e:8f:be:ee:1e:ce:d4:17:83:89:78:b3:99:
c2:db:7d:fa:23:27:99:eb:44:df:10:2a:af:51:6e:
f8:00:63:5e:cf:13:cf:44:b3:44:fc:55:14:62:ba:
e7:f7:01:7c:43:ac:98:02:fe:d3:b2:3c:3d:85:f3:
30:3f:1f:2c:e9:6d:55:c4:8a:26:81:65:bd:e3:5e:
44:c0:ef:64:c5:3a:2b:9c:08:96:2e:ce:05:e6:9d:
43:4f:a8:d2:a7:6b:fa:eb:8a:3f:45:b8:ad:40:2a:
88:8f:97:b7:56:47:0a:5d:16:5e:60:5a:91:34:24:
74:3c:03:4e:d9:12:6c:6c:01:a1:82:ea:a1:f3:1c:
ec:5f:9a:f7:7d:e4:18:23:2f:9f:46:41:0a:d4:8b:
6e:cf:7e:b2:d3:c4:5f:5b:4a:11:20:62:54:3c:86:
37:29:a9:6f:df:40:b4:dd:40:1f:25:74:54:96:b9:
8d:75:69:40:30:66:a1:19:ac:14:e7:57:6a:51:95:
88:45:98:9f:bc:2d:32:da:0e:85:0f:e8:70:60:51:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F3:2A:66:58:A5:D6:83:B7:6E:E6:AD:34:67:45:AB:39:BC:87:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e76193-3504-4b6c-b5df-8d0f4e2a3b0c/1/9fMqZlil1oO3buatNGdFqzm8hyU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.159.0-193.103.161.255
Signature Algorithm: sha256WithRSAEncryption
6f:8d:e8:78:4c:3a:b5:2f:a9:27:cf:e4:10:ba:c3:94:91:98:
f5:79:ee:c1:88:57:5a:b2:4a:ec:a7:2e:80:bb:35:65:6d:fb:
a0:db:a2:f7:4e:00:bd:24:50:2f:e7:19:f7:67:16:37:61:17:
4e:af:3b:57:c3:f8:e2:38:12:31:aa:9b:e0:5a:45:23:9c:cf:
2c:c1:0f:84:1e:dd:35:ac:66:de:fd:fd:37:70:dc:43:90:2f:
77:96:48:08:fc:6b:97:94:df:f6:f3:53:5c:a6:61:db:c4:b4:
15:e9:cf:3c:31:d1:50:84:d8:4c:ae:ea:ca:48:48:20:89:65:
15:fe:17:9c:52:3b:22:6e:c3:ad:fc:89:6e:3b:b7:9f:53:fe:
a6:52:a7:6f:10:73:bf:7a:bd:5d:57:81:93:52:db:ce:49:e8:
9c:b8:4a:97:34:d1:b6:85:6f:b0:6e:09:ef:a7:83:93:2a:25:
8a:0b:81:5b:67:bc:ad:a2:55:fb:47:49:65:e3:13:e1:d9:f8:
e1:fc:99:ea:2c:0b:cd:10:f3:f7:3e:b7:50:e5:ca:e7:49:f4:
a9:69:52:51:86:80:00:48:b5:b9:01:ca:2f:46:23:29:6a:fd:
5d:10:7b:e6:6e:f4:db:6d:41:72:46:d6:a5:67:4a:9e:ee:87:
b5:00:d4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 20:59:31 2026 by rpki-client