Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
File: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer (raw, json)
Hash identifier: l8TLZZa8OPz21SvcZgm17sPGbMMAnFukWuONLGpw2Sk=
Subject key identifier: 01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA3313E07CB2A03378C71D3F3CFAC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.25.12.0/22
IP: 2a00:7be0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:33:13:e0:7c:b2:a0:33:78:c7:1d:3f:3c:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01f10a032279133d6d64c82531435e5787d11d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:83:2b:c2:da:db:47:d1:bc:c3:30:d2:5e:
2e:8f:b8:ca:17:3b:5e:5f:18:e8:f2:93:e6:72:38:
5d:5c:41:76:06:cf:cd:a3:e6:61:b3:ef:e3:31:d2:
4b:8d:64:50:30:b3:53:15:5c:f4:7e:97:43:9e:ac:
6c:53:98:6f:47:71:be:b3:3a:11:3d:b5:3b:2c:14:
c9:16:68:9f:91:85:75:80:bd:99:66:16:c5:ef:56:
dd:7b:8c:41:2e:a9:78:70:11:9b:3b:a2:1c:48:02:
e2:1f:c1:24:4a:75:3b:fc:4c:3d:6a:76:b7:48:a1:
7e:8d:38:a6:d8:53:6e:45:76:bc:a0:db:4b:e4:d7:
a8:47:a4:24:cf:96:ef:a3:30:88:48:17:63:4b:2c:
c5:c3:d6:30:0f:57:f8:90:05:d1:12:ff:ce:00:43:
93:db:6b:96:1b:bd:4a:3a:6b:ab:44:77:3e:b9:3c:
f5:3b:31:58:97:e6:0e:c9:c4:e3:f8:62:3d:5e:9e:
48:83:f4:eb:0d:1a:58:7e:a8:a0:33:7a:1e:99:e3:
a5:42:89:11:6c:ce:a6:42:64:55:cd:ec:35:9a:57:
2e:20:03:85:17:d3:ef:c4:df:9d:69:48:fa:09:b7:
10:7a:80:12:a0:d3:08:54:d6:ad:11:b9:83:2d:a5:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.12.0/22
IPv6:
2a00:7be0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:fc:bf:92:5d:fd:27:1b:83:65:3c:98:ba:c9:d1:0a:ce:ec:
74:fe:f9:34:16:bf:62:9b:3a:c6:62:07:41:7d:dc:91:6d:d2:
dc:80:89:bc:42:39:f3:fc:97:1f:9f:78:51:ee:91:78:a0:a1:
ee:55:a8:cb:4d:83:63:0b:19:d6:64:cb:e8:4d:8f:07:c8:f3:
3f:47:f9:b1:9a:f4:68:06:a2:65:ef:a0:86:46:13:54:e3:83:
f7:4e:63:56:6c:10:f8:a0:01:32:73:4f:5e:4b:cb:6f:7a:fa:
2d:a8:63:20:b4:59:81:80:51:19:30:90:97:5a:5b:40:c4:e5:
3f:0a:36:7b:cd:04:99:7c:ce:7e:21:1d:82:24:35:c6:dd:59:
0d:d0:bd:b6:8b:61:e2:f8:da:e8:05:b4:8e:b4:b2:80:eb:85:
05:6f:43:17:b6:f6:cc:dd:d7:53:ad:6a:07:aa:16:89:95:5c:
00:91:f3:bd:80:34:dd:01:5e:42:05:68:77:c8:50:45:21:5d:
79:ee:af:a0:bc:74:34:c1:c7:d2:7d:6e:01:ea:19:d1:70:d5:
e1:6a:23:20:1a:38:0e:1c:0a:a1:21:d8:88:f0:a1:f0:68:bf:
08:45:b5:7d:33:4f:a3:f0:e5:c7:41:93:3b:33:44:b7:65:b7:
d1:51:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:36 2026 by rpki-client