Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
File: rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer (raw, json)
Hash identifier: I39pjrQSIU/iLeXWHEwoL+cwZ1QSCHSo4l2CHsSNTkw=
Subject key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D04D88A62B3E5AE0AF2CC16CADF64027C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Mar 2026 06:46:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.105.7.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:d8:8a:62:b3:e5:ae:0a:f2:cc:16:ca:df:64:02:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 06:46:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:3a:53:f2:36:3c:07:23:bc:cf:ef:b1:11:
4a:90:d8:af:c2:f7:eb:e6:ab:61:66:cd:03:6d:27:
4a:04:6c:5c:45:1a:51:fb:2a:89:a2:17:2f:b5:99:
8b:79:b0:e8:1b:b9:7f:96:2e:8b:08:02:30:20:3f:
33:d0:bc:63:24:d9:a0:b8:ac:8e:c3:58:1c:70:2e:
48:64:51:25:b0:d4:af:72:9d:5f:b0:fc:22:59:be:
be:d4:00:bf:b3:e8:fd:c2:43:96:30:c3:00:62:9f:
ed:95:3f:6c:66:dc:0a:6e:4a:fe:19:8b:04:9f:24:
ea:cb:3a:f0:58:0c:ba:64:0f:78:55:4a:b3:c0:4c:
39:ac:18:43:32:34:90:0b:01:69:85:88:f9:74:e4:
05:48:2f:bf:06:c8:97:86:a2:eb:ab:54:5f:df:73:
af:80:45:a0:bb:09:f3:c8:58:7e:7b:f0:ef:af:2f:
ae:5a:7a:7c:e7:32:7d:85:58:3f:37:d2:10:c9:95:
9c:b0:e0:52:44:50:be:82:96:61:5f:6b:a3:ef:cb:
55:9d:c4:eb:10:e1:61:81:70:aa:6b:c9:94:ba:af:
4d:c7:e0:ee:71:cb:8b:a0:8f:d3:42:43:52:56:11:
27:6d:c0:61:16:6b:f6:fc:44:48:cd:46:4b:58:07:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.7.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6f:27:6c:7c:c5:e9:e2:b3:ae:91:9f:8e:de:e6:cf:17:d0:
f6:df:ca:37:3d:6f:07:3b:8f:9d:cb:76:d8:9b:c7:84:25:07:
ba:7b:0d:0a:51:b5:f5:52:d8:f9:d3:c3:28:3b:83:08:0d:b9:
1a:63:7b:27:08:43:14:46:df:da:1b:e3:d0:9d:e9:a3:f8:ba:
22:5d:54:e9:d6:21:98:d0:04:d5:7d:0c:1e:f0:c0:48:f0:6a:
7e:1a:ea:d9:b1:7d:5b:51:20:79:dd:0e:0f:70:a4:e5:a5:c8:
35:85:0b:96:9f:3a:2f:af:bb:06:b0:39:e9:8a:6d:a0:7c:fd:
1e:25:aa:8c:6a:1d:0f:87:f8:1c:37:83:bd:02:88:20:08:eb:
cf:9a:d2:57:72:49:ff:7b:8f:cd:6d:d5:46:e0:71:25:4d:37:
26:40:1a:bc:c1:10:77:44:13:8b:67:bb:35:96:ed:19:cd:c1:
e3:8b:3c:32:31:c8:1a:32:7b:7f:4b:25:c5:5c:2e:4d:fa:cc:
bd:81:16:4f:97:5f:b8:0a:84:18:90:cb:86:c1:26:bf:66:33:
c6:34:a9:e2:e9:76:f1:b3:af:e9:ea:f0:d0:a2:31:30:d2:1f:
43:ad:f3:9f:84:46:1e:8e:da:32:71:f0:4b:f8:7e:40:c1:75:
29:de:e0:3b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ0E2Ipis+WuCvLMFsrfZAJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzE5MDY0NjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzhiNzcxZTI1N2JhZjI3ZGRhMTBhMDhhYjU4YjI2Y2Y4Zjc1ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ck6U/I2PAcjvM/vsRFKkNivwvfr
5qthZs0DbSdKBGxcRRpR+yqJohcvtZmLebDoG7l/li6LCAIwID8z0LxjJNmguKyO
w1gccC5IZFElsNSvcp1fsPwiWb6+1AC/s+j9wkOWMMMAYp/tlT9sZtwKbkr+GYsE
nyTqyzrwWAy6ZA94VUqzwEw5rBhDMjSQCwFphYj5dOQFSC+/BsiXhqLrq1Rf33Ov
gEWguwnzyFh+e/Dvry+uWnp85zJ9hVg/N9IQyZWcsOBSRFC+gpZhX2uj78tVncTr
EOFhgXCqa8mUuq9Nx+DuccuLoI/TQkNSVhEnbcBhFmv2/ERIzUZLWAcz5wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKyLdx4le68n3aEKCKtYsmz4914JMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2JkNjgw
Yy00YTUwLTRmNTItOThmOC00YmFlNjI4OTZjNGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvYmQ2ODBj
LTRhNTAtNGY1Mi05OGY4LTRiYWU2Mjg5NmM0Zi8xL3JJdDNIaVY3cnlmZG9Rb0lx
MWl5YlBqM1hnay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwmkHMA0GCSqGSIb3DQEBCwUAA4IBAQA4byds
fMXp4rOukZ+O3ubPF9D238o3PW8HO4+dy3bYm8eEJQe6ew0KUbX1Utj508MoO4MI
DbkaY3snCEMURt/aG+PQnemj+LoiXVTp1iGY0ATVfQwe8MBI8Gp+GurZsX1bUSB5
3Q4PcKTlpcg1hQuWnzovr7sGsDnpim2gfP0eJaqMah0Ph/gcN4O9AoggCOvPmtJX
ckn/e4/NbdVG4HElTTcmQBq8wRB3RBOLZ7s1lu0ZzcHjizwyMcgaMnt/SyXFXC5N
+sy9gRZPl1+4CoQYkMuGwSa/ZjPGNKni6Xbxs6/p6vDQojEw0h9DrfOfhEYejtoy
cfBL+H5AwXUp3uA7
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:17:43 2026 by rpki-client