Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
File: G04-M_1PbZy08TyiI3HjCzbPp3Y.cer (raw, json)
Hash identifier: +aYfzHfXm86HWyratzytFn9plk+017IFBxVOD/+6CNY=
Subject key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA5041A7F3B497FA87CE48ACEACE5D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.187.53.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:04:1a:7f:3b:49:7f:a8:7c:e4:8a:ce:ac:e5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:ac:4b:8c:89:34:e8:79:07:39:b8:ed:dd:
a8:fe:b4:2a:38:53:61:88:e4:6f:14:31:7c:ed:fd:
ac:7d:ca:c2:74:ba:7a:9c:d7:06:c1:a4:3c:2a:5e:
c9:53:e2:dc:d4:22:d9:bc:8e:74:af:15:ee:ac:c0:
ed:90:5e:36:c7:ff:8d:6d:1a:d8:01:00:76:3a:e7:
88:03:75:bc:9c:7f:17:ea:dc:bc:df:02:36:0f:78:
0c:c7:8b:49:7e:b6:0c:db:82:43:9c:5f:df:c9:4d:
99:e2:ca:8e:02:c5:64:30:30:21:3e:19:4b:74:2c:
42:94:dc:de:7c:12:3c:db:f7:db:a8:86:87:8a:67:
49:62:98:16:de:6c:8b:1b:fd:a2:ed:b5:80:f1:fa:
d8:fd:c4:f6:da:c7:37:3f:39:76:49:26:01:0a:d7:
f9:f5:3f:ab:49:b6:a1:ae:03:4c:e4:b3:4a:d4:73:
aa:2b:a3:2a:47:cb:82:7c:d1:e7:82:3c:3f:96:a3:
17:66:68:f5:07:71:19:20:3e:f4:ec:8b:e2:10:12:
13:37:29:ce:b1:2b:b7:d5:58:ba:27:24:99:9a:b2:
86:30:29:ed:c5:e1:9e:ce:d3:6d:4c:30:ec:07:f6:
ed:9d:d7:1c:af:13:e8:92:d0:23:26:f0:53:ce:9a:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c4:76:26:89:86:3b:fb:53:f4:18:9c:a0:63:3d:93:ef:c3:
26:30:0c:44:96:43:9f:47:8c:51:71:4b:54:91:16:5e:28:0e:
06:00:d4:4a:e0:15:0c:27:ea:62:11:90:b3:b7:5d:4f:7f:d1:
3c:b9:d1:22:86:c1:25:d3:ed:db:fc:c3:82:b3:50:8c:e4:8c:
29:b0:d8:28:36:88:5f:69:69:4c:1b:c6:2f:39:42:69:b7:b9:
50:0a:55:09:4d:f7:a9:2a:a6:bf:17:9c:d1:d4:23:ef:a0:11:
44:65:2a:79:08:e5:48:83:bb:f2:09:63:d5:0d:fc:52:f8:a5:
11:83:c6:26:d0:62:00:ae:4c:50:0b:d7:ed:e5:07:d1:d6:32:
10:06:c7:4f:71:8f:c3:1d:6b:0b:16:c4:3c:13:56:a1:3a:38:
dd:54:52:84:f5:3b:ea:55:7f:db:ce:82:29:fb:1a:e1:1a:ae:
70:17:1a:d7:50:73:16:ed:16:36:e8:b4:aa:85:97:38:75:ad:
9a:72:75:4c:07:26:49:28:f0:5f:2e:d3:0d:0b:b5:44:c8:96:
1f:cd:42:ff:31:0a:fb:5a:20:1c:4a:dd:3e:9b:23:cf:a7:23:
79:da:06:c1:c0:28:29:c6:57:95:d7:27:3c:6b:99:d8:2f:bc:
39:d2:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:37:48 2026 by rpki-client