Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer
File: E2bDmPAyEL8XEDc39JCxuXDtQko.cer (raw, json)
Hash identifier: ZwQ3DL/THZ9A7IYzN9PdE3ajTk6ku+u8St2aPBsrQt4=
Subject key identifier: 13:66:C3:98:F0:32:10:BF:17:10:37:37:F4:90:B1:B9:70:ED:42:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DBA619D9E2CC78C7DBDC3971419F8B9AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Apr 2026 12:47:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.132.80.0/22
IP: 185.234.253.0/24
IP: 2a13:ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:61:9d:9e:2c:c7:8c:7d:bd:c3:97:14:19:f8:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 12:47:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1366c398f03210bf17103737f490b1b970ed424a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:e2:8c:76:f7:b0:67:34:d2:10:bd:05:8b:
b1:6d:ce:d9:d3:45:32:35:b3:93:1f:32:2e:46:01:
ea:d9:e0:d9:76:a4:07:2f:43:94:49:0f:1b:4f:9d:
ea:83:bf:11:94:d5:88:73:c0:cc:57:d1:8c:d2:83:
2b:d0:2e:48:3f:71:5c:4a:cd:ed:8f:bf:e5:4d:f1:
ee:bd:80:6b:6b:8d:9d:29:24:16:dc:3c:12:c1:72:
06:71:8c:4f:a1:71:46:64:dc:f3:3d:8f:a1:8a:ee:
fb:12:fa:41:e9:56:f8:96:96:1f:2f:44:76:e1:23:
bb:f4:82:92:65:a0:c1:13:85:84:f5:11:4f:8f:d1:
a1:95:1a:a5:24:dd:7d:62:e8:f8:33:68:8e:db:bd:
67:e6:bd:9f:dd:40:46:ee:0c:26:a6:52:ed:33:2a:
1a:73:c8:51:de:68:10:2d:11:ff:d2:af:47:6e:a5:
d5:91:79:0f:5a:08:17:06:de:74:46:b8:04:6f:17:
38:0c:2b:9b:44:2d:64:d3:ee:2f:7b:a7:2e:b0:cb:
5a:bf:d7:cb:58:bd:02:d8:b6:b4:41:c9:e9:7c:94:
c3:2c:0f:48:8c:3d:ed:32:db:9b:0c:d5:e5:d2:d2:
24:3b:b4:e5:1b:07:d2:96:74:20:af:64:b8:9c:31:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:C3:98:F0:32:10:BF:17:10:37:37:F4:90:B1:B9:70:ED:42:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.80.0/22
185.234.253.0/24
IPv6:
2a13:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:cc:09:bc:af:ac:1d:46:c0:c6:b9:bb:34:7a:02:c0:67:4a:
b3:d3:a4:e0:be:20:6c:41:33:af:73:f0:f9:5f:1f:f9:82:f0:
92:07:2e:06:7a:ba:ac:fd:3d:96:a4:ef:d9:58:99:5d:21:0d:
21:aa:0a:3b:28:cb:4e:db:a9:00:13:33:57:5f:8f:49:e6:76:
44:4f:c8:ee:a4:81:78:59:74:74:40:b2:ab:e3:01:fa:10:2a:
c0:79:b8:fd:4a:23:e8:c6:c0:e3:96:ff:82:5f:e2:ca:1c:de:
5e:96:43:ae:08:a0:c9:fa:4e:3d:2f:39:49:db:4b:cd:fc:61:
01:e8:d6:8f:c5:4d:f4:32:a0:03:e2:5e:ec:c2:d7:78:5d:23:
fd:f8:8a:4d:1b:34:0c:85:5c:c8:f0:0e:f0:a5:05:41:4a:17:
51:65:be:96:dd:35:d5:43:bc:7c:a7:9d:d3:6a:ea:9f:9c:55:
9e:82:44:d5:3d:7d:7a:d9:97:aa:38:16:2f:90:17:d9:cc:84:
8e:9d:bd:68:73:3e:03:68:dd:32:6a:9a:e2:bc:8e:08:fb:d8:
b2:ff:b9:3f:00:b2:82:9c:13:a1:32:68:8a:d3:ed:da:d8:b0:
84:1a:9c:0f:8f:6f:e1:6f:65:9d:51:5d:24:14:2b:03:1a:a6:
54:86:12:ba
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZ26YZ2eLMeMfb3DlxQZ+LmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDIzMTI0NzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzY2YzM5OGYwMzIxMGJmMTcxMDM3MzdmNDkwYjFiOTcwZWQ0MjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDTijHb3sGc00hC9BYuxbc7Z00Uy
NbOTHzIuRgHq2eDZdqQHL0OUSQ8bT53qg78RlNWIc8DMV9GM0oMr0C5IP3FcSs3t
j7/lTfHuvYBra42dKSQW3DwSwXIGcYxPoXFGZNzzPY+hiu77EvpB6Vb4lpYfL0R2
4SO79IKSZaDBE4WE9RFPj9GhlRqlJN19Yuj4M2iO271n5r2f3UBG7gwmplLtMyoa
c8hR3mgQLRH/0q9HbqXVkXkPWggXBt50RrgEbxc4DCubRC1k0+4ve6cusMtav9fL
WL0C2La0QcnpfJTDLA9IjD3tMtubDNXl0tIkO7TlGwfSlnQgr2S4nDHb+QIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFBNmw5jwMhC/FxA3N/SQsblw7UJKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzU0NDJk
Yi0zYzYxLTRhNzktOGI1ZS03ZjA5NzNlNWUxMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNTQ0MmRi
LTNjNjEtNGE3OS04YjVlLTdmMDk3M2U1ZTEzMy8xL0UyYkRtUEF5RUw4WEVEYzM5
SkN4dVhEdFFrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCW4RQAwQAuer9MA0EAgACMAcDBQMqEwrAMA0G
CSqGSIb3DQEBCwUAA4IBAQBKzAm8r6wdRsDGubs0egLAZ0qz06TgviBsQTOvc/D5
Xx/5gvCSBy4Gerqs/T2WpO/ZWJldIQ0hqgo7KMtO26kAEzNXX49J5nZET8jupIF4
WXR0QLKr4wH6ECrAebj9SiPoxsDjlv+CX+LKHN5elkOuCKDJ+k49LzlJ20vN/GEB
6NaPxU30MqAD4l7swtd4XSP9+IpNGzQMhVzI8A7wpQVBShdRZb6W3TXVQ7x8p53T
auqfnFWegkTVPX162ZeqOBYvkBfZzISOnb1ocz4DaN0yaprivI4I+9iy/7k/ALKC
nBOhMmiK0+3a2LCEGpwPj2/hb2WdUV0kFCsDGqZUhhK6
-----END CERTIFICATE-----
Generated at Wed May 13 13:31:44 2026 by rpki-client