Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
File: TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer (raw, json)
Hash identifier: O+7QlAQBJHqzNnoUFudFqSLYx+3vMQ/RtTYGAiOu65c=
Subject key identifier: 4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F65D3DE3B5660648B30F42B7A7CF00409
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Jul 2026 12:50:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 62.129.136.0/23
IP: 2a03:b980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:d3:de:3b:56:60:64:8b:30:f4:2b:7a:7c:f0:04:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 15 12:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cdd63b4212c89a2016fae62517a186c95077d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:eb:15:37:b5:48:89:51:7e:54:17:12:e1:
8b:a1:7d:e0:7d:6e:73:66:ca:74:16:41:07:52:c6:
50:10:65:4a:48:89:63:ff:57:0b:c9:76:12:c8:87:
d0:d5:31:23:b1:b0:fc:8a:59:8b:48:52:1c:c5:9c:
96:28:12:b5:40:5a:f1:09:37:5d:83:04:6a:03:40:
bc:5c:fd:7f:04:c2:c7:a0:da:ce:bf:c3:78:e9:b8:
92:bf:85:d5:d4:93:fe:66:81:29:d2:5b:47:b0:6e:
41:20:49:d8:ef:5c:5a:6e:72:f2:d1:e5:21:ec:54:
a7:93:51:3e:d5:ce:94:2c:2f:29:ca:ec:73:06:c8:
de:64:c8:dd:27:c6:4d:cf:64:5e:4f:1a:dd:87:e0:
5e:ef:ca:b0:bb:11:8b:ad:58:b8:2c:9a:0e:be:e8:
c4:75:3f:eb:d9:8f:7d:23:cb:24:e4:76:8b:2d:9f:
1d:65:cb:da:6c:6e:a0:93:57:e9:b5:e5:34:d2:1d:
14:b5:0b:d5:bd:c4:79:88:f0:80:66:44:03:0d:ee:
e4:29:c0:71:dd:3b:37:8c:37:88:97:ec:ea:dd:2b:
90:6c:3a:47:5f:f1:e7:f7:62:43:c5:0d:ee:99:c6:
47:a9:21:cc:d8:8e:a8:b0:58:60:5c:7e:09:85:97:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.129.136.0/23
IPv6:
2a03:b980::/29
Signature Algorithm: sha256WithRSAEncryption
39:4a:29:73:75:32:9e:93:33:4f:db:5e:b7:55:74:f5:b2:88:
59:f1:d9:53:81:df:e1:69:9a:99:6e:4a:a5:09:52:bb:5c:b1:
a9:ea:9f:82:8a:7e:2c:61:07:fb:08:fc:5c:bd:3d:ac:78:57:
9b:b8:2c:b6:1e:25:53:52:06:56:84:39:0c:a0:61:f7:40:49:
65:06:b4:b5:f0:8b:c3:be:6c:63:ff:c0:5c:2d:71:f4:9c:6e:
b7:af:c6:30:8c:1f:0a:56:72:75:ba:52:6e:6f:84:4f:f0:7c:
43:68:bb:a9:0d:26:64:4e:1b:58:5e:c4:40:32:4a:86:3f:5e:
90:32:57:ee:47:77:12:03:7f:7c:e9:a1:2f:c8:ca:5f:38:05:
44:61:63:77:de:9c:35:f1:08:fc:49:d1:72:81:6d:0f:6c:d1:
cd:df:2d:2d:e3:ef:06:49:6a:ea:af:90:70:12:b6:a0:93:2c:
21:4a:fc:40:7e:42:71:7a:ac:7a:86:77:a2:4e:0b:d2:0e:95:
56:2c:94:6e:41:cc:b1:02:fd:70:cf:86:17:ee:19:ce:97:5c:
f7:1f:73:da:67:46:77:d9:45:08:b7:2e:7a:cd:8a:72:d9:f4:
6e:8d:bf:92:7d:92:17:54:4b:2e:ce:8e:67:d6:59:cb:dd:97:
cf:4c:69:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:05 2026 by rpki-client