Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/iGBbtaIT8Gr7gkT7L5U7rc3-F30.cer
File: iGBbtaIT8Gr7gkT7L5U7rc3-F30.cer (raw, json)
Hash identifier: UY9QGrihwUQiIv5ySsqt1mkM1BEJvCOjzybvIAqeTrU=
Subject key identifier: 88:60:5B:B5:A2:13:F0:6A:FB:82:44:FB:2F:95:3B:AD:CD:FE:17:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1CED14E16654D1200DB0D4357676560F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/iGBbtaIT8Gr7gkT7L5U7rc3-F30.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Nov 2026 08:13:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.83.200.0/22
IP: 185.229.32.0/22
IP: 2a03:3a60::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:d1:4e:16:65:4d:12:00:db:0d:43:57:67:65:60:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 12 08:13:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88605bb5a213f06afb8244fb2f953badcdfe177d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:b7:4a:52:98:6c:4c:68:2c:8c:0e:9f:a9:
05:f8:17:5d:4a:ce:5b:ee:d9:52:19:04:6f:bf:6f:
6b:d9:a7:ee:03:e7:d9:70:bf:15:2f:7f:81:f1:1a:
03:76:c9:90:f6:17:c6:2c:1d:60:9e:95:a5:52:b5:
c1:12:77:68:32:ed:11:56:e7:a8:7f:8a:f8:43:a6:
b7:34:8f:25:2b:c6:87:18:24:38:3d:98:0a:85:0e:
1e:dd:b9:68:a1:95:b9:ae:59:b5:05:2d:1e:c0:db:
62:01:43:1c:64:90:09:aa:fe:20:15:9b:06:11:1e:
ff:d9:c5:11:48:16:1f:f8:7d:80:49:07:65:f7:6b:
e2:6b:f9:64:c9:89:e4:67:7d:96:75:03:4b:79:ec:
aa:05:b7:7c:db:57:c8:0c:f3:41:0c:a5:62:89:6d:
02:45:41:ba:b5:fb:25:1e:e6:f1:c4:c5:48:1e:df:
11:b6:56:67:f8:10:61:f8:4e:44:43:c9:b8:a1:93:
70:8d:50:6c:65:5b:34:30:ad:88:ff:92:18:1b:79:
b8:41:b9:5c:a3:97:1f:cc:d0:47:1a:b3:7b:30:cd:
47:3d:9f:58:2b:e6:40:ab:7d:66:c4:6c:10:2e:59:
8a:34:7a:74:dd:ff:91:c8:56:6a:90:a8:6b:50:26:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:60:5B:B5:A2:13:F0:6A:FB:82:44:FB:2F:95:3B:AD:CD:FE:17:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/iGBbtaIT8Gr7gkT7L5U7rc3-F30.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.200.0/22
185.229.32.0/22
IPv6:
2a03:3a60::/29
Signature Algorithm: sha256WithRSAEncryption
81:95:8e:47:45:64:f6:a6:d6:19:2a:5a:42:51:3c:33:42:c8:
b4:6f:35:21:bb:10:3a:fa:f2:26:a6:60:4e:ab:75:15:a6:77:
ed:9c:ed:cc:8a:99:b0:ea:bb:eb:0a:2b:6d:f6:09:22:f0:f3:
c0:1d:03:3a:40:36:d8:b7:a4:55:4f:4e:35:47:4b:a3:8a:8d:
ce:f7:00:f3:0d:c8:3b:f5:6d:8f:7c:00:d4:44:cd:17:99:a2:
32:d6:e3:59:e8:ce:b1:c6:67:e4:7a:1f:fd:d6:d7:8f:b0:cd:
f0:3d:e6:51:43:3a:99:9b:4c:73:db:17:27:e8:88:e0:c2:69:
eb:00:a3:4e:eb:0e:b3:cb:71:cb:a4:4c:34:67:9b:1a:7e:fb:
79:2e:d7:f1:57:f9:0a:76:ed:5f:3b:08:6f:a3:66:b5:d3:0f:
47:06:c7:e6:89:e6:5d:7e:a5:e5:1c:9c:dd:94:9f:36:23:ab:
a1:f7:de:96:9b:00:e7:81:43:62:a1:65:c5:ae:c3:90:48:3b:
4f:bc:17:08:67:2c:8d:24:b7:52:b7:6d:f6:c9:30:c6:79:2a:
63:20:15:d4:f9:86:f6:f7:b4:09:27:76:43:e6:d0:87:45:ce:
b9:36:be:9f:d5:8b:fd:e2:56:88:81:17:af:31:99:db:5d:60:
c0:38:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:45:57 2026 by rpki-client