Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
File: dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer (raw, json)
Hash identifier: egPFeFGkcKqv8T21Cp5zjDhtF45/V0FszaCyFKZtVU0=
Subject key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0D1FD3A128C6CEBF4156B12F07852FFD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Sep 2026 05:57:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 31.5.0.0/16
IP: 31.14.35.0/24
IP: 62.121.64.0/18
IP: 77.81.16.0/20
IP: 78.96.0.0/15
IP: 81.89.0.0/20
IP: 82.208.128.0/18
IP: 82.210.128.0/18
IP: 83.103.128.0/17
IP: 84.117.0.0/16
IP: 85.186.0.0/16
IP: 85.204.0.0/20
IP: 85.204.184.0/21
IP: 86.104.136.0/21
IP: 86.105.64.0/20
IP: 86.106.32.0/19
IP: 89.33.72.0/21
IP: 89.38.72.0/22
IP: 89.38.237.0/24
IP: 89.42.248.0/21
IP: 89.43.80.0/22
IP: 89.44.78.0/23
IP: 89.44.208.0/24
IP: 89.136.0.0/15
IP: 93.113.32.0/23
IP: 93.113.241.0 -- 93.113.243.255
IP: 93.114.32.0/21
IP: 93.114.190.0/23
IP: 93.114.216.0/21
IP: 93.117.66.0/23
IP: 93.117.138.0/23
IP: 93.117.154.0/23
IP: 93.118.46.0/23
IP: 93.119.126.0/23
IP: 93.119.137.0 -- 93.119.139.255
IP: 93.119.224.0 -- 93.119.226.255
IP: 94.176.144.0/23
IP: 94.177.108.0/22
IP: 95.76.0.0/15
IP: 185.63.136.0/22
IP: 188.208.117.0 -- 188.208.119.255
IP: 188.214.92.0/24
IP: 188.214.153.0 -- 188.214.154.255
IP: 188.214.195.0 -- 188.214.197.255
IP: 188.215.3.0/24
IP: 188.240.64.0/22
IP: 193.178.165.0/24
IP: 194.102.99.0/24
IP: 194.102.146.0/24
IP: 194.102.248.0/21
IP: 194.105.17.0/24
IP: 194.105.24.0/21
IP: 195.20.107.0/24
IP: 195.234.172.0/24
IP: 213.164.224.0/19
IP: 2a04:2400::/27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:fd:3a:12:8c:6c:eb:f4:15:6b:12:f0:78:52:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 05:57:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:af:73:0b:82:a1:f9:7a:e0:f5:5f:d4:7b:
de:02:3b:49:90:8a:5b:8e:c8:83:a1:c8:ad:b1:a2:
a3:cf:19:e6:38:f9:76:b2:16:92:f5:87:0f:2d:df:
ed:d0:2c:79:81:6d:04:e2:f1:e9:b1:eb:2a:8a:ec:
b4:a4:0f:04:33:6d:9a:59:93:01:ed:8d:2f:0f:37:
d5:00:4a:5f:47:53:95:f5:57:e3:08:9b:02:63:b4:
17:94:f7:a8:9b:0f:6c:f6:50:ff:1b:37:0d:1b:8b:
7e:bb:e8:df:bb:7d:6a:f7:d4:4b:ee:b5:a9:b1:55:
00:7a:ad:48:f9:74:04:56:00:65:de:25:dc:67:4f:
95:c2:7a:62:6c:3d:9d:53:3b:56:ed:fb:8c:2d:f2:
7d:22:df:22:7d:6e:ff:1e:05:22:f7:99:d9:14:63:
24:b1:cc:c1:79:83:de:cf:53:5a:ef:fa:44:7d:b4:
c6:45:a9:3a:93:91:6e:ef:c2:ee:75:47:66:96:74:
5e:56:01:be:ea:b5:fa:08:37:6b:8e:fe:5d:1c:87:
ad:7c:04:d8:bc:06:06:c0:6a:e9:d6:42:09:b7:7f:
be:44:c2:e9:82:00:4d:cb:3e:ef:e9:c2:54:e0:5c:
76:26:47:1e:95:f2:0c:64:79:7d:29:96:dc:84:0a:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.5.0.0/16
31.14.35.0/24
62.121.64.0/18
77.81.16.0/20
78.96.0.0/15
81.89.0.0/20
82.208.128.0/18
82.210.128.0/18
83.103.128.0/17
84.117.0.0/16
85.186.0.0/16
85.204.0.0/20
85.204.184.0/21
86.104.136.0/21
86.105.64.0/20
86.106.32.0/19
89.33.72.0/21
89.38.72.0/22
89.38.237.0/24
89.42.248.0/21
89.43.80.0/22
89.44.78.0/23
89.44.208.0/24
89.136.0.0/15
93.113.32.0/23
93.113.241.0-93.113.243.255
93.114.32.0/21
93.114.190.0/23
93.114.216.0/21
93.117.66.0/23
93.117.138.0/23
93.117.154.0/23
93.118.46.0/23
93.119.126.0/23
93.119.137.0-93.119.139.255
93.119.224.0-93.119.226.255
94.176.144.0/23
94.177.108.0/22
95.76.0.0/15
185.63.136.0/22
188.208.117.0-188.208.119.255
188.214.92.0/24
188.214.153.0-188.214.154.255
188.214.195.0-188.214.197.255
188.215.3.0/24
188.240.64.0/22
193.178.165.0/24
194.102.99.0/24
194.102.146.0/24
194.102.248.0/21
194.105.17.0/24
194.105.24.0/21
195.20.107.0/24
195.234.172.0/24
213.164.224.0/19
IPv6:
2a04:2400::/27
Signature Algorithm: sha256WithRSAEncryption
6f:6a:df:78:80:cc:ca:fb:6e:f2:fe:79:c3:26:f6:52:0c:23:
36:52:90:7b:41:17:63:91:9a:c2:6c:f7:28:56:80:ca:7b:a7:
2c:59:64:3f:37:2e:d9:3a:f7:70:78:a3:4b:05:e1:33:46:8b:
7c:bc:06:e5:aa:91:be:5e:a9:87:12:6b:a5:c9:7d:b1:b9:1b:
b2:70:c7:3d:f2:e0:08:07:07:ee:a1:40:9a:18:da:fe:d9:49:
68:42:b9:28:ca:e1:08:d8:15:ac:01:47:14:86:d8:10:f6:58:
f0:e5:77:fa:13:5b:2d:48:51:cc:69:b4:f9:7d:e9:7d:f8:cd:
a7:b1:58:c3:aa:75:60:e0:5f:2b:ee:a6:02:a7:25:d0:93:62:
8d:ae:5f:cb:a0:d5:db:27:58:82:1d:83:06:5d:b3:a1:22:bd:
c8:97:0e:7f:9c:57:1a:fb:03:27:35:0d:54:97:56:a1:6e:a4:
55:b7:ba:99:ed:68:54:a3:8e:20:01:c0:3d:80:2c:23:d4:63:
58:02:c6:ee:e2:b3:d5:e2:f2:ed:c6:2e:06:ba:63:0b:4a:bd:
d3:98:1e:4d:21:05:cb:36:54:42:a4:e3:f2:78:70:1e:e9:0e:
d8:e1:ac:29:05:61:63:0d:4b:28:c4:ce:b1:85:3d:17:e9:c7:
b7:a6:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:27:35 2026 by rpki-client