Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
File: CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer (raw, json)
Hash identifier: t/9EWIYB4ughsHgYzwHbVsVb4iIiHewlo71Vc4p6CcM=
Subject key identifier: 08:8D:D6:83:D6:48:95:67:40:EE:ED:F4:ED:BB:D6:E3:1A:9F:79:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C43F6E741706F94D84824FC0499E4AE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Sep 2026 13:54:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 62.192.184.0/22
IP: 91.92.4.0/23
IP: 91.92.160.0/23
IP: 195.72.116.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:3f:6e:74:17:06:f9:4d:84:82:4f:c0:49:9e:4a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 21 13:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=088dd683d648956740eeedf4edbbd6e31a9f79e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:23:b3:ae:f1:78:a9:26:14:94:17:5b:07:
3d:fe:23:b6:66:ed:c8:87:a1:27:d2:5d:cc:f4:69:
28:c5:f7:d4:d9:b8:32:36:0e:4c:48:b0:86:85:1b:
a5:bb:73:af:60:7c:1e:a9:4f:57:7b:29:03:85:71:
0c:b6:e0:13:f8:dd:d1:78:e8:35:bf:a8:41:e8:32:
2c:f4:bd:58:a1:5e:8c:12:9b:f4:e0:33:98:0b:d4:
e4:d6:e8:2d:97:3b:87:4e:36:fd:f1:32:35:ee:ec:
32:cf:80:42:e4:d7:7c:19:de:5b:e9:a4:79:20:f4:
4d:27:fa:74:cd:e1:16:22:fd:b7:98:c4:32:e2:49:
7d:2d:9a:b6:44:cc:79:80:5e:af:36:23:3e:92:65:
e6:cc:d5:9e:db:be:e2:cb:32:62:8f:af:25:73:14:
af:02:36:fc:ad:4f:3b:2b:80:08:bd:c8:1a:02:4f:
b0:83:25:9f:8e:c0:51:70:8a:d2:46:aa:48:f4:7b:
57:a7:92:c1:88:93:05:1e:b8:ae:4a:b7:65:4b:30:
7d:be:05:b6:06:49:13:0e:2c:ac:cd:95:33:6c:a9:
66:4c:8e:d2:4d:62:7a:72:7c:4b:79:cb:cc:ce:fe:
2e:91:ec:a2:6b:fc:6e:91:97:15:d6:29:ed:78:8a:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8D:D6:83:D6:48:95:67:40:EE:ED:F4:ED:BB:D6:E3:1A:9F:79:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.184.0/22
91.92.4.0/23
91.92.160.0/23
195.72.116.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:4d:d7:ba:77:be:0e:58:ce:72:ae:71:d9:11:34:0d:65:e5:
af:dd:8a:b2:01:0f:ed:33:ef:8c:12:58:0c:79:f7:d8:e4:7c:
50:fb:82:55:8e:55:a5:9a:cf:8f:0d:24:b8:e2:f4:8d:51:d3:
44:1d:77:ba:6a:d0:02:e3:52:57:09:f1:f5:ab:ca:6a:70:dd:
74:b3:47:be:d6:d8:4f:ff:70:5c:bf:2b:32:d3:14:aa:9a:86:
d1:90:9b:d8:a8:f4:97:11:7a:6a:e7:7e:43:cb:9a:a5:8c:03:
91:f7:3d:fa:5b:99:fc:1f:15:59:b6:d1:04:87:e0:ad:d6:c3:
ce:46:47:52:77:33:c9:91:02:e0:b9:2c:0e:43:1a:66:ac:7e:
20:53:d8:2f:fb:69:e0:f5:93:dd:e7:5a:59:41:04:c7:99:f3:
ce:ab:cb:eb:08:1c:b9:b9:06:c8:70:a7:eb:a4:d6:da:be:60:
3a:b6:5d:d6:c8:30:0f:4f:b4:15:c5:f9:f4:92:ef:41:cb:91:
95:95:98:78:dc:84:25:40:d9:04:6c:7b:9d:6a:03:6e:ec:e5:
6f:f2:87:a9:28:ce:c5:ae:91:fe:ba:6e:03:9d:df:53:66:bd:
1c:56:9e:f1:d1:1b:37:f2:f1:be:78:91:8c:97:97:1f:6a:9e:
f3:82:cd:b2
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAaDEP250Fwb5TYSCT8BJnkrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTIxMTM1NDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODhkZDY4M2Q2NDg5NTY3NDBlZWVkZjRlZGJiZDZlMzFhOWY3OWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7sjs67xeKkmFJQXWwc9/iO2Zu3I
h6En0l3M9GkoxffU2bgyNg5MSLCGhRulu3OvYHweqU9XeykDhXEMtuAT+N3ReOg1
v6hB6DIs9L1YoV6MEpv04DOYC9Tk1ugtlzuHTjb98TI17uwyz4BC5Nd8Gd5b6aR5
IPRNJ/p0zeEWIv23mMQy4kl9LZq2RMx5gF6vNiM+kmXmzNWe277iyzJij68lcxSv
Ajb8rU87K4AIvcgaAk+wgyWfjsBRcIrSRqpI9HtXp5LBiJMFHriuSrdlSzB9vgW2
BkkTDiyszZUzbKlmTI7STWJ6cnxLecvMzv4ukeyia/xukZcV1inteIpMhQIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFAiN1oPWSJVnQO7t9O271uMan3nmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2VjODAw
OS0xZDk5LTQ4YzMtOTkwZi0yYjE4N2U3MDNiZWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWM4MDA5
LTFkOTktNDhjMy05OTBmLTJiMTg3ZTcwM2JlZS8xL0NJM1dnOVpJbFdkQTd1MzA3
YnZXNHhxZmVlWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYAwQCPsC4AwQBW1wEAwQBW1ygAwQBw0h0MA0GCSqG
SIb3DQEBCwUAA4IBAQA8Tde6d74OWM5yrnHZETQNZeWv3YqyAQ/tM++MElgMeffY
5HxQ+4JVjlWlms+PDSS44vSNUdNEHXe6atAC41JXCfH1q8pqcN10s0e+1thP/3Bc
vysy0xSqmobRkJvYqPSXEXpq535Dy5qljAOR9z36W5n8HxVZttEEh+Ct1sPORkdS
dzPJkQLguSwOQxpmrH4gU9gv+2ng9ZPd51pZQQTHmfPOq8vrCBy5uQbIcKfrpNba
vmA6tl3WyDAPT7QVxfn0ku9By5GVlZh43IQlQNkEbHudagNu7OVv8oepKM7FrpH+
um4Dnd9TZr0cVp7x0Rs38vG+eJGMl5cfap7zgs2y
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:40:47 2026 by rpki-client