Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
File: EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer (raw, json)
Hash identifier: e5KoMpDc/IEISdser2YgV799dC/685XvGG9iQE8c2zg=
Subject key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7910B2F531E8484AA207C00244D0F67B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:678:4d4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:b2:f5:31:e8:48:4a:a2:07:c0:02:44:d0:f6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12e64042b6e7288a485db270c551329b802fd8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:9f:2f:2f:bd:84:59:a7:fc:d5:37:61:ef:
0b:15:96:a8:13:76:da:d5:fc:30:be:6f:be:f1:1f:
ca:25:87:0a:ef:d3:79:a7:c7:a9:c1:80:f9:b9:b4:
92:3a:e6:1f:a2:03:03:87:d2:fc:13:59:69:4c:4c:
7a:e0:d8:b3:b4:89:1b:e2:3b:96:8a:7a:7c:ad:5a:
63:ae:56:17:5e:fe:c3:2d:4c:18:74:f0:6b:d1:f9:
4e:5c:1d:f5:14:eb:7d:09:cd:05:72:53:05:19:6d:
ea:55:60:3e:2e:99:14:9f:23:ee:90:6a:49:80:c5:
15:ae:8c:8d:4f:7d:6f:39:14:b0:de:dc:98:5e:af:
4f:1b:75:c0:80:a8:9e:53:c8:e5:a1:61:94:e3:a4:
60:99:09:63:9e:42:f4:db:74:7a:2f:de:ca:59:b0:
ef:db:54:79:89:67:0d:2a:fa:4b:df:6a:1e:b8:03:
d1:b1:d3:c3:b6:ea:4f:ac:b3:e3:57:d4:67:96:2d:
78:6a:db:94:86:ab:41:c2:7f:49:8a:8e:22:2a:77:
56:75:8b:9c:15:86:4d:bd:0b:f2:7a:d8:ea:38:a0:
77:e5:f6:db:c0:2b:7a:38:52:de:7d:76:f6:c6:9f:
55:8d:ff:59:58:e1:d3:88:97:af:68:9b:6e:85:38:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:4d4::/48
Signature Algorithm: sha256WithRSAEncryption
0b:c8:33:c0:0e:bf:2b:4c:0f:b4:bc:69:12:0e:9e:04:66:64:
c8:aa:3b:a7:c1:09:7c:a0:98:79:ff:cc:d9:8e:16:13:e1:6d:
91:a5:ee:b7:a8:ba:a3:76:05:6d:88:c5:6e:cf:22:49:d6:03:
2f:9c:17:58:61:3c:a9:80:de:4d:2a:54:90:db:9c:7e:ec:89:
17:57:1f:e6:6c:c0:a1:89:a3:3e:d0:2e:85:6a:b7:f2:c6:5c:
ec:29:ae:21:bf:2f:de:19:f7:23:bf:c2:14:ac:3b:df:4b:e0:
25:76:c7:b5:53:f9:3d:1a:f8:8b:c1:de:6b:1a:bd:90:6d:72:
b8:04:41:40:66:85:52:8c:af:4b:8b:26:82:d3:af:7d:d3:f6:
8d:4a:9d:9f:6d:23:7f:ea:cd:a5:35:00:2b:22:eb:97:05:5c:
75:cc:31:7b:ac:10:27:f7:92:e3:12:4c:20:66:4c:47:97:3b:
8c:66:a2:dc:b7:3d:03:a8:71:5e:93:1c:66:cc:54:63:38:21:
00:d1:d2:a8:82:e2:23:cb:55:80:64:16:52:9e:7b:26:df:c5:
5b:08:65:da:7b:ed:d2:98:97:bd:1f:5c:1d:34:7e:11:63:c0:
a0:63:a2:1a:da:21:7f:5c:95:5c:b3:b1:35:cf:d9:62:05:2c:
c4:27:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:13:24 2026 by rpki-client