Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ggNj3xH_dJw6wmto69BzI1-sqCM.cer
File: ggNj3xH_dJw6wmto69BzI1-sqCM.cer (raw, json)
Hash identifier: G2LjWXHkj7WI2EUI5F4uL8mbvJ2M/46glxYJhwYZojE=
Subject key identifier: 82:03:63:DF:11:FF:74:9C:3A:C2:6B:68:EB:D0:73:23:5F:AC:A8:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C478579ECA2C8D214D4F6837C4250365E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Feb 2026 12:27:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.65.100.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:85:79:ec:a2:c8:d2:14:d4:f6:83:7c:42:50:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 12:27:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820363df11ff749c3ac26b68ebd073235faca823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:18:32:e3:30:26:47:5d:3e:da:59:55:df:
da:86:0e:2a:be:fb:a3:bc:7d:15:d0:e5:cb:43:ad:
14:50:a5:88:ab:28:69:58:d6:21:a3:51:07:57:6a:
44:26:0b:2e:71:1a:67:42:d5:76:36:d5:a6:51:30:
2f:ff:20:58:5d:8a:b1:e0:3a:9b:f6:88:17:d6:c0:
70:e1:27:c5:05:ea:2e:a8:5e:f1:02:3f:b2:2d:9e:
d8:94:c9:e0:ff:1d:18:3a:1c:78:98:ba:31:d2:6c:
58:7d:e5:0f:da:5f:71:ff:5d:6e:99:92:92:de:5c:
d4:b8:07:21:64:e4:c7:92:72:8a:3f:4b:f3:21:a9:
76:a8:e0:1b:1b:dd:f3:b8:58:82:a1:22:cb:22:e6:
cc:f3:c7:ce:84:33:6d:51:5b:ad:d1:e0:3c:14:e0:
9c:41:13:f2:4a:ea:53:b2:67:f5:3c:4d:a1:0f:cd:
3f:ab:df:0d:1b:c9:02:fc:ef:dc:fe:02:1a:3a:92:
80:cf:bc:01:cb:b1:de:82:29:3e:78:4f:bc:39:fd:
7d:73:ef:76:08:4b:49:d3:c8:0a:b0:cf:bd:6b:ac:
9e:c7:94:a8:17:df:5e:08:2b:66:bb:04:9c:6e:98:
67:88:23:68:5e:f3:dd:53:26:38:1a:2d:50:31:79:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:63:DF:11:FF:74:9C:3A:C2:6B:68:EB:D0:73:23:5F:AC:A8:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.100.0/22
Signature Algorithm: sha256WithRSAEncryption
45:95:1b:79:29:1b:fd:4a:5a:27:01:60:bc:eb:c6:ab:ab:c1:
ea:5d:5c:05:46:fd:11:06:3f:f2:4b:1c:68:7f:20:dc:f0:9e:
27:41:6a:39:69:00:75:34:9f:da:9b:35:bb:3d:0e:88:68:9e:
fd:24:c7:86:e2:d3:35:e2:88:7a:6c:d1:05:3d:33:f2:92:77:
69:46:e7:2c:22:c2:e0:37:00:9a:d3:44:c8:f4:86:6f:d8:77:
71:03:57:0e:0e:df:c5:0d:ca:58:56:1d:25:bf:d1:84:e2:2c:
dc:b0:3d:fa:07:5e:6b:9e:49:4a:ae:59:97:66:df:52:f4:a9:
c0:61:bd:ee:a5:05:2c:df:e7:d7:0c:32:1d:24:2e:e5:8e:39:
21:bb:4b:a3:84:96:4e:27:f8:53:85:cf:f6:00:c7:89:26:d4:
df:81:17:27:e2:09:c7:60:65:12:7e:17:0c:2f:c4:a0:d3:4e:
bf:fd:a9:65:bc:70:a9:41:c6:ea:02:8b:9a:29:ff:33:68:7c:
f3:1b:12:5a:1e:07:9e:10:98:ee:c5:be:0f:d9:4e:76:ad:64:
37:03:55:6f:13:d1:1b:43:32:da:82:7f:a8:aa:ea:92:b6:59:
c0:e4:e1:b5:94:28:20:7c:27:c5:81:db:ba:3a:23:a1:f0:64:
26:b6:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:52 2026 by rpki-client