Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
File: L-KdbJy8NTcKAaomhNP3cxr5TJw.cer (raw, json)
Hash identifier: kvAA3BWfsM5AtxNwzVFHf5+lm4M/MMLGdd//03chzmI=
Subject key identifier: 2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA431543B18C2250E167E964CE83A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.66.130.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:43:15:43:b1:8c:22:50:e1:67:e9:64:ce:83:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:1b:03:c8:d4:7f:82:c2:b6:94:a8:9e:e4:
28:e8:45:46:87:94:42:9d:95:2a:7b:ad:26:9b:73:
99:5e:24:55:31:48:18:d9:a1:a7:38:ff:54:30:fe:
c6:83:2d:00:2a:58:44:33:16:a4:59:0f:3d:08:21:
04:d5:d6:0f:69:58:e3:21:11:9b:f8:92:33:b0:af:
27:e3:fc:35:94:28:3b:d0:ce:f6:b0:71:ab:9a:70:
d6:40:35:88:9d:3e:ac:72:92:dd:d3:c5:eb:bd:fc:
03:38:32:4e:67:39:b0:e2:56:4e:c4:6e:e6:ca:b8:
82:47:ee:a0:cb:0b:b0:96:bc:ae:34:9b:12:fd:01:
77:52:ca:8e:d9:76:be:0b:ac:6a:f0:f8:9f:53:c8:
84:fe:84:d7:31:dc:fa:e3:20:02:a7:f3:2a:15:c4:
39:9d:aa:e1:24:ff:a7:6d:7f:1f:b0:71:27:91:1d:
20:5a:c7:4d:cf:8f:3d:a2:31:e8:f3:56:7d:bd:ba:
3d:c4:f1:99:52:7a:dd:b7:76:ce:cf:ef:42:7f:fa:
00:54:9e:cb:b2:0e:7d:74:f3:1e:1c:d0:97:26:7c:
ad:56:0c:16:52:dc:90:8f:84:44:0d:d3:64:14:38:
2c:24:ae:6e:ce:58:2f:41:c4:36:7e:c7:b5:4a:df:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.130.0/23
Signature Algorithm: sha256WithRSAEncryption
73:1b:34:e7:89:c7:47:42:19:db:a1:b4:63:fc:5e:de:de:39:
a0:f2:88:1a:4f:47:09:46:b7:0c:71:80:f5:27:3c:83:7f:88:
69:36:06:57:d3:70:37:9c:d1:87:33:b2:5f:a8:27:64:69:eb:
7a:28:2d:42:ad:57:84:82:af:a5:1a:c8:b8:65:c9:25:dc:7b:
33:f9:0c:ca:bb:8d:ea:be:20:6d:3d:d6:0e:5b:dc:1c:12:22:
67:df:53:17:f7:ea:88:af:93:1b:15:19:17:b8:2f:4e:d2:f0:
5a:60:94:87:67:ea:b4:1e:25:f1:13:a4:08:a6:b4:ae:08:7b:
8d:57:bb:ba:9a:da:33:71:62:bc:d7:fe:1a:42:ae:64:5e:45:
c4:b2:87:b3:f5:d0:80:75:29:9d:fc:b6:da:85:81:86:e4:24:
68:c6:3e:6f:86:4b:fb:4b:73:40:16:93:d9:72:7d:f1:f0:a9:
78:ef:32:dc:f1:6c:63:81:8b:e3:3b:15:a1:ab:0b:f8:d4:be:
d8:16:dc:58:d6:82:95:9e:8b:42:c8:8e:ca:9f:7e:a0:06:4f:
09:4e:50:b5:d1:33:da:72:df:db:d5:83:7e:d0:3b:f9:c0:e8:
e8:05:15:16:14:e9:66:c4:8a:47:40:7a:63:d6:1d:32:ff:cf:
8d:b5:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:07 2026 by rpki-client