Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer (raw, json)
Hash identifier: FNMy4jqIsDxivod+DlMIVZD6s8a8wsPh+/DXoRvuie4=
Subject key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE4636626D9153F0B273FE2AF5C3E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.173.200.0/22
IP: 2a0e:e080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:46:36:62:6d:91:53:f0:b2:73:fe:2a:f5:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:16:43:85:1b:6e:e7:f3:26:43:ba:02:7a:
b8:4b:c3:65:e3:c3:b4:fd:28:d0:fb:07:a9:27:fb:
3c:4a:5f:a9:52:4a:88:f8:3a:11:ca:8b:2c:00:cf:
13:7b:c1:16:88:64:ff:60:43:83:62:45:33:31:87:
9c:d2:f1:b4:24:12:d4:d5:17:e5:f1:f9:c5:d4:8a:
98:cd:49:78:e6:b7:75:fa:db:12:0e:ae:13:8c:be:
eb:94:83:57:51:be:89:df:ec:06:e8:95:4a:c0:1e:
32:5e:c3:df:18:b4:2a:0d:74:24:6c:a4:db:f3:28:
dc:bf:c0:76:bd:67:27:51:58:9e:ff:1c:10:86:d8:
b6:19:a2:cd:b2:95:d6:c0:66:2c:d7:e4:5d:14:7b:
16:23:ee:2b:ca:27:67:20:1d:5a:49:9e:3d:50:31:
b8:37:c8:c3:6f:30:75:6c:21:96:b5:7c:e6:34:1a:
51:76:21:90:94:5d:ea:90:70:10:50:2b:cc:cf:91:
04:a4:fa:5a:dc:ce:41:8b:52:c9:2f:90:67:62:1f:
1f:16:89:18:34:8c:1c:fb:b7:8c:db:ce:b0:11:50:
5f:b8:b8:12:c2:91:4a:0b:84:dc:3b:79:d5:8a:69:
63:e8:5c:c7:97:ad:e4:a8:fa:af:4f:29:4b:30:00:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.200.0/22
IPv6:
2a0e:e080::/32
Signature Algorithm: sha256WithRSAEncryption
a8:27:da:62:5f:af:f5:18:e4:42:6e:e3:6f:ba:fe:46:0f:92:
21:6b:8a:33:d7:82:73:77:23:53:39:88:b3:4e:31:ba:24:d7:
03:58:03:89:e8:e9:2b:b8:e5:cf:81:44:a9:ff:ac:0d:33:ef:
2e:7f:ca:84:cd:e3:45:e3:6f:63:17:4a:20:e1:8b:23:05:e6:
24:53:98:43:54:44:b6:f9:86:bf:68:e4:a2:da:fd:b1:c3:d3:
15:9f:e4:94:28:5f:95:c5:de:f5:30:2c:7e:45:2f:7e:2b:7a:
6d:ed:a0:5d:fa:2d:b3:ad:7c:c1:82:d4:5f:2a:82:bf:ca:0a:
60:0d:6d:5b:9d:88:4b:c0:3b:9b:75:ce:04:a8:f4:66:5a:0e:
3f:8c:1d:bd:c1:69:0b:1c:ea:1d:55:45:9b:f0:96:e1:79:69:
1b:15:01:d9:51:1a:4d:c8:4e:f4:03:8c:05:f6:b7:a9:3c:1f:
3b:b9:18:e5:75:0e:d4:a6:09:69:f3:38:2d:fb:1d:22:d7:8d:
08:d2:71:39:da:9e:a4:17:56:97:56:e8:b1:62:2b:fe:ef:e1:
71:ea:a1:42:b3:01:03:9e:6a:5b:77:ba:19:2e:a5:ab:b3:46:
67:47:41:31:57:03:84:ca:42:e2:08:3b:91:2f:21:80:b0:ce:
87:b3:5c:82
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZt87kY2Ym2RU/Cyc/4q9cPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTNjMzYwYzM2NGJiNjZkYzYzNTE3MTkzNTY4ZjViYTg1MTdhY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLMWQ4UbbufzJkO6Anq4S8Nl48O0
/SjQ+wepJ/s8Sl+pUkqI+DoRyossAM8Te8EWiGT/YEODYkUzMYec0vG0JBLU1Rfl
8fnF1IqYzUl45rd1+tsSDq4TjL7rlINXUb6J3+wG6JVKwB4yXsPfGLQqDXQkbKTb
8yjcv8B2vWcnUVie/xwQhti2GaLNspXWwGYs1+RdFHsWI+4ryidnIB1aSZ49UDG4
N8jDbzB1bCGWtXzmNBpRdiGQlF3qkHAQUCvMz5EEpPpa3M5Bi1LJL5BnYh8fFokY
NIwc+7eM286wEVBfuLgSwpFKC4TcO3nVimlj6FzHl63kqPqvTylLMABRVwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzhhZDRl
NS1kOWM5LTQzZTctYmUwZi0xZDljODY0MTZlOWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvOGFkNGU1
LWQ5YzktNDNlNy1iZTBmLTFkOWM4NjQxNmU5Yi8xL1NqdzJERFpMdG0zR05SY1pO
V2oxdW9VWHJPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCua3IMA0EAgACMAcDBQAqDuCAMA0GCSqGSIb3
DQEBCwUAA4IBAQCoJ9piX6/1GORCbuNvuv5GD5Iha4oz14JzdyNTOYizTjG6JNcD
WAOJ6OkruOXPgUSp/6wNM+8uf8qEzeNF429jF0og4YsjBeYkU5hDVES2+Ya/aOSi
2v2xw9MVn+SUKF+Vxd71MCx+RS9+K3pt7aBd+i2zrXzBgtRfKoK/ygpgDW1bnYhL
wDubdc4EqPRmWg4/jB29wWkLHOodVUWb8JbheWkbFQHZURpNyE70A4wF9repPB87
uRjldQ7Upglp8zgt+x0i140I0nE52p6kF1aXVuixYiv+7+Fx6qFCswEDnmpbd7oZ
LqWrs0ZnR0ExVwOEykLiCDuRLyGAsM6Hs1yC
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:44 2026 by rpki-client