Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer (raw, json)
Hash identifier: rsuAqhxJ3FfOvkGXUf2ul2npxC2Y6bjugm7hfiRWa3c=
Subject key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C71C45EE03DCBEC62D04B4D2544BE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.93.40.0/22
IP: 2a0e:23c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:1c:45:ee:03:dc:be:c6:2d:04:b4:d2:54:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c51636fde905f8521f411479e81321cdcf49049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:6f:cc:19:69:5e:54:0b:33:4c:7e:e4:2a:
62:7e:68:80:32:74:25:a8:63:45:d9:67:54:6c:6e:
96:8c:98:5d:0c:9c:76:c2:f0:1b:2c:87:b0:07:0f:
d2:e9:dd:8f:b1:29:ea:82:f0:53:51:f1:ad:ae:ee:
45:00:08:e1:e1:a4:2c:42:4c:09:e2:a7:e4:b1:29:
a5:a4:d4:eb:72:00:87:88:2d:e8:a8:7d:85:08:0b:
eb:c6:99:5e:b6:f6:d1:2c:a0:33:a2:34:80:d5:c0:
31:ba:96:f6:5f:1b:c6:8d:0f:8d:0f:cd:5c:34:46:
08:6d:8f:0e:23:b0:f4:b4:d0:84:2c:3e:81:2f:0c:
81:4d:ea:35:03:32:ee:52:82:75:6f:7f:40:9d:17:
93:9e:21:4b:ed:07:f5:74:cb:05:01:a2:77:aa:15:
d2:48:9e:41:22:15:e9:c3:5c:42:96:70:d6:2d:1e:
fe:86:3a:87:bf:92:fc:d5:05:e6:37:39:de:8c:61:
1a:4c:b5:61:19:27:da:5f:a6:9e:12:c9:b4:1d:ae:
db:57:db:49:69:de:88:d1:26:b7:e1:12:8d:ed:ec:
32:1e:d7:6f:df:0d:74:12:c9:91:4f:08:cb:ec:14:
f4:45:ac:08:9c:03:ab:8e:f7:e4:85:ef:00:91:82:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.40.0/22
IPv6:
2a0e:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:50:13:df:56:a7:be:05:56:e4:4c:e6:35:f4:8e:37:00:f8:
1d:fe:8d:d0:8e:03:71:87:33:b0:91:f3:eb:0e:f3:74:1f:e3:
62:23:e4:83:30:39:3c:87:04:e3:51:43:c3:33:a9:6d:95:d9:
92:bd:47:27:0a:63:e3:63:05:8e:5f:17:45:63:1c:34:0e:ea:
c7:0f:7a:2f:47:5e:06:a5:b5:86:f0:f6:cc:34:a6:58:27:97:
03:52:6a:f7:00:63:0b:1b:a9:55:19:6b:b5:eb:92:d2:a8:57:
95:49:d8:70:0d:2d:97:c9:85:8d:b2:76:8a:0f:86:ae:84:e7:
f4:f9:dd:3e:73:d1:7a:41:f8:32:81:4b:ae:e3:85:0f:90:bd:
52:c0:ae:e9:19:a5:de:a5:70:65:d7:b3:b0:5e:ad:05:84:9d:
20:23:54:4a:c6:9f:71:07:09:f3:0e:58:a9:1d:36:f9:fb:34:
5c:6c:7a:bc:42:82:1f:9e:55:d1:7f:7e:23:bf:43:9d:57:4a:
4b:a1:78:7f:ec:33:68:ec:f1:94:bd:e0:58:6a:4d:09:95:ef:
c1:6b:0f:08:80:91:99:97:97:d9:98:c4:18:07:9d:23:8a:cf:
32:db:52:08:99:0c:71:82:30:f0:29:e0:93:81:90:6b:34:54:
b2:cb:a5:aa
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZt3xxxF7gPcvsYtBLTSVEvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzUxNjM2ZmRlOTA1Zjg1MjFmNDExNDc5ZTgxMzIxY2RjZjQ5MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wlvzBlpXlQLM0x+5CpifmiAMnQl
qGNF2WdUbG6WjJhdDJx2wvAbLIewBw/S6d2PsSnqgvBTUfGtru5FAAjh4aQsQkwJ
4qfksSmlpNTrcgCHiC3oqH2FCAvrxpletvbRLKAzojSA1cAxupb2XxvGjQ+ND81c
NEYIbY8OI7D0tNCELD6BLwyBTeo1AzLuUoJ1b39AnReTniFL7Qf1dMsFAaJ3qhXS
SJ5BIhXpw1xClnDWLR7+hjqHv5L81QXmNznejGEaTLVhGSfaX6aeEsm0Ha7bV9tJ
ad6I0Sa34RKN7ewyHtdv3w10EsmRTwjL7BT0RawInAOrjvfkhe8AkYL2twIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFExRY2/ekF+FIfQRR56BMhzc9JBJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzgwMDhm
ZS0xNzViLTQxYmYtYjFkNi0yY2UwZWI0NTg3ODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvODAwOGZl
LTE3NWItNDFiZi1iMWQ2LTJjZTBlYjQ1ODc4OC8xL1RGRmpiOTZRWDRVaDlCRkhu
b0V5SE56MGtFay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLV0oMA0EAgACMAcDBQMqDiPAMA0GCSqGSIb3
DQEBCwUAA4IBAQCkUBPfVqe+BVbkTOY19I43APgd/o3QjgNxhzOwkfPrDvN0H+Ni
I+SDMDk8hwTjUUPDM6ltldmSvUcnCmPjYwWOXxdFYxw0DurHD3ovR14GpbWG8PbM
NKZYJ5cDUmr3AGMLG6lVGWu165LSqFeVSdhwDS2XyYWNsnaKD4auhOf0+d0+c9F6
QfgygUuu44UPkL1SwK7pGaXepXBl17OwXq0FhJ0gI1RKxp9xBwnzDlipHTb5+zRc
bHq8QoIfnlXRf34jv0OdV0pLoXh/7DNo7PGUveBYak0Jle/Baw8IgJGZl5fZmMQY
B50jis8y21IImQxxgjDwKeCTgZBrNFSyy6Wq
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:29:49 2026 by rpki-client