Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
File: AkhBfH_pzOxbnarMCPznmdZzCIw.cer (raw, json)
Hash identifier: riQx67Q17POU9sY5oVDySwgNqmeQxofvFuwbq1BTMNE=
Subject key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A321F764509F635F348C311DF9CF97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.86.172.0/22
IP: 2a05:b840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:21:f7:64:50:9f:63:5f:34:8c:31:1d:f9:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:3a:25:4a:19:8d:01:f2:1a:65:72:fa:33:
8e:01:43:f1:21:a1:e8:c5:e5:4e:19:32:ed:0b:1e:
e7:3f:7a:69:4e:da:c2:4c:25:2f:6a:bb:1b:5e:ff:
47:59:57:9f:56:90:84:eb:84:f8:67:c3:0f:a3:43:
13:91:30:60:bf:cf:34:df:f8:ea:9e:96:87:bc:6b:
85:b0:a1:02:87:74:15:84:31:34:e6:2f:e6:62:1d:
e6:53:e7:ab:f3:c8:a8:e4:f6:98:c1:7b:d2:e6:a0:
a8:7f:3e:ce:4a:20:26:2b:72:09:63:ca:a7:b6:68:
d2:c9:f7:fb:98:7f:97:dc:5d:3d:9e:8e:05:5a:2b:
6c:9b:8f:54:7a:6d:b7:74:49:cf:94:0c:9b:0c:de:
9b:01:5c:bf:7e:5e:c7:3c:67:a2:2f:19:c2:f2:06:
09:5b:9f:e3:a0:e0:12:30:59:c1:cc:20:d4:9a:f1:
89:09:dd:d7:e8:bc:14:8a:80:49:b8:25:25:57:0c:
0d:46:a6:de:ce:c1:0a:8d:99:e6:05:dc:69:b6:06:
7f:2c:d7:a5:c9:f8:0d:89:c5:cf:9d:b3:78:79:7e:
4d:6f:d0:d6:b9:7a:d3:5f:4f:22:f6:a2:29:1d:eb:
fc:a7:07:62:d3:ce:64:09:23:9b:a3:49:e1:00:df:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.172.0/22
IPv6:
2a05:b840::/29
Signature Algorithm: sha256WithRSAEncryption
6c:5b:1e:e9:2a:d5:ce:87:16:27:63:cc:fe:86:2c:c6:d9:06:
a8:55:68:04:5b:be:4f:e2:cf:9b:22:7f:5a:e9:f5:a1:33:a1:
c4:17:3b:ec:34:36:4f:a9:b0:4c:a9:0e:d8:95:f3:7b:64:55:
c6:b8:e9:4f:8e:60:20:49:5b:dd:7b:9f:40:98:9f:f0:48:46:
eb:2e:7f:ca:1f:fb:10:7f:f3:12:e8:3b:36:8e:39:1a:4c:60:
ad:0f:1c:50:7f:2b:47:71:8a:53:b1:9b:df:ac:0d:b3:50:0f:
b4:ae:cc:33:a8:77:a1:35:da:a1:2d:85:7a:93:04:0a:1f:71:
6d:5b:41:43:8b:f0:82:a6:ac:b3:7e:dd:fd:82:4e:09:7a:41:
7e:3c:8c:f4:60:1d:d3:99:de:78:b6:90:75:16:e3:43:08:db:
e0:23:de:15:b8:bc:01:e7:06:8b:31:fd:12:0b:bb:77:a7:9f:
b2:f6:48:5b:dd:c4:98:5d:45:67:0d:c1:7a:9a:dd:c6:17:f6:
93:94:f6:10:a0:a8:10:50:77:30:4e:00:ba:23:e0:84:8f:43:
b1:2f:0d:18:df:3b:66:8f:28:e7:19:47:ff:ed:f8:a2:7b:8b:
d4:98:da:77:97:85:2d:87:0d:f3:b1:11:0a:77:c2:0f:4b:a4:
37:2d:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:33:04 2026 by rpki-client