Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer
File: gZQ2TL8naHqeWVKCy2FpdaBj-_w.cer (raw, json)
Hash identifier: c5vKWAYuuXv+iZY1YH8Dlws/BouSTotv6gIaj34M51w=
Subject key identifier: 81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F5B62E2438537029B134FDC7A9C4F189E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Jul 2026 12:10:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.26.240.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:62:e2:43:85:37:02:9b:13:4f:dc:7a:9c:4f:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 13 12:10:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8194364cbf27687a9e595282cb616975a063fbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:bc:89:c3:20:8b:ed:96:51:6f:2a:d6:32:
cc:0e:db:89:e3:5a:c8:4e:2e:8a:55:09:07:7b:6d:
c7:e2:d0:20:36:17:df:1f:fd:9f:d6:96:36:ab:93:
24:68:63:50:2a:ab:55:89:6a:96:c8:ed:28:d5:93:
f5:18:1d:20:8a:f5:12:64:9f:a2:6f:6e:4d:f1:db:
7e:75:39:97:45:c2:2e:72:8a:ec:da:a6:b9:5a:b5:
6c:2c:1a:9c:ff:59:9d:b3:71:47:0a:df:13:10:1f:
9b:02:dd:40:f5:3f:ca:33:0b:84:65:27:0c:b4:d8:
1b:4f:ff:4f:c4:00:79:fa:f7:ae:38:17:12:1b:f9:
9f:59:f0:f1:de:8c:b7:d0:0f:dc:64:73:a3:05:60:
09:f0:eb:cd:92:ba:ed:70:c0:5f:12:21:bf:45:22:
2c:d7:ff:d3:b6:dc:39:14:9f:5b:f9:a0:fc:3c:cc:
07:0f:f6:5e:6d:32:50:f5:ca:ee:4c:5a:f5:50:c6:
d1:45:7b:ed:86:63:de:5c:22:75:ee:c3:f6:0e:f3:
d1:e2:17:b9:92:92:7f:8c:7e:a1:6c:a5:d9:7a:4a:
65:a8:f7:14:38:d8:5a:5a:3c:71:f6:3f:f6:18:45:
8c:d6:f0:3c:19:43:c1:5c:a6:ad:9c:c7:dd:68:b2:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:36:4C:BF:27:68:7A:9E:59:52:82:CB:61:69:75:A0:63:FB:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d97afd-e64a-4499-85a4-32385e8151ee/1/gZQ2TL8naHqeWVKCy2FpdaBj-_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.240.0/21
Signature Algorithm: sha256WithRSAEncryption
64:c3:e9:b4:57:bf:63:6b:cb:f7:0c:1c:53:38:64:48:ce:13:
2e:55:9b:78:0b:7b:da:7e:f5:fc:e0:a4:f8:60:cd:05:22:de:
73:7d:7a:12:88:68:d4:b7:06:d2:c4:9c:f2:32:08:ea:3d:16:
fe:de:84:79:c8:3a:94:f9:2f:df:ce:df:0a:80:05:4a:88:00:
e0:a1:d0:94:a4:6f:ec:51:c8:7f:92:b7:3d:75:ed:7d:e8:a8:
3f:44:9e:3e:8e:f9:ea:99:59:42:71:4c:ac:74:94:7c:bb:4d:
2d:0d:d7:f5:86:e1:9d:71:56:98:06:b1:f5:45:eb:ef:f9:01:
ab:91:86:ba:d9:ad:9c:a0:f6:6b:c3:66:33:82:2d:67:99:e0:
7e:9e:ba:41:2f:f2:d3:7a:57:cb:1a:cb:6b:83:0b:ac:82:30:
01:35:14:ad:79:2c:21:e5:fa:8f:23:d2:4e:e8:83:38:69:bd:
6f:cc:60:1a:ba:57:0d:a5:34:35:a1:58:10:d4:67:ec:2c:ed:
d8:1d:ef:ed:c7:93:6a:bb:08:8c:fc:d8:5f:a6:6e:01:ec:91:
f1:80:46:62:63:17:f2:7a:08:94:ef:0f:15:67:ec:a7:a5:1f:
c7:26:82:06:b5:2b:c6:26:ce:f2:75:f1:c3:23:b7:c0:09:c3:
b2:1c:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:46 2026 by rpki-client