Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
File: S6P83Yf0VkMMzLLYY45hSM06Euw.cer (raw, json)
Hash identifier: 8O6ptu9VVYuNy5tg0mQc9fZZ3xkfUlIRql41CbNjpH8=
Subject key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C663053D8592E3B0F5D3C72CF70BC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.231.116.0/22
IP: 2a09:c740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:63:05:3d:85:92:e3:b0:f5:d3:c7:2c:f7:0b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:1a:35:f2:e3:98:3f:b9:22:c5:99:d1:89:
87:17:e8:c0:4e:45:d4:ea:2c:f5:c6:0c:1c:e8:59:
d9:eb:f2:c2:13:48:91:54:0f:c8:29:aa:64:5d:1f:
4e:9c:1d:49:3f:48:93:ff:84:86:a6:49:ed:92:15:
d4:05:2f:c5:c9:55:26:63:78:9a:44:e5:01:78:f1:
ab:31:41:44:be:8b:f9:b7:60:3f:c1:39:07:ab:88:
0d:e7:5d:0f:b9:79:71:bb:88:65:5e:8b:54:fe:c1:
4d:e9:9b:d4:a6:92:1d:02:24:8b:2e:1c:3d:6b:f8:
f3:df:c2:0d:5f:04:c2:38:86:a1:4b:47:6c:be:94:
6b:88:3f:cc:14:dd:5d:82:a7:3b:f6:89:09:ee:d1:
3a:04:26:cb:53:78:77:89:d2:6c:0b:db:50:90:b1:
d9:11:85:4b:31:c4:92:99:2c:fa:8d:ac:16:33:69:
fa:66:f7:a9:35:3f:e3:73:35:11:cf:ba:91:c7:da:
e1:d7:a8:f8:9c:2d:66:16:1b:a4:61:66:d2:e3:84:
6e:84:e6:5f:6c:31:e5:d5:ae:8d:0e:e6:22:02:6c:
03:48:c9:84:46:f6:a1:c0:7a:73:45:1f:0c:03:c1:
77:14:ca:37:d3:95:f4:94:c4:c5:31:fd:67:77:1f:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.116.0/22
IPv6:
2a09:c740::/29
Signature Algorithm: sha256WithRSAEncryption
40:4f:4b:18:b8:86:e0:72:84:f6:3c:92:3c:b1:6e:cf:39:4e:
8e:7f:20:25:32:8a:f8:01:a3:18:e0:c2:65:83:b6:85:b8:81:
43:cd:a4:3a:4b:de:a0:64:37:c7:e1:43:9a:6d:e5:45:9a:90:
44:89:aa:9c:95:0f:49:79:ed:2c:ae:a9:56:f7:62:dc:59:6a:
8d:d2:6e:fe:a8:83:5d:3b:03:3e:e4:91:19:47:63:f9:96:3b:
30:85:b8:c5:5c:24:f1:23:72:0d:13:37:95:4d:71:54:f1:fc:
95:de:51:ba:a8:7b:9e:6a:38:55:88:da:18:0b:c7:ac:9a:88:
a2:f8:03:cd:72:a6:62:c8:7a:fd:b9:79:55:e5:db:da:56:c0:
ac:b2:33:7a:8b:de:e4:2b:76:32:db:d0:9a:1f:0a:e3:02:51:
69:21:2b:e5:89:a6:10:13:c9:d9:86:04:98:8c:40:ec:a4:b1:
14:b5:a8:cf:b5:2e:21:6a:f9:a2:ab:fe:28:1d:f6:56:08:4d:
1e:81:a4:44:95:bf:d4:56:3a:46:0c:94:93:48:51:a6:83:fa:
e6:01:31:f3:dd:4a:51:96:7c:85:8d:6b:fa:af:4a:68:c2:32:
8a:a8:47:b1:5e:39:b4:5c:54:a7:b9:ab:eb:9d:61:1f:1f:21:
68:a1:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:54 2026 by rpki-client