Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.cer (raw, json)
Hash identifier: PMdw5F5fYBKo4nepgM6ON21Z6Wk+IDhvrUkeJM1EVfU=
Subject key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C41A44B9C4873CB0A8F6CEA4B7961743
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Sep 2026 13:14:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 9.187.0.0 -- 9.188.255.255
IP: 37.77.184.0/21
IP: 185.2.220.0/22
IP: 2a00:86c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:1a:44:b9:c4:87:3c:b0:a8:f6:ce:a4:b7:96:17:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 21 13:14:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:c2:8e:4e:28:31:1e:1f:b4:ef:29:72:c8:
d0:f7:b9:4e:a1:05:18:08:a7:7f:79:f5:d4:50:86:
66:4c:31:1a:dc:28:5e:fb:0e:d0:0f:bc:48:3d:fc:
a5:7e:8d:08:91:5e:61:92:99:f0:07:ef:dd:a0:fa:
53:b7:4f:9c:d7:fa:b1:c5:be:b4:a1:76:aa:f3:72:
86:d8:0e:1b:c6:98:ba:50:b8:b7:f7:35:ad:f7:82:
d8:e3:dd:0d:ac:81:64:dd:c6:54:71:26:31:66:98:
e2:ff:b3:50:84:9f:74:10:52:11:f2:96:7b:92:20:
1d:d6:23:de:99:6d:66:4d:a4:38:37:3c:83:ce:11:
d2:c6:a7:2c:ac:df:ee:37:e1:85:7e:fd:22:89:39:
80:a8:38:65:d9:d6:82:e4:a9:13:e2:2a:0e:e0:19:
9a:5b:cc:8e:0b:e0:4d:12:36:5e:b1:37:cd:b7:d2:
9e:ea:f7:b5:23:1c:c9:6e:9c:b2:df:30:80:ff:5b:
91:d5:45:db:aa:45:c7:ae:65:9a:13:2b:6d:94:7a:
d7:34:12:35:d5:1e:77:2b:93:8d:34:64:6d:48:70:
d8:12:14:af:eb:d0:ad:34:7c:bb:b4:b9:34:cc:a3:
b8:ba:18:2b:e9:10:cd:2c:46:19:58:8c:b3:00:46:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.187.0.0-9.188.255.255
37.77.184.0/21
185.2.220.0/22
IPv6:
2a00:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:be:35:bd:d0:5f:6b:18:06:49:11:73:b4:bb:f9:d3:42:40:
78:59:fe:ed:98:fa:c0:14:f9:75:cd:74:db:74:57:b9:ad:e8:
22:b5:6c:af:a4:c9:f9:ec:06:fd:e7:85:83:78:06:9d:61:81:
a6:ca:52:1d:ac:5d:a6:d0:ff:b0:08:98:c4:05:e3:c6:71:8c:
84:2a:7f:78:ea:56:c7:64:96:bb:f1:ce:8f:80:91:b7:a6:a5:
4a:01:b2:0d:a6:15:3c:85:85:73:a9:a7:ea:8e:1e:9b:a4:67:
29:7e:7d:2f:21:4c:18:ba:54:f8:ba:f9:6e:9c:cc:5c:2a:b4:
84:b0:45:b5:d1:9a:db:25:19:f1:5c:94:c0:d5:6a:86:a2:37:
d4:c0:2b:fe:a6:02:c8:c1:2e:57:82:2b:c3:11:74:7c:8b:b3:
2c:47:a3:bb:13:88:86:64:09:64:e9:a2:84:51:10:3c:5b:05:
3b:93:e0:33:e5:ef:b2:7f:44:8f:aa:25:56:5e:d2:4c:45:d8:
f3:78:d8:f6:d6:45:89:f4:03:3d:4b:ea:b6:79:47:52:1f:0f:
58:5a:63:9d:cf:b2:aa:3e:21:ff:39:3c:a4:11:4a:77:5a:fe:
88:30:aa:73:7d:7e:67:75:62:18:a6:df:21:b1:64:9e:40:97:
6c:3f:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:24:32 2026 by rpki-client