Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
File: KJkuu4Pri3Oioh5bAz296x308j0.cer (raw, json)
Hash identifier: SlOeodsPxCMXg0MZzvQ1XzXg85mP4xE4KFw66ak/8FI=
Subject key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB424D6F05CBA459EAF770797490B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:18:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.146.96.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:42:4d:6f:05:cb:a4:59:ea:f7:70:79:74:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:aa:0b:50:09:e7:e3:4b:24:46:c9:25:a6:
7b:f5:5b:57:4a:3d:8f:b7:b3:1d:4c:f0:2f:2f:d6:
2f:87:05:d3:50:85:df:81:97:40:33:d9:31:c8:f4:
1b:78:b2:73:d4:54:76:cb:8e:57:0c:dd:f4:74:a5:
c8:6a:80:26:4c:2c:8b:8b:60:03:af:03:98:98:9c:
02:ef:66:c6:35:ef:07:86:c4:dd:fd:83:64:03:0a:
b6:88:05:cc:ab:4b:b4:da:a2:bd:eb:c8:c4:6c:77:
fc:bd:94:86:00:2b:d9:e5:f1:be:3d:38:3e:86:3b:
38:f1:d4:15:66:c9:f5:ce:88:df:89:c1:ae:29:11:
da:03:4b:57:88:23:37:d6:b9:fe:a1:7d:15:c7:96:
e3:ad:b7:5e:b4:da:50:f6:33:1c:95:68:5a:08:98:
08:fc:d4:32:f3:40:ab:5f:94:d0:0f:35:f3:25:e4:
68:d5:6a:18:4a:06:2d:76:35:bc:92:80:40:59:ec:
2c:38:25:79:44:42:c7:ff:0d:ec:e4:fe:8b:02:dd:
7f:30:9b:31:8e:72:92:17:b1:35:a7:f8:62:b7:59:
9b:de:d3:14:c9:7e:d2:25:4d:f6:9d:d4:df:7a:db:
9a:f2:ff:ac:bd:db:a5:3f:28:b3:a5:e2:66:df:77:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.96.0/22
Signature Algorithm: sha256WithRSAEncryption
63:57:1d:8a:44:b8:d3:ea:ae:a0:b0:a7:76:fe:1b:8c:ec:7f:
63:37:1b:62:1f:79:0c:9e:7f:19:88:4f:73:08:61:87:fd:33:
73:03:7b:72:db:a7:e8:d1:71:2d:ad:d6:5d:4d:1b:f8:b5:17:
f4:f3:98:4a:fe:aa:b2:a8:7b:2c:f3:02:f2:c4:42:2a:fd:fe:
88:30:2f:3b:66:75:9d:04:e2:2e:c0:0e:5f:0a:8b:45:37:da:
b1:2e:de:6b:52:06:0d:45:48:3b:64:4d:af:0e:d8:5f:77:0b:
96:fa:3e:ad:3b:7c:97:cb:38:48:f4:dd:21:c1:87:28:3f:d2:
55:6d:6f:5a:fa:79:1a:90:c2:1d:5b:70:a2:94:66:da:32:b9:
93:50:18:11:73:6b:4e:48:da:3f:b7:da:2f:86:e7:0b:45:c7:
29:e0:75:8f:10:0a:f7:40:08:01:d2:0f:df:d8:18:a8:36:51:
91:e7:02:4d:2b:11:7d:86:66:60:7e:cc:5f:e9:14:7c:d4:b0:
58:a5:3d:79:70:8a:3c:41:f0:0b:76:79:11:cc:28:c8:5f:87:
75:83:33:d0:6c:6c:75:40:37:14:40:fa:38:9a:05:05:af:03:
77:b7:6e:3c:49:13:6f:34:58:d0:f9:2d:45:ec:69:84:45:e3:
f3:ab:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:47 2026 by rpki-client