Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
File: tRFbXBJF3DDhIwQHnslKNe1SfGY.cer (raw, json)
Hash identifier: +tVMLq4NdVEs0W5vXGcEwluXDTT6q1gRXKdFeY7R1S8=
Subject key identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DF71156AF61079F321415A74EC16F9CF6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 May 2026 07:36:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.70.160.0/23
IP: 2a03:36e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:11:56:af:61:07:9f:32:14:15:a7:4e:c1:6f:9c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 5 07:36:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:78:e4:96:63:d0:51:f3:9a:9e:ea:74:1a:dd:
d6:59:5b:bd:39:bd:f5:6e:90:63:41:3a:22:d1:30:
15:e7:bc:70:49:50:11:51:3d:8f:75:a8:73:1e:e2:
24:f5:cc:ba:b6:3a:f5:ee:d1:70:f7:e8:ce:90:24:
81:48:20:ac:16:dc:96:a0:33:ac:f5:eb:47:e9:68:
bd:b5:b4:ed:8c:73:ab:80:c5:7f:d2:f2:04:fd:3d:
15:5a:6b:87:85:ea:ee:7e:77:ad:f2:74:66:75:46:
84:c0:ca:4b:3a:3f:0c:ba:fc:95:85:7c:5c:55:d7:
8a:c2:7d:17:9a:e7:1e:5e:47:6a:8b:d4:a4:53:44:
53:c8:0b:81:ad:42:fe:f7:66:e9:0c:95:89:23:45:
4c:32:93:f2:88:80:9a:21:c0:c7:e5:87:21:0b:d2:
2e:bd:4f:f0:17:c2:4c:08:82:cd:67:04:de:d7:16:
e9:53:73:3f:86:46:2d:15:93:66:ec:03:4f:41:7e:
88:2d:b9:7d:5a:12:c9:13:38:93:e7:bf:c9:e1:bb:
da:ab:c9:f0:35:1c:51:f3:7c:27:8e:90:df:87:c5:
03:0c:23:18:2b:aa:27:a5:22:5e:1c:70:92:36:48:
5c:1b:3b:d5:97:ba:fc:de:b6:e1:d3:d9:40:2d:c8:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.160.0/23
IPv6:
2a03:36e0::/32
Signature Algorithm: sha256WithRSAEncryption
29:70:26:bf:82:a5:5e:72:91:a5:7f:ea:3b:c0:a0:88:85:d9:
f0:cb:88:3d:3d:be:79:e8:54:42:9d:6e:60:ed:0c:79:11:2f:
cf:c7:64:4f:38:2a:d4:c8:00:a2:2b:32:93:7f:1e:e3:b1:b1:
7c:9a:eb:4a:6c:d2:0e:33:26:a9:4a:46:85:fa:e0:7c:4a:39:
ba:70:9e:11:bb:74:98:d4:23:bd:b1:19:f1:b1:8e:0e:a2:0e:
5b:a9:c2:d4:85:d8:8a:8a:c9:fe:54:a7:20:46:ff:76:1b:3d:
2f:12:cd:b6:3f:ac:e2:3c:af:e7:88:84:d2:3c:d8:c8:45:a2:
da:75:69:0f:56:73:a0:9c:bc:7d:42:3d:a2:a5:15:1d:8c:2e:
e0:35:f4:a1:cd:63:94:35:a2:f3:20:d9:47:9d:a6:73:77:24:
40:19:00:07:8d:81:a9:49:f7:2a:01:a8:cd:6e:58:fd:89:77:
a5:15:88:41:02:ea:af:40:b0:eb:4f:f2:16:ba:f5:53:c0:8c:
4c:87:05:b1:a1:c2:26:4f:4b:26:fe:38:e4:44:e7:40:b0:ad:
df:a4:70:19:fd:07:dd:76:cb:3c:4c:3b:80:0a:d9:a9:1e:da:
32:fb:f9:76:33:e1:db:2d:f3:fb:3c:93:bf:05:c3:73:77:20:
b3:f9:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:24:31 2026 by rpki-client