Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
File: TTpxp39MqbpTb5hhKpxW1AwMO50.cer (raw, json)
Hash identifier: VsPM8bGd7h67mhiW/Ud//KXPdxHvg3gqySxbO3OI9r8=
Subject key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A290C8260B9E02BD0770075A01FBBA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.82.188.0/22
IP: 2a0e:7280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:90:c8:26:0b:9e:02:bd:07:70:07:5a:01:fb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:c3:aa:f2:0e:77:f4:6c:7e:6d:6e:b8:04:
a7:99:5e:be:90:e1:e4:63:50:8f:53:31:3f:9e:a9:
9d:dd:09:f8:d3:09:5f:b3:6b:2e:d3:1f:93:45:63:
e5:37:d8:85:5e:87:47:16:c9:73:19:3b:db:74:92:
94:3a:9f:13:8f:c4:0f:8f:0a:f3:16:d5:4f:eb:db:
c6:27:fb:1c:fa:bd:9f:83:d2:f8:cc:f6:be:a0:98:
7f:7f:5b:12:3d:78:c1:81:4f:fe:20:39:85:d0:bc:
e4:12:eb:57:c1:61:a3:e9:e6:57:37:7a:e0:3a:88:
0f:1f:49:42:1b:81:03:89:0f:2e:3e:37:f3:48:cf:
f9:a2:80:98:a0:17:69:bd:ea:ad:03:b2:b1:27:45:
35:b3:b6:cd:a3:be:1e:11:71:e0:94:ee:e9:d4:18:
01:22:36:05:c5:08:ba:53:02:82:13:56:19:2e:c7:
fe:67:0d:9e:18:a1:50:8c:6d:ea:be:98:3d:8d:b3:
1b:12:9b:c1:4f:e4:67:01:35:d9:79:98:91:57:22:
ea:36:af:c9:79:1d:ce:30:c1:d4:17:cf:46:eb:3f:
cb:10:56:d3:fe:50:bb:98:33:ba:c1:a4:3b:e8:8d:
90:ba:a5:a1:00:65:6f:de:13:9c:f5:cc:20:89:3a:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.188.0/22
IPv6:
2a0e:7280::/29
Signature Algorithm: sha256WithRSAEncryption
1d:9d:31:bc:ea:48:2a:90:24:24:ba:f1:25:1e:8a:4d:84:4c:
83:67:a4:f0:6f:16:1f:dd:cd:9c:85:7b:32:24:9b:aa:9e:a5:
72:87:df:a4:af:be:4f:fa:18:ea:7f:98:ce:e5:cd:7c:71:92:
30:8c:1d:17:16:5a:fa:46:fd:4d:aa:27:8f:5c:00:22:9f:2d:
20:31:59:6a:58:7c:8e:22:3a:68:b1:7b:09:91:65:c7:b6:22:
54:f1:1d:c8:42:3d:49:1c:05:e5:83:31:b5:95:da:67:ed:8c:
ed:bb:7d:72:2e:3b:42:39:f0:af:18:eb:43:96:6e:b4:23:68:
08:d5:5b:88:a0:44:f4:d8:b5:73:78:64:cb:f7:ed:f9:00:c2:
a5:b3:28:54:e5:8f:67:8c:0b:8f:73:5e:32:c5:a4:e1:09:52:
81:61:9c:ab:54:da:9c:5e:f9:dc:f4:ed:a9:ed:ef:ad:49:83:
cb:5a:62:f0:dd:39:1f:50:2f:e8:f7:d5:59:4d:8c:cd:a9:48:
8c:5e:39:1a:8f:3d:98:75:ab:7a:71:3d:85:b5:c9:bf:10:61:
03:13:bb:1d:8c:36:be:b4:cb:01:1a:1b:8e:91:75:31:71:60:
c3:de:9e:38:c5:08:ca:7c:16:52:36:4f:ab:16:90:1c:05:5c:
31:d2:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:58 2026 by rpki-client