Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RXql3Y1V8JjPfoYBZIt8pKw0PTE.cer
File: RXql3Y1V8JjPfoYBZIt8pKw0PTE.cer (raw, json)
Hash identifier: yAzi4Ecl553NEkCgaYup5wcwUKulo+a0c9v9AoFUJsU=
Subject key identifier: 45:7A:A5:DD:8D:55:F0:98:CF:7E:86:01:64:8B:7C:A4:AC:34:3D:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C6CF7C21D97563A2697348DBDB42254D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/RXql3Y1V8JjPfoYBZIt8pKw0PTE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Feb 2026 18:58:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.195.48.0/23
IP: 194.50.68.0 -- 194.50.70.255
IP: 194.176.120.0/24
IP: 2001:67c:30c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:f7:c2:1d:97:56:3a:26:97:34:8d:bd:b4:22:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 18:58:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=457aa5dd8d55f098cf7e8601648b7ca4ac343d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:db:d0:60:d3:d4:2d:3c:e7:c3:6c:92:bc:
9f:b5:1f:4b:b5:4c:f9:f9:01:de:c0:86:10:91:12:
63:b6:28:e1:f8:2e:b1:db:4e:a7:c7:ef:d3:c0:c8:
aa:55:72:4c:b8:96:6a:f3:d9:68:9c:66:30:f3:7a:
da:e7:c3:b7:ff:f0:90:a0:54:76:36:76:cf:db:bf:
4d:2a:57:3e:99:f5:06:bc:3a:cd:f2:49:c0:7b:aa:
7d:a7:51:e0:d4:99:31:2a:82:7c:6e:4d:6e:0e:d3:
06:ad:c2:2a:f0:90:a1:72:7b:c4:1b:26:1a:7d:68:
8e:0e:c2:a2:c9:0a:54:6c:ba:54:b8:65:cc:cb:cd:
e3:9d:ec:2c:e3:a9:00:f9:41:82:df:9d:79:ae:25:
57:71:c3:ad:a4:bd:56:65:34:9c:a4:fa:e9:29:0f:
6a:b0:cd:8c:a3:09:0c:ae:d9:f0:75:d3:b8:30:da:
96:99:0c:0c:8e:5a:a8:2a:60:4a:ad:ba:38:c2:7f:
9d:82:2f:dc:da:5d:05:9a:33:4b:83:b7:6f:5a:5f:
94:7f:d0:cf:ff:a4:ac:8b:7c:da:42:40:d6:a9:8c:
b1:b6:b4:5f:7c:fd:d1:06:e7:b3:d7:59:8a:88:44:
e2:72:fe:65:a5:2c:b7:ae:ca:9b:e1:0e:f6:9d:3c:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7A:A5:DD:8D:55:F0:98:CF:7E:86:01:64:8B:7C:A4:AC:34:3D:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/RXql3Y1V8JjPfoYBZIt8pKw0PTE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.48.0/23
194.50.68.0-194.50.70.255
194.176.120.0/24
IPv6:
2001:67c:30c::/48
Signature Algorithm: sha256WithRSAEncryption
0d:ef:38:a9:a2:e6:52:31:05:79:77:94:bb:49:95:62:20:27:
a6:95:34:cd:93:ee:2c:d3:86:7d:19:05:d5:3d:bb:4f:d3:a6:
58:ad:bb:72:f5:ef:9d:6e:2f:ae:df:8b:b9:9c:09:68:61:1b:
c8:21:98:39:93:b9:1d:cc:e9:ac:84:ba:73:30:11:07:13:a0:
9e:03:b5:bf:f1:8a:74:f2:4a:a2:e4:04:a6:9f:a8:3d:99:db:
b5:8e:aa:44:ec:8f:a7:64:be:1f:0a:f3:6e:3b:81:bb:9f:ae:
15:14:3a:d2:d2:ae:52:f4:f2:0a:9d:cf:68:a3:d8:b5:97:26:
9f:84:27:57:35:b8:89:5e:9c:d3:e2:3a:03:10:20:1b:8d:45:
a8:a2:ae:28:17:64:cd:55:54:b4:a9:d3:3c:89:d6:86:f6:8f:
84:78:c9:6c:c6:84:bb:2b:98:33:81:a7:fa:92:3d:59:da:24:
8c:4b:64:bd:4f:31:86:60:fe:94:71:3d:77:ed:c0:15:79:40:
7c:1b:ec:9d:90:d6:03:25:7c:30:c3:fa:37:de:74:8c:d1:65:
bb:d9:20:ff:89:39:7a:f4:77:ec:de:9f:22:65:c3:83:ed:64:
3b:0f:35:22:fe:27:f9:fc:26:cd:ab:44:83:ff:0b:33:23:92:
58:3a:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:40:06 2026 by rpki-client