Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.cer (raw, json)
Hash identifier: ELV+2+zZAMrmM3Dh2l8g4WnqoTbOzHALClCrfktXc6s=
Subject key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F174306157B6763EF6916ED5F57D4D761
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 06:41:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 5.182.200.0/22
IP: 2a0f:5b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:43:06:15:7b:67:63:ef:69:16:ed:5f:57:d4:d7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 06:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9d:e3:84:55:31:ff:7c:cd:ee:be:80:a7:26:
b8:43:f6:72:09:1a:d2:1e:22:28:60:40:47:ba:dd:
4a:90:64:d0:25:a2:f5:3b:95:11:1c:a0:7d:6c:3b:
6b:ef:35:d7:a1:8d:31:e4:aa:b3:4d:08:62:ab:89:
ce:04:b7:71:ed:56:35:00:46:e8:3c:67:09:4a:2e:
f2:da:97:59:b7:74:c5:7c:c7:2d:be:00:dd:57:29:
fe:77:63:08:ff:79:23:66:64:d9:4d:69:d5:d9:54:
55:fb:a2:dc:cf:cf:84:52:67:76:86:f6:b3:d0:84:
f2:4f:8f:38:29:dd:b7:41:c1:c2:96:90:b0:2f:f7:
76:cc:20:78:d2:8e:50:44:ac:22:db:eb:fb:34:09:
b6:43:da:a1:3f:f2:49:d8:07:ce:e1:c4:1b:74:61:
70:3d:ac:48:e1:88:5b:85:04:77:e3:9d:c8:16:fa:
ff:5c:eb:9b:70:c3:bd:54:e8:24:66:19:90:e5:6c:
dd:35:cb:3a:50:61:cf:a3:e1:d3:72:e2:13:ce:e3:
81:4c:3b:df:ea:f4:7e:bf:3f:47:9d:69:49:63:10:
6f:57:56:c0:54:ca:c5:77:64:66:47:ff:98:c6:43:
89:7e:8c:d4:d0:0b:ee:d8:6a:f9:bd:ce:d0:80:99:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.200.0/22
IPv6:
2a0f:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
98:b6:ab:7f:db:a1:44:27:76:fd:a7:37:98:7c:5c:45:e0:a1:
08:f8:9c:9f:ba:e5:0b:94:28:0d:ac:d3:ea:bb:25:e0:34:df:
4b:d5:62:ab:82:18:6b:bd:99:4a:12:a1:39:39:8e:1b:5e:a1:
2c:e8:3a:39:98:69:81:3a:e5:c6:5f:d6:5a:ab:ac:9c:e3:d3:
c2:d0:56:c7:11:3b:6d:a4:09:30:58:85:a4:62:78:4d:13:c0:
c0:c3:e0:62:cb:7b:36:88:42:0e:2b:54:37:25:9f:1e:fe:d5:
9a:07:7a:2b:c5:5a:38:f1:04:78:ff:cb:fe:3a:c3:e7:51:54:
15:dc:2a:09:55:3f:cd:5b:ac:d1:f8:16:f7:6d:ef:9d:67:17:
62:4b:66:4b:e3:9e:5f:6f:96:79:04:61:02:ca:91:10:a3:1a:
2b:4e:1a:d2:23:60:aa:1c:61:35:25:f9:86:2b:d2:ab:22:17:
22:6c:d4:ac:5f:75:3a:3e:73:49:6c:9a:ab:0b:2a:b8:59:81:
14:bc:1f:78:3c:22:4e:8c:0a:e9:10:8b:50:0e:b5:3d:6b:74:
68:a9:e7:50:62:51:05:8b:f6:b1:21:b3:22:49:0a:62:d6:9e:
7c:8d:f5:03:ff:6c:2d:02:e4:69:09:46:2c:4b:89:2d:d3:58:
02:fe:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:24 2026 by rpki-client