Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
File: gtiJtzM2c4evJNBuf5IeHrwOjMA.cer (raw, json)
Hash identifier: U5nH5s9mMyxBO4rtWL6HFyXkr+67er66iBo8P1JfpxQ=
Subject key identifier: 82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F977826FCDC72CB34C0B9B9CFCF979
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 82.192.96.0/23
IP: 82.192.100.0 -- 82.192.111.255
IP: 2a03:9e80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:77:82:6f:cd:c7:2c:b3:4c:0b:9b:9c:fc:f9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:80:74:32:a9:35:0a:76:f8:93:12:95:24:12:
64:b0:91:42:33:52:40:80:7f:30:5a:67:95:eb:ea:
2e:5c:aa:97:fa:49:96:2d:3a:4e:dc:a9:dd:8a:1e:
3f:2e:fb:35:1f:d4:24:bc:5d:09:11:c0:e0:da:f7:
a7:25:13:60:ad:74:f3:e8:e9:f4:a4:24:87:ec:54:
fc:4f:3f:aa:19:2e:4a:61:24:45:b6:3f:1f:f9:64:
5f:7f:76:73:02:6b:a9:b5:8b:4d:f5:b6:57:b9:73:
0e:e4:a5:d8:84:4f:a7:85:d6:bc:43:3b:4d:e1:ca:
c4:43:56:32:8e:d8:5b:6e:11:11:cd:90:ed:40:12:
34:f0:02:b9:45:55:dd:5c:6c:1d:76:20:dd:fa:01:
28:64:d8:97:9c:b8:20:11:3a:14:c6:09:0c:66:2f:
85:b0:1c:1a:f6:83:ab:bb:72:8c:c6:76:29:ea:2a:
31:8e:7a:e8:fe:ae:68:48:65:22:d7:8a:40:3e:19:
e9:ca:15:60:29:03:7f:a4:fd:66:07:d1:9b:6c:26:
36:3e:a8:f2:b8:92:8a:f7:ed:d2:fa:b5:52:1c:93:
af:e6:26:f2:cb:2b:11:cc:f1:8a:ed:83:0f:87:5d:
71:de:7b:d8:95:9d:a0:fb:4d:1f:1e:f6:57:35:a3:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.96.0/23
82.192.100.0-82.192.111.255
IPv6:
2a03:9e80::/32
Signature Algorithm: sha256WithRSAEncryption
29:eb:4b:c4:60:24:c3:51:ec:e9:93:e0:25:ba:81:8f:ac:75:
ec:18:1e:d3:1e:1e:4f:f6:d7:d6:75:9d:81:35:7f:e4:13:7e:
9a:be:77:f4:84:b0:63:b1:0b:bf:88:77:31:2d:75:e4:c3:67:
c4:49:63:43:fc:3b:82:81:24:5a:18:1f:7f:cc:d8:a9:d8:d4:
ff:0c:87:80:ca:39:73:60:b7:f1:a8:7a:9b:7d:a7:d3:a5:34:
57:be:da:b1:03:50:97:fc:db:14:dd:79:29:43:a9:6a:79:fe:
83:4f:18:55:fc:3e:b7:89:db:2d:47:1f:5c:4c:8a:32:b3:4f:
da:5e:f4:5d:8a:0a:ed:07:99:b6:d1:5a:e4:6c:4e:9c:5d:d9:
7b:1f:a3:ce:90:58:d2:47:92:17:80:c7:1a:b6:ca:c4:4e:1f:
28:01:70:86:b7:70:c2:0c:c1:de:6d:ff:dc:1a:81:26:19:00:
f9:a9:fa:63:2c:a5:29:5f:1d:ed:8c:ad:86:dc:10:0d:34:1b:
f1:88:53:d7:1c:99:0a:0f:d5:30:d4:f4:f6:19:d5:a9:49:60:
d5:8e:6e:a1:21:25:d0:c5:5e:cb:08:89:c4:d3:9e:0e:60:55:
a6:86:fd:a6:7c:f8:5f:36:4e:97:eb:c0:6a:a0:49:f4:a5:14:
b6:86:c5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:27:37 2026 by rpki-client