Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
File: e2nv5gFvctRZLxsLq5GGR2_zop0.cer (raw, json)
Hash identifier: yBbriZ0mOXXfWZyiiTU/nGZwANq9W83EfkPpDve4ETA=
Subject key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD76B3ACDD5204D6EF061F481AB4BFD8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Mar 2026 11:04:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.60.92.64/26
IP: 2a0b:71c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:6b:3a:cd:d5:20:4d:6e:f0:61:f4:81:ab:4b:fd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 11:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:35:9b:44:97:fb:05:be:7c:a3:2e:24:e2:
43:dc:0e:c1:b3:fd:09:7c:a1:93:91:a0:dc:4e:69:
21:ba:77:1c:21:51:54:5c:44:04:cf:db:84:7a:f1:
6b:f6:6c:d1:e3:92:19:11:2e:53:14:f6:c6:09:03:
d8:ea:09:37:bc:ce:eb:92:68:34:61:16:dc:dc:f3:
71:4e:ae:2f:c3:ee:09:92:16:2f:83:f6:a0:24:34:
69:8b:6e:64:9c:f6:62:de:ff:77:9d:90:5a:81:e9:
84:af:4d:91:17:6e:d2:c7:f0:40:b0:3c:19:01:f6:
ab:eb:dc:3f:a9:9e:18:91:08:84:74:91:6a:87:15:
d8:6a:1f:c3:41:93:3d:35:c2:a2:a5:1d:fb:84:f0:
d2:28:d4:24:cf:bb:a7:85:66:b2:c4:81:49:18:9b:
1f:73:ab:f3:b5:6f:7c:7b:30:64:a3:16:09:b7:69:
5b:71:12:68:d0:b5:91:99:22:2a:eb:8d:12:87:21:
80:f5:68:3e:83:b5:c3:28:e3:d5:af:e9:c2:20:63:
ca:4f:10:04:9c:47:1e:c7:48:ca:ed:00:b9:62:a8:
e2:1d:2a:ce:3c:61:33:ae:44:74:85:1b:45:d1:b6:
d0:f3:ec:7f:57:19:50:6e:f4:b6:ef:8a:63:14:5e:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.92.64/26
IPv6:
2a0b:71c0::/29
Signature Algorithm: sha256WithRSAEncryption
a6:07:97:60:f8:f0:96:02:3e:ea:d4:0f:76:1d:d8:ee:ac:f2:
b3:5f:14:2e:ec:93:9e:23:b5:2c:aa:b7:12:f9:9d:ba:57:0e:
f4:62:5d:e1:39:0f:b4:44:49:99:c2:94:65:d0:45:96:aa:41:
9a:71:b9:9d:53:2d:cc:54:d1:bb:d2:aa:1e:b5:1b:7c:86:51:
e9:3c:db:96:2c:6a:f0:ba:ce:bc:72:65:b0:c7:64:80:46:d9:
d4:ee:60:5c:80:0f:cd:3d:fb:c0:58:46:82:38:52:9d:95:6a:
15:51:eb:17:3e:53:1e:13:67:8c:0d:c9:19:06:a0:1c:0c:cc:
d8:4e:49:d0:39:b4:bd:fa:c7:a7:1a:59:04:93:80:d4:e5:0d:
fa:92:ac:1d:78:46:bf:5f:41:82:37:e3:15:1b:38:1a:94:dc:
30:c3:86:b6:ac:69:d7:a5:94:ec:cb:c8:fb:09:43:28:68:e2:
1d:c0:53:3a:a2:a9:31:4f:45:39:7f:9a:98:c5:31:1a:8f:c3:
78:3d:38:98:f4:4d:22:38:cf:00:65:62:63:4b:09:39:43:75:
8b:9a:7e:ca:90:7e:28:9c:bd:cd:34:72:50:7d:af:5b:8b:30:
64:c5:68:aa:5e:45:86:5d:00:49:02:16:e1:7a:39:da:b1:0b:
13:11:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:39:42 2026 by rpki-client