Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
File: tK_MhnJK4o7jZE0b6ehSCj7zia0.cer (raw, json)
Hash identifier: /5SsUk3FCipbmzExufWewzRkb1cz6oq+DHq514rAYG8=
Subject key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F94C7EB34AB4A7AD30DBE09496B876
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.245.144.0/22
IP: 2a12:bcc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:4c:7e:b3:4a:b4:a7:ad:30:db:e0:94:96:b8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:44:65:7f:2b:4b:1d:aa:54:0c:6a:7b:f0:
34:d6:1f:f5:54:f8:bf:f3:db:0e:dd:e6:f7:76:d7:
79:9b:69:cd:fe:fe:68:a8:02:bb:21:e2:29:00:17:
08:f4:6b:ae:b6:74:41:f1:3e:ad:75:43:81:13:24:
5c:b8:5d:4f:29:ce:14:67:a8:de:ba:1f:3d:51:28:
9d:ec:7e:03:9d:81:4e:5a:8e:d8:8d:98:f0:02:1b:
f0:5e:f5:a8:16:d6:80:fc:48:2f:42:64:0b:9d:47:
fe:8a:de:38:76:9a:03:c9:36:aa:03:7c:ec:71:73:
45:63:57:20:1a:80:1c:e9:16:00:a9:84:49:4b:3b:
4f:0c:2a:d5:f7:bd:2b:65:b9:f2:ac:6d:05:b1:42:
a1:07:e5:91:75:71:25:77:bc:79:d7:14:8c:ae:df:
94:7b:5d:75:d0:12:0d:ff:d0:dd:f9:c9:dd:c0:9c:
1a:07:8a:51:d5:ea:55:32:75:94:4d:cb:72:8b:74:
d6:d2:51:f9:ce:ed:e9:b3:43:b4:f3:97:b8:b3:21:
d3:b9:17:37:d2:c0:c2:76:b9:b7:47:44:90:ac:4c:
f5:77:f3:0b:ee:66:1b:f5:0c:f4:60:69:a6:24:ce:
5b:00:88:64:5f:cc:a4:d4:28:49:73:6b:8c:f8:42:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.144.0/22
IPv6:
2a12:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
2a:c7:6a:18:3b:d9:8a:95:ea:61:7c:fd:4d:79:63:ba:9b:d8:
4c:f0:4b:1b:b1:0b:8b:50:03:0d:01:e8:b3:ec:71:da:22:0d:
a3:e9:35:fe:90:61:15:27:06:ea:dc:ff:34:a8:99:a7:b4:f6:
db:f7:b1:4f:42:9c:1d:d8:1d:98:7b:c9:04:4e:ed:16:d4:d8:
c7:b9:66:4f:03:60:c7:28:a3:c3:b1:5b:c4:86:9c:1e:c9:3b:
ce:14:64:fb:95:dc:01:76:33:ed:b7:3e:0b:08:e5:e5:a5:c2:
84:23:cf:19:4b:4f:1f:05:8c:9a:fd:9c:d7:03:0c:85:75:c3:
a0:82:b0:7c:bc:72:aa:20:d2:a2:92:dc:84:00:67:b6:5c:63:
a3:cc:2c:ab:b8:d7:d2:13:bd:54:78:ff:ea:92:a9:ca:7c:49:
17:91:fc:be:5e:32:ae:da:76:aa:d0:3b:3b:f3:d0:7d:6e:2f:
9a:fb:e3:10:f5:57:2b:5b:07:d8:39:34:32:35:57:c1:ca:eb:
13:d5:6a:04:e3:61:bf:be:f0:a2:d7:b8:f2:75:ec:d0:1a:ac:
e4:06:e2:19:10:a6:95:60:d1:44:eb:ab:4c:ec:77:d3:57:29:
2f:95:02:38:dc:0c:e8:38:6e:da:0c:35:45:6a:23:81:b1:83:
74:33:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:15 2026 by rpki-client