Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
File: STKJJW4ziHd9leTVMVZ842cqFJo.cer (raw, json)
Hash identifier: MSxI9SxOQ5UqFBEHBETwOuYR48bhGKmiI96EWYFRLzw=
Subject key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77590FB17451680FE7D6266889B04692
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.85.164.0/22
IP: 194.145.180.0/22
IP: 2a03:7460::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:0f:b1:74:51:68:0f:e7:d6:26:68:89:b0:46:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=493289256e3388777d95e4d531567ce3672a149a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:61:cc:c3:2c:61:3e:bd:ec:f3:cf:a9:f1:
30:5d:80:90:e0:b1:e5:40:97:97:ef:75:22:8c:91:
06:1a:0f:78:a7:2c:59:84:9f:33:4a:5e:7f:79:4d:
74:a6:44:e4:66:44:13:77:58:60:25:4f:08:e4:fc:
2c:16:fa:e4:48:a0:17:15:60:31:b0:04:22:b3:19:
75:d8:86:4e:b0:83:2e:b0:f0:a5:72:53:21:8e:83:
65:86:5a:e6:5e:a8:fd:5f:2e:5b:4b:11:3e:5e:c3:
61:43:fd:3e:2b:2d:7a:c9:51:47:5a:be:a3:6b:52:
98:af:8c:0b:7f:cf:b4:f8:a5:d6:1c:e4:3d:43:a8:
5a:f6:c6:97:43:5e:47:90:d3:13:11:c8:ee:24:5c:
56:60:84:3f:50:54:53:60:16:ab:da:c1:b0:e6:e7:
a5:ab:36:87:fe:73:1d:ed:56:b4:b2:dd:e3:f6:5a:
52:a2:56:d2:f8:66:4a:2a:97:e6:d2:a9:ab:a7:58:
e0:cd:d8:70:97:dd:f4:b1:23:b1:9a:55:eb:ac:85:
6a:37:59:fa:e5:a5:50:3b:38:25:a8:d4:b1:67:19:
02:59:22:ed:b0:48:19:d9:7b:ad:31:80:5a:02:3d:
67:35:bb:6d:96:bb:4d:be:4c:34:00:7e:24:0e:98:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.164.0/22
194.145.180.0/22
IPv6:
2a03:7460::/32
Signature Algorithm: sha256WithRSAEncryption
14:a9:8b:77:4e:06:ca:69:4c:0e:e4:4e:ee:2a:4b:0f:6b:59:
d4:65:b8:6a:52:0a:23:fa:9a:8c:43:4f:f9:7f:82:8d:93:6d:
49:9c:c4:0c:ae:07:5b:83:b4:1d:1a:e9:a2:da:a6:ab:ad:6e:
5e:63:a5:99:fb:17:33:92:97:a6:e0:62:63:61:50:96:71:c3:
66:73:2f:03:b2:78:5c:3f:3e:66:48:c2:40:42:ed:00:5f:76:
ce:45:4e:eb:6d:1a:51:74:bd:6b:10:12:30:6e:37:73:76:3b:
3e:9e:b9:9d:4d:5e:01:bd:54:5c:15:11:f2:f8:b9:95:5b:1e:
93:e0:a1:9c:ec:a0:65:78:2b:7a:3a:3c:08:b2:e7:c3:f3:2c:
3b:16:9a:58:a3:c8:45:b2:bc:61:ec:b2:43:43:1b:2a:72:57:
89:1f:66:dc:42:92:03:a1:4d:13:82:88:7e:15:a8:37:f1:a7:
d6:b3:3c:0a:c0:68:3e:37:3b:ee:d6:be:7c:49:e8:cf:eb:fc:
a4:f5:bf:f8:3d:eb:bb:ee:7c:9b:0e:bf:ae:35:01:58:60:73:
71:94:1d:96:74:f1:91:a6:e6:44:c9:7e:82:12:87:e2:0b:07:
aa:1f:82:e5:ce:bc:ef:2e:fa:82:3a:28:50:39:d0:aa:32:22:
77:22:e3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:04:08 2026 by rpki-client