Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
File: Tl67mwUa1ex6Npifw_zJTByrzHQ.cer (raw, json)
Hash identifier: XSUwvuhBTakhCS4h7GSpPCSyj+6AZ1Vyv/yey2YXxBo=
Subject key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B3660A6242FA1603B90E5683728CC77
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 46.254.24.0/22
IP: 80.251.144.0/21
IP: 80.251.154.0/24
IP: 89.249.48.0/24
IP: 93.159.216.0/22
IP: 2a0a:3040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:60:a6:24:2f:a1:60:3b:90:e5:68:37:28:cc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:4e:c9:8e:f6:78:c4:cd:57:8f:0a:3b:be:
69:46:de:76:66:a0:78:ab:71:f5:1d:a6:24:af:62:
16:66:8b:c1:52:d1:89:3b:98:fc:1e:9b:4c:3c:24:
42:e5:f2:61:e6:bd:ba:78:d9:67:87:2a:d7:a7:bd:
c7:6a:bb:92:f8:4b:b5:ba:1f:8c:c1:45:8a:57:d6:
96:ac:7b:cd:c7:20:d4:e8:0a:42:e6:eb:3a:09:40:
07:81:48:35:86:22:86:f5:ea:5e:0c:a4:c0:86:e7:
94:38:c1:a1:75:eb:7f:37:8d:7f:44:ad:b9:09:13:
ed:51:05:ba:3f:dd:c3:36:ea:4b:ab:15:bb:ea:a0:
47:94:99:df:83:39:e1:e6:8a:4b:ea:00:80:42:97:
b9:f3:14:ff:8d:16:7b:87:23:a7:99:97:23:32:6c:
70:f3:9c:7b:09:c1:cd:cb:d7:14:17:ae:67:5d:1e:
1b:22:52:39:5c:17:af:cd:26:9e:5b:fa:ab:90:43:
7c:e9:d7:72:b2:98:70:17:dc:d5:54:9f:2d:50:79:
80:4e:b4:30:22:09:8b:0f:2f:65:9e:c8:c6:1d:61:
fb:be:6c:c3:26:ac:3b:59:1a:52:cc:67:88:c6:ec:
e1:25:26:8f:0f:56:16:a5:17:5d:e0:4e:22:a3:81:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.24.0/22
80.251.144.0/21
80.251.154.0/24
89.249.48.0/24
93.159.216.0/22
IPv6:
2a0a:3040::/29
Signature Algorithm: sha256WithRSAEncryption
96:f3:7e:ac:6e:9c:bb:d8:bb:f9:f5:71:4d:56:08:d6:6a:59:
33:fe:31:3e:03:a8:5b:33:65:7e:38:12:9e:7d:a0:ae:07:c8:
d5:85:27:a3:70:dd:bb:0f:52:a7:5a:19:fb:23:3b:5d:c2:cb:
53:9d:c9:7a:a6:1c:05:f2:a1:17:5d:92:8a:ee:70:84:94:f9:
26:bb:8f:55:1b:45:10:ac:fc:8e:a9:07:ac:e4:a2:ed:29:4d:
3e:b5:73:dd:5d:ae:70:e5:6d:a2:25:5a:e2:49:f4:71:38:67:
a5:04:40:79:e4:97:1e:01:18:99:e6:fc:9a:15:72:3b:9b:59:
ca:c3:ad:a3:bb:aa:22:6c:63:18:40:9d:8d:66:a1:6b:e2:ea:
a5:a1:5b:06:b0:54:c7:70:70:32:e1:2b:6e:f4:d5:94:6f:44:
48:0f:d9:89:48:f9:7c:74:86:cb:63:aa:da:40:ff:e4:71:bd:
ad:a1:02:3c:1b:cc:88:50:93:c0:51:52:c1:37:fe:6b:dd:e9:
c6:83:d8:cd:ab:79:28:9c:8b:47:d6:4b:b9:22:81:e4:9b:20:
9a:92:93:d7:c6:b1:c1:69:33:ee:de:b9:54:ed:4a:4e:a9:98:
f2:a8:cc:5b:27:9f:d8:fe:e6:60:0a:a5:8a:21:23:2b:a9:bf:
3c:37:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:31:18 2026 by rpki-client