Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer (raw, json)
Hash identifier: mN6XHGyOjJroZ5s6DsaB7KG1wo9AmABG2mxSKDo07lU=
Subject key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F027DBE2FB3F65BD5869655943D6C8038
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 05:53:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 46.17.8.0/21
IP: 78.108.124.0/24
IP: 194.53.139.0/24
IP: 213.193.240.0/22
IP: 213.239.138.0/23
IP: 2a02:2870::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:7d:be:2f:b3:f6:5b:d5:86:96:55:94:3d:6c:80:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 05:53:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:66:1b:51:a4:6c:fc:d8:63:fb:b6:85:dc:
14:fe:8b:8d:75:45:49:f1:f5:8e:fd:4b:05:f3:23:
b9:2b:03:d2:35:e4:25:61:e7:d7:19:e8:f7:56:c1:
0e:a2:05:32:56:bb:1b:5a:f0:7d:ae:2f:d9:5e:d7:
9a:c9:a7:f3:ad:eb:15:d3:25:73:1d:13:d7:b6:d8:
dc:d9:fa:fe:1b:ce:45:2c:80:d3:c6:d4:2a:fe:93:
20:f7:0e:08:5d:7b:94:ea:de:38:ba:cb:20:f3:b1:
c4:b4:d5:0f:ed:b0:c1:04:63:ed:4c:4e:d8:b9:0d:
ba:9b:66:93:84:5f:c0:25:ab:83:f6:5e:37:3c:87:
14:88:7a:59:ac:37:61:41:b4:41:70:b0:98:36:3f:
28:9f:9c:18:17:de:1b:c0:77:bf:c7:83:3b:6b:3a:
e8:6c:af:4e:19:d1:71:50:96:70:96:5e:67:88:c7:
f8:74:78:1e:ff:5f:a5:7a:20:27:e9:e0:3e:6d:54:
e4:9d:62:14:93:c7:53:59:f7:08:5d:2d:25:8b:94:
89:77:22:7f:7e:cc:06:b9:be:8a:f6:a8:83:42:f5:
b5:7e:9b:0a:55:43:5c:c1:28:82:de:28:76:11:13:
76:90:7a:2f:75:e5:86:c3:89:aa:ee:49:e0:df:08:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.8.0/21
78.108.124.0/24
194.53.139.0/24
213.193.240.0/22
213.239.138.0/23
IPv6:
2a02:2870::/29
Signature Algorithm: sha256WithRSAEncryption
85:9e:1c:da:1a:fd:57:2b:15:04:46:19:72:ae:ad:5f:5e:f2:
6a:20:8f:ae:4d:29:a2:c3:3f:52:91:d2:c6:8a:3d:16:fb:e1:
7f:e1:7d:e5:1e:07:bf:d1:84:25:52:43:8a:40:61:d7:bf:57:
30:2a:38:22:0c:ca:f6:b1:a4:68:e2:f7:17:d2:1a:a6:1d:fc:
a0:53:d5:b3:ed:e2:4c:d3:df:9d:c6:1b:0c:7f:94:f0:73:af:
30:a6:27:30:ce:84:2b:85:28:bf:d6:72:22:ee:1b:4d:2f:1c:
b2:74:e2:85:50:53:83:bc:6f:46:19:33:f9:a7:20:2c:99:9d:
2e:a4:e2:22:9c:32:2e:f7:e0:51:f0:45:85:0b:eb:3d:37:0a:
ba:d1:1b:20:b8:af:48:08:ec:dc:7d:ce:f7:e8:1e:d2:77:45:
53:33:15:4e:c7:14:55:25:91:d7:9e:b3:76:de:12:b0:60:8f:
e7:67:27:b3:3e:8d:f8:7f:b3:6a:49:c9:06:d4:a9:c9:3c:93:
49:2e:16:49:bc:92:7a:07:bb:3e:c9:9a:0c:b7:70:ac:4f:2c:
f0:63:7a:3a:88:bb:a9:31:bf:c1:84:d6:f9:4a:54:1b:95:55:
d8:33:13:a6:05:50:2b:f9:32:a6:9c:f8:ee:33:21:3a:5d:a0:
d4:9f:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:15:20 2026 by rpki-client