Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
File: eIg7YYtrAGVxBZ8c86EfylqHXjY.cer (raw, json)
Hash identifier: 0KXRCR0yUvef0ZIEC4f/GB0DZ1wTP7hI6XPQPhS1Nf4=
Subject key identifier: 78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A578C0A33244AE182FE44A0E71EEDA93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 14:29:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 82.215.76.0/24
IP: 185.23.79.0/24
IP: 185.81.44.0/22
IP: 185.173.96.0/22
IP: 193.22.226.0/23
IP: 2a0b:4700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:78:c0:a3:32:44:ae:18:2f:e4:4a:0e:71:ee:da:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 14:29:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78883b618b6b006571059f1cf3a11fca5a875e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:6c:d2:fe:4e:3e:74:2f:a6:cb:71:d4:57:
c2:6a:f9:aa:43:48:f9:62:c6:e9:02:2c:bc:00:4b:
e8:8d:c3:7f:d1:3c:f8:19:c7:9c:99:bb:a5:9c:2d:
b9:8c:da:f7:60:61:99:26:c5:09:56:ca:bf:32:f8:
71:bf:14:a6:32:c2:97:d2:03:20:2c:65:63:d1:51:
48:ae:9a:8c:17:dd:16:61:8d:04:ef:79:8e:8c:23:
d9:76:2f:7d:2e:0c:63:6a:d6:a0:dc:ac:57:a1:e1:
71:07:f5:8d:3b:f0:6c:4c:8b:d3:33:c2:25:1c:f1:
32:70:39:9c:e9:a7:95:8c:3f:b6:a7:df:ba:7e:ad:
2c:8f:8b:23:ed:47:09:92:4a:4d:6f:16:9a:08:61:
b3:24:d3:34:5c:d3:83:56:8a:67:5f:b9:b6:90:55:
a1:cc:e2:49:9e:ca:6c:79:a2:be:9b:7e:47:7d:25:
11:94:d3:0e:33:95:cb:32:96:20:05:84:22:06:40:
b0:e6:f3:6d:0c:00:68:e3:3c:51:bd:4b:2b:56:c3:
57:94:0b:2f:78:05:b3:a7:93:97:99:54:14:50:9c:
8a:dc:72:6c:0e:1e:4b:e8:93:0c:b1:d7:86:96:ad:
0a:23:84:2a:03:a1:fc:14:60:73:dd:c6:ef:b7:8c:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.76.0/24
185.23.79.0/24
185.81.44.0/22
185.173.96.0/22
193.22.226.0/23
IPv6:
2a0b:4700::/29
Signature Algorithm: sha256WithRSAEncryption
39:20:ee:ba:e4:2f:07:d8:88:24:b5:94:26:40:0b:55:24:f9:
66:21:3c:e2:90:7d:d4:9e:1a:84:ee:1b:48:6c:f6:e7:16:61:
19:d5:e8:5a:fb:06:32:e8:71:5d:ed:5b:b9:30:b4:fe:7e:2d:
ad:68:d3:73:d7:1c:82:a4:e1:65:1f:f0:c2:36:0a:aa:cc:3c:
01:fc:80:b3:cd:46:1f:0e:9e:af:cd:8c:33:93:3c:48:c5:43:
1b:db:2e:07:74:1b:6b:50:0c:13:af:b3:c5:25:b3:65:4f:ed:
60:17:0b:77:1e:46:c7:56:2f:ad:42:08:55:20:f8:2f:f7:52:
24:e5:3c:50:71:19:4d:11:34:da:a4:a5:b6:2d:4b:ef:31:17:
f4:83:00:62:ca:3d:c2:16:3e:4d:07:51:28:91:98:3e:b7:d0:
1d:b0:58:e7:99:7b:0e:57:46:2c:c8:4c:e9:1b:2f:54:b2:d5:
4d:5e:2a:5c:46:77:6b:b1:61:fe:bc:da:b5:cf:88:26:99:30:
70:e0:a2:cd:54:23:f0:a2:1a:ed:47:3b:dd:e8:de:8d:6e:f2:
51:97:97:05:43:74:7f:78:17:74:e6:2a:03:e2:2e:10:fb:ed:
95:f0:df:88:4b:d4:83:77:2f:1f:78:02:14:07:d3:c6:a1:b6:
87:48:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:51:51 2026 by rpki-client