Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
File: I2nPaT78ECyTf6ynugnMyuxXSUg.cer (raw, json)
Hash identifier: cCt0i7qfaVimV4dwKnwX2UQNM93hE453Ax6beOdff4o=
Subject key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1C0C0619D7FEEAFDE94E00E4914B5EF40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Nov 2026 14:39:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 80.46.192.0/19
IP: 146.94.224.0/20
IP: 2a0d:36c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:c0:61:9d:7f:ee:af:de:94:e0:0e:49:14:b5:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 9 14:39:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2369cf693efc102c937faca7ba09cccaec574948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:df:56:2a:7b:8e:6d:bb:67:22:9e:6b:96:
4c:eb:e2:97:4f:78:e3:b0:9b:4a:d2:02:63:8f:54:
8a:4c:de:05:65:18:be:25:81:c1:53:0d:fb:a1:ba:
c9:94:59:3e:6f:36:6e:9e:3d:f8:09:43:f4:99:33:
1c:4f:1b:c0:69:c8:80:42:d3:d0:fd:e6:49:7a:31:
f7:d8:4b:e2:b1:fd:f7:74:9d:d3:48:17:36:ce:66:
da:46:cc:2c:92:04:24:c6:e6:a1:5f:58:74:9e:19:
45:09:6b:05:57:8c:e8:ba:22:32:7b:2a:ad:80:0a:
f0:1b:18:6f:c4:43:58:81:0b:80:e0:0c:61:a0:c8:
bc:5a:a6:af:1b:3e:0a:ef:03:58:04:fe:8c:56:b6:
9e:b8:51:4a:ee:12:e4:56:e9:04:b8:1c:49:bb:56:
f7:f2:d6:1c:7c:4a:63:6d:4f:c9:a2:74:36:c1:3c:
b6:a7:54:81:00:ca:20:98:d2:9b:6c:42:d9:75:72:
5f:3c:07:16:82:cf:65:9e:d1:e9:ec:ca:ea:b5:5d:
4b:16:6f:e2:a8:8d:ee:b5:8c:19:aa:2a:b2:0c:26:
f7:91:3f:9a:3f:82:9a:c3:7a:a5:68:78:73:22:2b:
b9:1c:82:61:7e:7f:3a:ed:2f:d1:8c:6e:64:b0:5c:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.46.192.0/19
146.94.224.0/20
IPv6:
2a0d:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:ca:d1:d0:e6:9a:2c:1f:18:fc:f4:f0:60:50:6e:89:33:04:
ae:49:f0:c4:ce:76:5b:95:6a:1b:8e:ae:ea:0b:c0:9e:e3:26:
4e:11:08:c4:93:f9:ae:1d:1b:bf:b0:de:c2:2a:aa:44:5c:da:
15:60:ee:73:92:78:76:5d:5e:05:7e:4e:7c:ec:35:60:96:61:
33:50:83:de:aa:55:95:6a:50:f1:57:90:fc:56:5b:aa:b4:fa:
f0:df:db:34:25:f1:cc:99:4b:6d:67:7a:55:71:18:b2:48:50:
70:40:82:5f:6c:fb:4a:b6:2a:af:31:6d:31:65:d8:10:3d:3b:
1d:27:16:58:0b:42:18:02:50:93:52:fd:ec:94:e9:1b:f2:b9:
07:0d:5f:ba:9f:6c:13:4e:2f:fc:48:81:51:65:ce:6e:21:09:
2e:92:76:d3:d3:f2:a0:6e:77:e9:9b:c2:62:84:b3:2a:f6:65:
ad:62:7c:9f:71:e8:e1:65:c2:87:a6:6f:51:da:de:f2:ca:52:
68:a1:b0:c8:05:c2:71:a4:77:9a:b4:da:1c:d1:ce:70:f9:00:
34:f4:e3:a5:f4:4c:ef:40:d0:56:d5:c6:03:97:34:81:68:6f:
f6:d8:65:74:52:8e:fe:55:32:a9:51:e9:16:28:19:5e:ca:a4:
1c:b4:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:25 2026 by rpki-client