Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
File: ThXfaIw66uP2he1Es5bCGYOVhh0.cer (raw, json)
Hash identifier: xRsUMoWa6xPNykn4J5qAZcB8dk4/eB3ur2D7ittw5u8=
Subject key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F702CB6989F975D5A6C9493165F47C5C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Jul 2026 13:03:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8477
AS: 20961
AS: 21021
AS: 30824
AS: 44643
IP: 31.6.128.0/17
IP: 31.42.16.0/20
IP: 37.131.128.0/19
IP: 37.190.128.0/17
IP: 46.186.0.0/17
IP: 46.231.56.0/21
IP: 62.61.32.0/19
IP: 62.141.192.0/18
IP: 80.244.128.0/19
IP: 80.245.176.0/20
IP: 81.190.0.0/16
IP: 82.115.64.0/19
IP: 83.68.64.0/19
IP: 84.38.80.0/20
IP: 85.117.0.0/19
IP: 87.116.192.0/18
IP: 89.17.224.0/19
IP: 89.228.0.0/14
IP: 92.42.112.0/21
IP: 93.94.184.0/21
IP: 94.78.128.0/18
IP: 94.251.128.0/17
IP: 95.129.224.0/21
IP: 95.174.32.0/19
IP: 176.107.112.0/21
IP: 176.221.96.0/19
IP: 185.31.184.0/22
IP: 193.43.240.0/22
IP: 193.106.76.0/22
IP: 193.200.118.0/23
IP: 194.116.132.0/23
IP: 194.149.240.0/24
IP: 195.93.134.0/23
IP: 195.93.222.0/23
IP: 213.136.224.0/19
IP: 217.70.48.0/20
IP: 217.75.48.0/20
IP: 217.144.192.0/19
IP: 217.172.224.0/19
IP: 2a00:1c00::/32
IP: 2a00:bde0::/32
IP: 2a02:2a40::/32
IP: 2a03:e800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:2c:b6:98:9f:97:5d:5a:6c:94:93:16:5f:47:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 13:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:21:ee:88:04:aa:a2:1f:a2:35:c9:85:88:
52:78:3a:80:5a:a7:80:e6:65:c0:62:1f:61:26:63:
2d:66:e5:19:aa:33:37:7d:e8:3d:3f:15:47:28:cf:
9c:9f:b9:79:3e:c6:40:f6:12:af:3b:15:47:03:06:
65:a6:1e:27:0b:e8:4a:05:97:e5:ce:4c:91:1f:08:
44:cc:ed:32:5b:a4:81:3b:03:b2:74:82:2c:6b:28:
2a:a5:f1:26:bd:48:ff:76:d1:ab:05:08:63:dc:c6:
41:b6:9d:69:c8:e2:ee:93:0d:d9:78:53:cc:f7:3d:
89:01:72:7b:c5:57:1b:c7:b8:f8:7a:bf:2b:1e:b9:
5b:35:de:41:62:f0:8f:cd:f5:e1:20:a4:b1:30:32:
69:6a:6e:a2:17:83:71:b1:1f:b6:6c:13:a3:03:97:
e4:72:12:3b:6e:65:82:f2:a6:59:81:95:a8:cb:e8:
5f:35:ac:09:77:20:cf:b9:a3:79:3f:6b:eb:f1:44:
39:da:35:d3:33:95:c5:d6:41:4b:18:04:a3:cc:0d:
a8:87:f4:0e:06:cc:59:57:8f:82:e3:a7:32:b1:bb:
e6:3c:d1:9f:32:40:74:22:41:66:c1:97:e5:ca:98:
a4:67:b4:d1:28:f3:3f:12:ab:7f:1f:19:f9:85:87:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0/17
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
IPv6:
2a00:1c00::/32
2a00:bde0::/32
2a02:2a40::/32
2a03:e800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8477
20961
21021
30824
44643
Signature Algorithm: sha256WithRSAEncryption
8f:e7:ea:b3:23:f1:bc:5a:f4:ae:8d:18:cb:4b:63:92:aa:d4:
4f:24:6e:e4:c2:67:a3:8c:03:00:c9:65:b7:78:6f:14:80:7b:
85:e3:35:38:e6:57:ba:ad:94:f6:42:ad:28:37:d3:ec:41:d5:
84:f4:8d:5a:8b:15:71:bf:a4:23:25:b9:fa:4f:a2:91:d2:2b:
e9:0d:07:68:3c:52:d9:e1:f8:c9:7e:ff:8c:21:66:62:f4:3f:
4b:df:63:4d:5e:24:c4:ef:53:40:76:ed:9b:6c:75:62:b8:ae:
95:54:61:e9:74:50:8e:c7:18:67:a1:e6:6d:e4:ad:eb:1c:7f:
fc:27:52:50:e6:ab:95:a3:cf:4b:04:b9:55:47:1f:5c:bb:2e:
2d:81:d5:9f:33:36:08:29:f5:d4:1c:56:6f:80:8d:3e:b7:8c:
f1:a4:a6:86:ce:09:80:e6:14:3e:b8:02:9a:0d:1a:69:88:b4:
4a:52:32:dc:e7:79:4c:98:d3:97:82:c3:01:29:75:57:c0:2a:
7e:4a:19:69:f5:d8:62:0d:a3:f0:38:b6:21:cf:2d:da:aa:1e:
9a:bb:a4:b0:2d:70:da:31:f0:0a:92:ce:a5:3d:72:a5:2e:69:
99:68:36:37:d9:77:94:4a:c4:f0:c0:f1:eb:32:d4:9c:67:25:
d1:05:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:04:03 2026 by rpki-client