Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer (raw, json)
Hash identifier: v9a060+mCTiQyTzMTpEiA55Ktg0zVm6T0cpMmw0Nvzg=
Subject key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA690040352C8EE430C367F5B70CABD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:20:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.216.109.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:90:04:03:52:c8:ee:43:0c:36:7f:5b:70:ca:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:2a:e5:63:c3:6d:23:7a:1f:db:d1:d2:59:
5c:e9:b4:84:ce:c6:c9:b4:6e:71:ec:71:73:b8:ec:
1c:04:1d:e4:84:c3:46:10:6a:98:14:1c:f1:67:85:
a8:85:94:69:74:bf:98:08:9f:b4:b4:13:61:75:be:
4d:7b:f5:58:2e:63:5b:29:3b:08:e4:4e:3b:bb:b7:
6e:73:0c:16:a5:da:34:89:bf:9b:0e:a7:db:bc:35:
83:67:8e:fa:53:ab:a6:30:44:42:2f:5c:41:36:49:
33:6d:5e:66:5a:61:c8:4e:d6:d7:ac:0d:48:ed:bb:
ca:39:8d:b7:1c:8c:d2:c7:d0:06:f4:fe:7a:4e:e7:
b9:3d:47:65:0f:b5:bc:6b:79:84:64:a5:55:58:ff:
af:f5:e6:07:1f:5a:fe:6c:d0:85:18:4d:bb:35:38:
18:74:bf:59:a9:03:b1:51:12:61:b8:7a:ff:74:62:
5c:b3:98:b7:33:2a:a7:9e:0a:cf:54:d5:86:70:70:
38:27:71:70:8a:0e:0d:a5:7b:ce:b7:8f:e6:65:02:
80:db:a9:17:40:1f:eb:dc:86:74:6d:37:48:94:7d:
9b:17:cc:ca:af:34:22:67:3d:30:8f:f7:2a:96:95:
49:36:ed:a5:54:9a:c7:0d:45:27:11:0c:14:4a:c3:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.109.0/24
Signature Algorithm: sha256WithRSAEncryption
79:bc:58:49:ef:fb:5b:e1:9f:e9:03:ec:33:95:9c:3a:3f:7e:
cb:83:41:e5:ec:87:01:fe:35:ce:1b:0d:a2:57:5b:7f:a9:a6:
73:60:99:5b:57:fd:ea:ad:62:53:cd:48:98:f5:d9:b4:7d:62:
12:78:41:da:9a:1a:70:5d:a2:56:80:1b:ed:c6:a6:42:95:6c:
99:eb:be:6a:1f:2f:b0:15:d9:a4:13:58:8c:71:e7:f6:1a:f1:
74:d1:9f:aa:f7:3a:64:28:2c:3d:d0:e4:41:c0:56:55:af:fe:
a0:7a:5a:b4:51:b5:e2:3d:8f:f6:b6:91:41:f4:c4:33:c7:13:
27:71:51:96:b9:0d:f4:99:ff:20:f6:fd:cf:08:72:f4:86:e3:
5a:95:aa:70:34:43:d4:4e:cc:0b:f9:c4:69:d0:75:f6:ac:d6:
bb:cf:2b:3c:12:74:11:26:b7:31:ea:85:5b:7e:d2:ac:5a:3f:
05:7a:3d:76:54:63:68:39:fb:7c:bd:31:bb:7d:a0:62:de:de:
66:8b:3c:92:1e:aa:8b:20:14:58:8d:29:6a:d3:24:e2:0b:fb:
25:5a:75:98:b1:c1:10:28:83:ca:9b:57:c6:51:a8:11:6d:ae:
08:f5:a2:04:53:05:3e:11:48:5f:6e:dd:69:25:90:3b:2a:12:
b2:b5:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:04:53 2026 by rpki-client