Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
File: e5RH_ppKzH1v9y1seY1D1mzVDD8.cer (raw, json)
Hash identifier: gFfweQjcEnUJ6EBrjMlsq6DW+9IXFRBpO9+ydp3dS78=
Subject key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DFCB8BD71A04AEBA054379A3B09EC1671
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 May 2026 09:57:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 217.18.49.0/24
IP: 2a09:3700::/29
IP: 2a09:6800::/29
IP: 2a09:6900::/29
IP: 2a09:7e00::/29
IP: 2a09:8b80::/29
IP: 2a09:9300::/29
IP: 2a09:ba40::/29
IP: 2a09:da40::/29
IP: 2a0a:bbc0::/29
IP: 2a0b:7a80::/29
IP: 2a0b:9480::/29
IP: 2a0c:ac0::/29
IP: 2a0c:1240::/29
IP: 2a0c:2840::/29
IP: 2a0d:3040::/29
IP: 2a0d:48c0::/29
IP: 2a0d:adc0::/29
IP: 2a0d:b9c0::/29
IP: 2a0d:f640::/29
IP: 2a0e:f00::/29
IP: 2a0e:13c0::/29
IP: 2a0e:4340::/29
IP: 2a0e:4580::/29
IP: 2a0e:6740::/29
IP: 2a0e:67c0::/29
IP: 2a0e:7040::/29
IP: 2a0e:8540::/29
IP: 2a0e:8840::/29
IP: 2a0e:9180::/29
IP: 2a0e:c440::/29
IP: 2a0e:dfc0::/29
IP: 2a0f:c00::/29
IP: 2a0f:4300::/29
IP: 2a0f:72c0::/29
IP: 2a0f:bb00::/29
IP: 2a0f:da80::/29
IP: 2a11:640::/29
IP: 2a11:1340::/29
IP: 2a11:1380::/29
IP: 2a11:15c0::/29
IP: 2a11:1840::/29
IP: 2a11:21c0::/29
IP: 2a11:2c40::/29
IP: 2a11:2d80::/29
IP: 2a11:3080::/29
IP: 2a11:3180::/29
IP: 2a11:31c0::/29
IP: 2a11:34c0::/29
IP: 2a11:35c0::/29
IP: 2a11:3d00::/29
IP: 2a11:3f00::/29
IP: 2a11:41c0::/29
IP: 2a11:4340::/29
IP: 2a11:4a00::/29
IP: 2a11:5a40::/29
IP: 2a11:6340::/29
IP: 2a11:66c0::/29
IP: 2a11:7080::/29
IP: 2a11:7880::/29
IP: 2a11:8500::/29
IP: 2a11:9880::/29
IP: 2a11:b680::/29
IP: 2a11:d380::/29
IP: 2a11:d700::/29
IP: 2a12:1240::/29
IP: 2a12:1540::/29
IP: 2a12:1a40::/29
IP: 2a12:24c0::/29
IP: 2a12:2740::/29
IP: 2a12:2cc0::/29
IP: 2a12:2e40::/29
IP: 2a12:3140::/29
IP: 2a12:35c0::/29
IP: 2a12:3740::/29
IP: 2a12:3bc0::/29
IP: 2a12:3cc0::/29
IP: 2a12:4140::/29
IP: 2a12:41c0::/29
IP: 2a12:46c0::/29
IP: 2a12:7300::/29
IP: 2a12:9500::/29
IP: 2a12:cc00::/29
IP: 2a14:9700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:b8:bd:71:a0:4a:eb:a0:54:37:9a:3b:09:ec:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 09:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:cd:57:02:4f:a7:02:89:54:00:f2:9a:65:
09:d0:c4:56:ff:60:1b:32:4b:65:cc:de:3e:f4:0d:
b7:b9:cd:a6:8d:74:a2:ba:a0:23:c3:07:ba:50:38:
21:b1:02:8a:a2:b7:d0:3b:75:ef:76:cc:f6:a9:74:
9a:cc:ea:d5:00:b5:7a:ff:ee:1c:44:54:06:02:76:
8a:0d:bb:45:b9:29:96:38:2f:42:1f:f9:0a:e6:7a:
f3:af:2a:b7:8e:94:74:fc:73:09:cf:0b:22:26:f1:
8a:bc:db:60:d7:f9:25:9d:5f:95:bf:c5:c4:f8:1d:
c9:5e:c0:f8:f2:39:c4:51:e1:21:2a:00:4d:c6:63:
17:15:30:df:3d:9e:5c:e3:8b:95:12:b4:d4:6f:9a:
24:a5:bf:2d:1d:0b:99:8e:da:70:cc:fe:e2:7c:a1:
e2:51:5e:c3:63:c2:12:ab:f9:5c:8a:a1:7a:8a:66:
c3:58:6f:ce:1f:27:31:b5:51:76:3b:cf:d0:f0:16:
ee:80:78:ec:70:62:4d:d8:30:48:f6:2e:30:45:81:
fd:5d:1d:2d:91:d0:bb:21:aa:49:cb:e2:84:bf:4c:
b7:7e:c1:12:bc:e7:a0:6a:bb:cf:80:a4:f7:68:b4:
3f:f7:24:6a:c7:89:cb:4c:38:7a:45:76:84:ab:9b:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.49.0/24
IPv6:
2a09:3700::/29
2a09:6800::/29
2a09:6900::/29
2a09:7e00::/29
2a09:8b80::/29
2a09:9300::/29
2a09:ba40::/29
2a09:da40::/29
2a0a:bbc0::/29
2a0b:7a80::/29
2a0b:9480::/29
2a0c:ac0::/29
2a0c:1240::/29
2a0c:2840::/29
2a0d:3040::/29
2a0d:48c0::/29
2a0d:adc0::/29
2a0d:b9c0::/29
2a0d:f640::/29
2a0e:f00::/29
2a0e:13c0::/29
2a0e:4340::/29
2a0e:4580::/29
2a0e:6740::/29
2a0e:67c0::/29
2a0e:7040::/29
2a0e:8540::/29
2a0e:8840::/29
2a0e:9180::/29
2a0e:c440::/29
2a0e:dfc0::/29
2a0f:c00::/29
2a0f:4300::/29
2a0f:72c0::/29
2a0f:bb00::/29
2a0f:da80::/29
2a11:640::/29
2a11:1340::/29
2a11:1380::/29
2a11:15c0::/29
2a11:1840::/29
2a11:21c0::/29
2a11:2c40::/29
2a11:2d80::/29
2a11:3080::/29
2a11:3180::/29
2a11:31c0::/29
2a11:34c0::/29
2a11:35c0::/29
2a11:3d00::/29
2a11:3f00::/29
2a11:41c0::/29
2a11:4340::/29
2a11:4a00::/29
2a11:5a40::/29
2a11:6340::/29
2a11:66c0::/29
2a11:7080::/29
2a11:7880::/29
2a11:8500::/29
2a11:9880::/29
2a11:b680::/29
2a11:d380::/29
2a11:d700::/29
2a12:1240::/29
2a12:1540::/29
2a12:1a40::/29
2a12:24c0::/29
2a12:2740::/29
2a12:2cc0::/29
2a12:2e40::/29
2a12:3140::/29
2a12:35c0::/29
2a12:3740::/29
2a12:3bc0::/29
2a12:3cc0::/29
2a12:4140::/29
2a12:41c0::/29
2a12:46c0::/29
2a12:7300::/29
2a12:9500::/29
2a12:cc00::/29
2a14:9700::/29
Signature Algorithm: sha256WithRSAEncryption
24:18:c2:dd:84:22:f5:44:21:09:dd:fa:db:ae:11:da:1a:e7:
58:2b:e8:bd:56:e9:db:8e:c9:50:d9:42:f8:87:36:63:74:e3:
8c:a7:02:c8:2b:2b:69:5f:b9:34:b4:9d:35:36:38:78:37:65:
8d:7a:0c:ec:e6:08:5c:b7:a2:08:6a:1c:9c:29:2e:b4:e5:1b:
b6:b5:cc:97:9d:c7:72:aa:ac:0b:f9:0e:e3:8e:3a:fd:66:37:
2a:38:41:db:8e:b3:92:ae:b9:11:c1:57:9c:a2:1d:1f:b9:01:
32:aa:3a:92:6c:5b:b5:a0:c1:33:e0:13:b0:0d:2f:c7:32:45:
6e:64:f6:0f:04:56:cd:e3:0f:c9:d6:bb:21:e2:a9:0d:04:d3:
39:5d:e2:0a:59:6d:74:72:a6:cc:76:24:48:b9:d6:ca:67:a5:
da:b4:84:47:6c:aa:28:1e:d4:0d:0f:40:6d:c4:71:15:fd:7b:
0e:68:40:53:e7:cc:c3:0f:8d:d7:ae:eb:91:8f:0b:28:eb:1c:
85:75:a9:c8:a3:c5:71:d9:87:95:58:9f:a1:4f:ff:e1:44:60:
b2:f0:04:88:c6:36:af:7d:32:c2:80:37:94:19:50:2f:78:c5:
b7:e6:43:da:c9:53:81:c4:11:4a:8c:6d:12:32:2f:3e:9e:e4:
e1:d5:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:09:16 2026 by rpki-client