Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer
File: b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer (raw, json)
Hash identifier: ADJGSjMOF7B/LF54Wx3k8aAFO3qY1cAKQoVxpkjap84=
Subject key identifier: 6F:A7:2E:1F:D2:21:C6:77:35:FA:8D:11:F6:8F:2F:52:80:D7:C4:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA281A3EE2EF8F94489A26742374EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.52.212.0/22
IP: 2a01:baa0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:28:1a:3e:e2:ef:8f:94:48:9a:26:74:23:74:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fa72e1fd221c67735fa8d11f68f2f5280d7c444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:c3:bc:14:5e:b3:b3:ac:bf:4a:97:77:2b:
3b:b8:80:82:12:9d:e6:01:35:d7:9a:bb:a5:5c:7f:
ff:92:85:3a:65:93:78:59:7b:1d:bc:34:b0:e2:2e:
c8:06:5d:fb:6d:5e:1d:53:b2:f4:08:70:22:65:46:
0a:2d:39:51:33:d0:75:16:c5:5c:65:9b:c9:4b:e8:
b7:60:85:13:94:cb:22:63:30:42:ef:e6:00:7a:c4:
71:41:e0:e6:dd:bc:9a:20:83:b9:6d:da:6d:57:99:
cd:00:11:46:b2:b2:f4:5f:55:ba:09:44:98:4f:87:
a8:7d:5d:f0:21:79:76:6b:25:e0:64:d3:30:fb:44:
fd:ac:e0:03:3c:3f:be:57:f2:6f:d9:80:35:b1:c9:
64:a4:69:b5:ca:5e:0e:1a:04:20:cc:08:a7:aa:a6:
83:ff:a4:74:4d:9e:59:bf:af:5f:97:46:54:e8:3b:
ed:3e:8e:dc:05:4c:37:4f:67:7e:1f:4a:fa:79:4d:
a9:2d:40:d7:bf:cc:7c:d0:2a:0f:be:a4:7d:94:44:
7a:0d:78:4e:69:d0:84:22:a9:00:57:a9:13:d4:9a:
34:b7:d3:4c:0d:bc:ef:6d:0d:91:99:eb:cf:00:be:
c2:13:0c:00:a8:7b:01:c4:f4:53:10:31:02:d3:e2:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:2E:1F:D2:21:C6:77:35:FA:8D:11:F6:8F:2F:52:80:D7:C4:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.212.0/22
IPv6:
2a01:baa0::/32
Signature Algorithm: sha256WithRSAEncryption
24:57:5d:58:c1:c9:91:e7:e1:11:be:f1:59:be:c9:6b:4a:d9:
38:59:46:8b:17:ae:5a:f3:8c:ce:01:24:9e:e1:49:57:45:bb:
10:d6:05:22:2e:9c:0c:d8:12:7b:67:49:2d:0a:0e:7e:8c:c5:
12:81:7a:f5:92:2d:81:7a:98:d2:e2:34:49:87:b0:1a:9a:63:
4d:d8:02:f1:cc:70:c0:56:a6:28:68:61:1b:bb:ee:91:a9:eb:
a1:55:39:9a:66:43:49:41:63:7c:30:ba:87:0d:57:38:21:df:
f0:ed:b2:1b:a4:34:27:9f:ed:10:51:a8:2e:be:c1:bd:a8:da:
b2:1b:f7:f6:91:18:66:1a:02:26:d0:45:bd:36:15:46:8d:0f:
e6:54:ce:dd:34:2d:ee:97:ca:3b:97:5a:bd:b0:d7:65:e6:c9:
35:bb:aa:19:dc:9e:a0:3b:c2:fe:17:cc:74:bd:7f:fc:0f:e8:
09:15:66:cd:b6:c7:aa:1e:4f:2d:ad:b7:4d:de:1a:66:bd:56:
cd:16:92:6b:4c:ea:53:31:5c:e6:95:0f:73:f4:0c:49:4a:47:
6c:d5:7f:42:05:6e:d9:2b:5c:a1:37:c6:11:be:43:b5:34:8a:
a6:6d:d7:17:bd:55:8c:97:92:06:0a:09:0c:cc:e4:8b:17:47:
b8:88:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:54 2026 by rpki-client