Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
File: b1GlChfEHhkEHD-xCwqDkielyQU.cer (raw, json)
Hash identifier: X36lKXoJdH1YFfZABOOhb5Zo73xrryk/6YljuJ59JZE=
Subject key identifier: 6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D1FFB27D89FB811169593C6C8C0876DAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Mar 2026 13:14:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:132c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:fb:27:d8:9f:b8:11:16:95:93:c6:c8:c0:87:6d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 24 13:14:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:65:27:e8:c0:09:5f:9f:64:e5:67:d1:f6:
e7:eb:99:96:6e:a2:a9:b1:49:ef:04:57:ef:f1:55:
64:4b:9e:be:29:8c:ea:9c:3a:b1:23:e5:b9:eb:90:
84:98:c3:d1:7d:8e:c4:ae:c0:a3:2f:8e:03:43:3c:
a9:97:89:ea:30:2d:42:bb:e9:65:07:93:4c:b5:b4:
11:7f:32:72:23:d6:dc:eb:96:50:3d:ee:e1:38:3c:
13:2d:83:5c:d6:f3:2a:ff:3f:7f:36:7c:08:01:5f:
92:63:5d:5f:14:eb:a8:83:af:b6:0c:5c:41:0c:26:
b7:a2:bb:a2:87:13:5f:68:ca:b8:93:e0:fa:3a:c6:
09:47:5e:ed:35:37:2f:87:f6:14:a0:93:89:b8:5e:
87:20:03:2b:81:d1:0a:46:f6:e3:c8:eb:42:7e:66:
f4:62:65:f0:4b:c7:15:9c:03:70:c2:f4:79:f8:d2:
2d:06:f2:13:09:9e:0b:8a:e3:a6:ed:9a:bf:1e:a4:
05:54:d1:7e:6b:8a:83:ad:ed:b1:26:ba:d8:34:4d:
a9:2a:0c:d4:88:e7:82:4b:c9:7d:3b:f8:5f:35:6e:
2d:29:5b:60:4d:e5:89:13:5e:38:68:ec:0a:e0:b3:
80:e1:11:27:0e:5b:73:35:00:16:7b:e2:25:cf:90:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:132c::/48
Signature Algorithm: sha256WithRSAEncryption
a1:94:a5:df:53:e5:a0:c6:21:78:00:f8:b1:81:a7:cb:74:ef:
98:4e:e0:86:9f:47:57:50:3d:21:78:e9:e9:78:b6:7a:26:ee:
c2:e9:8d:f0:f3:48:9e:61:65:f0:be:68:be:a0:d0:79:4b:65:
c4:08:bc:9b:34:3a:76:89:d9:f8:59:28:64:52:cf:3c:22:71:
a7:b4:27:b4:07:90:56:61:a3:f1:11:c0:2e:03:57:30:73:64:
51:f0:5f:fc:35:8a:f5:9a:25:5e:be:97:22:c7:9d:71:e5:aa:
60:af:bd:93:92:80:c5:dc:b9:c1:4d:48:96:1f:9d:c3:3b:60:
f6:91:15:9b:ec:7d:5b:d4:ef:18:83:39:1c:98:6d:ab:9b:a9:
aa:98:ab:2b:a8:8a:cb:ff:b8:de:db:a1:b1:6b:b6:1c:76:9b:
05:b9:04:97:c8:a8:64:d9:05:dc:f2:fb:a5:da:46:dc:30:c8:
11:03:03:f5:c9:83:f0:6e:54:4f:0f:78:75:de:51:2d:fc:98:
34:13:43:74:3b:ca:bd:79:b6:df:a3:41:28:a3:e0:ea:c1:a0:
bf:7c:1a:0d:f9:ec:5a:66:52:83:a7:03:68:05:c5:78:6c:5b:
89:60:b8:e8:81:3c:f5:16:a7:bb:1a:e1:79:1a:fd:28:50:22:
d3:d3:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:56 2026 by rpki-client