Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
File: m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer (raw, json)
Hash identifier: 74qWNviliTUB+22C7uugkj2C2yf51jtWgBZQ7R7mEW8=
Subject key identifier: 9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F5CB492FADA1B2FF7288D25516003C34F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Jul 2026 18:19:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.140.218.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:b4:92:fa:da:1b:2f:f7:28:8d:25:51:60:03:c3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 13 18:19:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bb672a7414643fde42fd5d7d964426ccfbe0ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:44:2f:e8:f8:13:ce:fb:87:20:03:e8:5f:
98:9d:2c:05:fd:be:7c:d6:18:7b:1b:10:dc:e7:05:
31:a9:dc:40:39:e3:27:04:e0:7a:76:7c:9c:5e:c1:
c3:10:6d:91:a1:0a:9e:43:a3:46:7f:e3:9c:ec:ea:
fa:21:22:eb:b6:60:42:31:78:37:9a:db:9a:8a:ee:
99:bc:fe:19:8b:77:47:c1:17:1f:05:3c:d7:77:df:
71:74:7a:86:46:34:7b:e0:cc:aa:70:64:ca:f8:30:
31:e4:4d:64:ee:c4:33:dc:97:ba:c7:51:14:3f:1f:
0f:09:16:78:1d:af:7e:6b:61:bb:20:e9:a2:59:1d:
d4:c9:da:a0:1f:48:64:6d:c3:07:21:0f:06:5c:74:
8e:7c:2a:9f:2a:51:b5:ac:e6:f6:47:d5:0f:91:ce:
63:a6:f9:d1:a3:cf:d1:4a:18:d8:f0:10:01:26:6a:
f3:dc:c8:96:79:fa:b3:6d:c0:f5:69:72:5c:f5:5b:
4b:2e:27:d8:65:25:e5:2c:e6:a4:d8:ff:b8:d6:9e:
13:6f:94:0e:7d:fb:96:c6:df:c4:7c:07:e9:b1:43:
1b:07:53:5d:de:b7:b5:f7:d4:67:8b:e2:02:fe:8f:
5b:b6:7c:7b:2b:b4:06:c8:21:cc:3b:0d:a4:58:e0:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.218.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cc:ee:f0:df:69:1e:6c:0c:42:48:8f:29:1b:97:02:1c:c6:
6d:3c:92:a9:43:23:72:41:fa:93:33:ed:b3:b6:41:74:cd:ab:
39:12:ce:4a:4d:a9:3a:bb:70:91:46:3b:a4:42:a5:b6:6e:18:
04:92:ce:a4:d4:c1:96:19:be:3e:92:84:b4:2a:89:9c:2a:1e:
10:fb:e7:97:c6:d3:97:66:c7:80:31:69:ae:a3:57:9b:ea:da:
a8:ce:45:da:69:46:8e:73:27:ae:13:ad:f4:38:06:41:37:9d:
df:40:12:91:a1:bc:6c:b5:5d:fd:dd:7b:36:04:0b:da:f0:95:
1e:d4:79:0b:e7:8f:6b:9d:2d:9a:06:78:9d:16:ac:90:f8:5a:
46:06:88:e3:d3:ff:0b:96:01:c6:79:4d:86:f6:d9:0e:d8:62:
69:40:6d:b5:32:e1:2c:5a:fd:81:af:4b:b6:a6:7f:e4:19:59:
2b:20:43:a9:b2:a5:21:44:c0:7a:6a:81:6c:27:b4:75:92:49:
e9:fa:a5:ef:5f:a4:c6:78:7b:f0:9d:8f:d4:f6:1a:d8:7e:01:
56:e5:b9:e1:31:06:19:ed:38:c4:a0:ca:b8:23:d2:f9:8a:9e:
c4:67:e2:37:6f:65:26:da:89:40:a9:d4:c2:aa:7a:a9:6b:be:
b6:36:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:46 2026 by rpki-client