Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
File: Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer (raw, json)
Hash identifier: k50tyZdIlJOcPPInLtMs/w4rqEe+Kcg1aqAsQ9rWk/0=
Subject key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8DB128D7615B97C4F5DECCD4EEA93ACD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jun 2026 13:34:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a01:f440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:b1:28:d7:61:5b:97:c4:f5:de:cc:d4:ee:a9:3a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 13:34:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:a5:27:4d:3e:51:52:5a:1a:4c:8b:34:84:
ac:c6:03:28:74:25:23:b2:16:72:b9:36:72:5f:9d:
d1:b7:18:9d:3c:e3:6e:51:a7:72:c7:3e:ad:e7:25:
aa:29:b7:41:6f:74:fd:e0:23:12:6a:c1:5c:c5:a4:
9d:c0:53:b0:1d:1b:f9:3a:f2:fb:fa:74:59:70:1e:
da:7f:7d:be:37:b2:01:d9:8d:fc:61:75:c9:95:be:
10:3b:68:a2:d5:d2:88:01:69:f3:57:35:fa:9d:a6:
7b:1f:a4:96:65:53:27:20:63:fb:40:35:5a:27:30:
4d:f1:71:81:a7:23:02:d0:9c:fa:80:cf:e3:ab:52:
dd:33:26:0f:ba:c4:32:3b:7a:c8:2c:56:d0:56:52:
c9:4d:65:5c:bd:9c:26:b2:f3:a1:48:66:1b:37:a6:
47:14:42:57:af:7c:0c:d1:6a:7e:48:c8:58:67:e3:
a5:01:4f:7c:68:7b:37:3c:95:1c:3b:ed:1c:bd:28:
a7:1c:d7:0d:45:ff:08:11:ec:e5:d4:ee:fd:87:f1:
7c:20:dd:95:95:fe:9d:ad:ac:48:d1:d3:4f:e7:99:
86:43:2d:66:da:36:63:c4:c5:e0:09:29:d5:49:89:
bf:dc:74:6d:cc:0d:86:fa:4d:23:fc:e0:0f:09:87:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f440::/29
Signature Algorithm: sha256WithRSAEncryption
7e:a2:6c:09:52:9b:9d:54:a2:d9:07:c5:51:10:64:33:14:11:
37:e9:01:b2:7b:04:c1:76:6c:3e:9a:19:0d:b3:62:f9:63:2f:
1d:21:af:5d:b0:ab:fd:3d:87:30:db:dd:a4:ec:07:e4:b6:1e:
bd:b1:13:67:83:c1:bd:78:46:88:d8:4f:ff:83:c4:bd:66:56:
76:03:4a:25:17:81:0f:db:b4:a9:c7:42:d0:e4:dc:c4:f7:1d:
fe:22:dc:a2:a8:11:6e:dc:10:69:86:5f:3d:e4:71:20:f5:91:
5c:85:39:5d:d5:0e:26:97:c9:e5:e7:85:30:fe:ae:6a:e1:71:
45:2b:1c:87:ff:0d:65:9f:81:eb:69:db:10:ea:67:b9:06:77:
5a:07:d7:48:66:f1:09:ef:50:f3:da:ac:f2:4d:c8:c0:bf:d7:
38:1c:15:41:0a:25:b5:c7:4f:0a:a4:be:f1:7a:bc:03:7a:b3:
20:58:71:3e:39:e3:ab:91:cf:75:ee:bf:dd:9e:40:2c:7b:11:
32:cc:a9:94:da:3e:e2:10:7f:78:20:72:bc:f5:f7:40:08:6e:
eb:4a:53:d9:69:13:34:c5:69:86:74:45:78:cc:2a:36:98:70:
6b:b2:0a:cb:d7:5f:76:0e:10:c7:d4:49:f0:cb:4d:21:58:82:
09:1d:31:74
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZ6NsSjXYVuXxPXezNTuqTrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjAzMTMzNDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWVmZmU5OGMyNGMzZDZkNjA4N2M4ZDFkM2Y5MDFiOGNjZDQwMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJulJ00+UVJaGkyLNISsxgModCUj
shZyuTZyX53RtxidPONuUadyxz6t5yWqKbdBb3T94CMSasFcxaSdwFOwHRv5OvL7
+nRZcB7af32+N7IB2Y38YXXJlb4QO2ii1dKIAWnzVzX6naZ7H6SWZVMnIGP7QDVa
JzBN8XGBpyMC0Jz6gM/jq1LdMyYPusQyO3rILFbQVlLJTWVcvZwmsvOhSGYbN6ZH
FEJXr3wM0Wp+SMhYZ+OlAU98aHs3PJUcO+0cvSinHNcNRf8IEezl1O79h/F8IN2V
lf6draxI0dNP55mGQy1m2jZjxMXgCSnVSYm/3HRtzA2G+k0j/OAPCYcIbQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFEXv/pjCTD1tYIfI0dP5AbjM1ACIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzFlNGE2
NC03YWEwLTRjOTQtOWJiMC1kZWI3YjkxODkxNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvMWU0YTY0
LTdhYTAtNGM5NC05YmIwLWRlYjdiOTE4OTE2OS8xL1JlXy1tTUpNUFcxZ2g4alIw
X2tCdU16VUFJZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgH0QDANBgkqhkiG9w0BAQsFAAOCAQEAfqJs
CVKbnVSi2QfFURBkMxQRN+kBsnsEwXZsPpoZDbNi+WMvHSGvXbCr/T2HMNvdpOwH
5LYevbETZ4PBvXhGiNhP/4PEvWZWdgNKJReBD9u0qcdC0OTcxPcd/iLcoqgRbtwQ
aYZfPeRxIPWRXIU5XdUOJpfJ5eeFMP6uauFxRSsch/8NZZ+B62nbEOpnuQZ3WgfX
SGbxCe9Q89qs8k3IwL/XOBwVQQoltcdPCqS+8Xq8A3qzIFhxPjnjq5HPde6/3Z5A
LHsRMsyplNo+4hB/eCByvPX3QAhu60pT2WkTNMVphnRFeMwqNphwa7IKy9dfdg4Q
x9RJ8MtNIViCCR0xdA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:46 2026 by rpki-client