Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
File: C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer (raw, json)
Hash identifier: VARsvX3XkBrWw3KBjJu5SCDr6j63hcOPdoe7VyvLqPo=
Subject key identifier: 0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F1734C27E11E33BC15F8A36941C114A30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 06:26:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 134.220.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:34:c2:7e:11:e3:3b:c1:5f:8a:36:94:1c:11:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 06:26:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bdbbac793e1d688b65bdc00dd52658e20ad64fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:12:ee:7c:31:29:eb:ad:b0:8c:3c:79:ac:
06:7f:bd:b0:5c:8b:a2:dd:4e:44:53:67:00:09:08:
44:7d:fb:1d:2b:43:e9:45:29:57:8b:69:9e:42:19:
f5:7e:9d:07:f3:64:a6:26:2f:39:d6:5e:08:de:53:
a7:af:e8:69:9a:74:a3:9d:73:ca:20:6c:34:38:6b:
7d:b1:1e:cf:78:a9:1b:3c:1c:86:f5:39:82:c2:52:
49:15:59:ae:62:1b:5f:ec:87:7b:34:8b:66:0a:c0:
66:a2:e4:5f:f8:b9:f2:d2:eb:c6:eb:1f:4f:bd:40:
50:84:ee:f0:e7:8c:3a:ef:bf:f4:fd:32:97:cc:b8:
0a:c0:05:c2:07:03:96:75:e0:27:98:39:f9:63:26:
4d:5f:41:d9:b8:94:bf:24:a6:91:2c:d5:6a:b1:9f:
51:6c:c0:d4:21:cc:b2:01:87:37:70:8d:41:75:13:
76:c5:2f:50:82:86:e9:53:5b:d6:9b:fb:a2:8c:d3:
1a:a1:08:01:35:3b:e9:24:5e:65:96:37:6d:d9:6a:
e4:87:ea:46:cc:6c:b6:fa:02:f6:0b:9d:21:9a:22:
20:73:a7:8e:91:1b:0d:7f:36:99:b7:86:41:ff:a4:
90:9f:3d:9d:df:01:07:ba:e2:d5:89:5e:2d:b8:39:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:cf:6c:8f:73:a5:0a:b1:0f:8c:f6:a1:32:4c:c7:bf:3f:ac:
11:c6:8e:5c:4e:61:3c:83:89:47:bf:d0:fd:a3:c4:8d:1c:a4:
40:c1:e8:0f:d3:a6:8a:33:9d:cb:f4:4a:cd:1f:8c:10:f3:62:
a6:98:f2:04:7e:a1:8d:9b:7e:c9:c1:66:ed:28:e0:09:1e:3e:
93:0b:33:31:73:2a:92:a1:79:71:90:3d:bf:f3:4b:bb:5e:bd:
e3:3e:fa:b8:10:64:49:b4:b2:ae:3c:e1:fc:2a:95:44:a6:cd:
44:47:ce:bc:d0:c4:43:b4:e2:1c:8d:46:84:ed:fc:5c:97:cd:
2b:4e:55:a1:b2:1f:5b:fb:80:af:5e:14:07:0e:6f:d6:6b:0f:
b6:5e:d6:0a:31:22:0b:35:d6:d5:28:b4:64:90:c7:e5:0e:39:
22:40:2f:58:fe:09:8c:a0:19:06:5b:cb:40:6a:27:60:13:d1:
cf:87:ec:9d:24:5f:0e:3e:bf:d7:d5:b0:59:14:e0:3d:87:9c:
16:b8:5e:b6:f3:e4:14:2c:b6:c9:21:ff:b6:81:df:40:49:7f:
6a:d0:15:ce:94:28:ba:aa:d2:20:99:22:61:40:f1:d7:f4:92:
29:60:df:52:60:ef:82:79:07:e2:21:da:ab:44:8c:d7:03:d2:
88:48:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:14 2026 by rpki-client