Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
File: B_xIFsg7wTWHjxB93N9DOB3JPPA.cer (raw, json)
Hash identifier: i2qTZ8SLRLzFz4HJyUhEab62NF0zCuCE5+Z5hD5DHEo=
Subject key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C12B308052FA19FD31C3EBD8011FC73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:19:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 146.211.0.0/16
IP: 2001:67c:19b0::/46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:b3:08:05:2f:a1:9f:d3:1c:3e:bd:80:11:fc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:63:2a:61:91:60:63:bc:e0:25:4a:5d:64:
dc:dd:a3:92:ec:2c:fc:ec:5d:0f:d4:71:96:7f:e7:
60:4d:0b:8f:7d:8e:e3:91:bc:49:71:05:1b:d6:1a:
f1:38:46:e6:e1:b3:3b:db:a7:95:78:6a:4a:6a:c5:
62:9d:c4:eb:4b:2f:5c:86:96:5a:b7:d8:5c:54:0f:
e5:f3:9f:af:8d:99:90:f3:6f:2e:39:7a:1e:54:d4:
02:c1:df:6a:30:d8:f8:f1:ba:bc:7c:20:e9:fa:5f:
ab:9f:52:8a:d3:e3:6f:2c:c4:ad:79:a8:65:12:2a:
39:e4:07:34:2b:2e:c5:e0:3f:65:26:8e:91:4a:59:
f0:f3:6f:37:8d:e0:84:a4:46:e3:6b:41:2d:49:ff:
b1:e8:50:ef:d5:83:d8:32:59:ec:d4:66:3a:02:74:
ca:7d:57:30:6e:bf:4a:e0:a8:44:c7:03:c0:10:d6:
31:55:95:93:73:8b:5a:3e:a6:59:9a:b7:fe:3e:3a:
a2:d4:8b:74:6a:b3:a1:db:0c:c7:61:45:3a:dc:d2:
a2:af:62:3c:b5:11:fc:43:c2:a5:37:a0:51:9f:33:
b4:ca:96:6c:92:dd:af:7c:80:a5:85:16:3f:dc:c1:
98:e8:39:9c:2d:57:ec:8d:66:c8:c2:38:b6:c3:54:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.211.0.0/16
IPv6:
2001:67c:19b0::/46
Signature Algorithm: sha256WithRSAEncryption
28:97:97:b3:f4:27:0c:98:9a:36:5d:54:72:61:fb:90:53:f6:
50:5b:73:ec:6c:29:97:82:0e:98:65:c7:f6:95:dd:66:bd:8a:
a3:0d:eb:ca:19:64:b4:b9:8c:ad:33:9a:47:67:65:f7:93:60:
b9:0c:bd:d5:bc:e4:55:bf:9c:b0:fa:b1:2f:f7:6e:71:dd:04:
a3:87:a2:bd:f2:9f:c2:2f:09:7d:83:36:e0:ce:e8:19:a4:77:
6a:a5:43:2b:10:22:8f:7f:d5:87:a3:81:d4:0b:cb:89:32:7c:
3f:ed:f3:85:8a:f4:9d:f2:c0:1a:64:28:8a:00:8a:01:5c:b2:
58:f1:5c:e9:84:6a:8b:96:15:74:da:10:43:a1:33:6d:3c:5e:
83:32:3d:f3:86:26:f3:3f:d6:79:a0:95:b5:3d:c1:7c:cd:ca:
b4:31:a1:eb:35:40:f7:af:36:a5:50:72:85:e0:e1:09:b6:6a:
e4:c9:ba:09:ac:fe:dc:93:f5:26:5e:55:3c:f0:72:d5:3c:87:
81:b5:75:6a:d8:dc:3f:c0:6c:85:83:37:07:ff:5f:45:77:df:
ae:84:fc:4d:78:40:e2:21:e0:75:26:78:b6:7b:29:21:38:21:
28:17:3d:bb:4b:2e:54:c1:42:ef:61:fe:28:b4:eb:c3:2d:cf:
f3:c0:4d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:50:27 2026 by rpki-client