Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer (raw, json)
Hash identifier: 66M9lDFC4lzL7FNMydMgrwLqRiJdinZLA6xtG6LRVdM=
Subject key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E45375C5BDB4C352B81E91950ED323B39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 May 2026 11:48:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 46.17.8.0/21
IP: 194.53.139.0/24
IP: 213.193.240.0/22
IP: 213.239.138.0/23
IP: 2a02:2870::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:37:5c:5b:db:4c:35:2b:81:e9:19:50:ed:32:3b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 11:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:66:1b:51:a4:6c:fc:d8:63:fb:b6:85:dc:
14:fe:8b:8d:75:45:49:f1:f5:8e:fd:4b:05:f3:23:
b9:2b:03:d2:35:e4:25:61:e7:d7:19:e8:f7:56:c1:
0e:a2:05:32:56:bb:1b:5a:f0:7d:ae:2f:d9:5e:d7:
9a:c9:a7:f3:ad:eb:15:d3:25:73:1d:13:d7:b6:d8:
dc:d9:fa:fe:1b:ce:45:2c:80:d3:c6:d4:2a:fe:93:
20:f7:0e:08:5d:7b:94:ea:de:38:ba:cb:20:f3:b1:
c4:b4:d5:0f:ed:b0:c1:04:63:ed:4c:4e:d8:b9:0d:
ba:9b:66:93:84:5f:c0:25:ab:83:f6:5e:37:3c:87:
14:88:7a:59:ac:37:61:41:b4:41:70:b0:98:36:3f:
28:9f:9c:18:17:de:1b:c0:77:bf:c7:83:3b:6b:3a:
e8:6c:af:4e:19:d1:71:50:96:70:96:5e:67:88:c7:
f8:74:78:1e:ff:5f:a5:7a:20:27:e9:e0:3e:6d:54:
e4:9d:62:14:93:c7:53:59:f7:08:5d:2d:25:8b:94:
89:77:22:7f:7e:cc:06:b9:be:8a:f6:a8:83:42:f5:
b5:7e:9b:0a:55:43:5c:c1:28:82:de:28:76:11:13:
76:90:7a:2f:75:e5:86:c3:89:aa:ee:49:e0:df:08:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.8.0/21
194.53.139.0/24
213.193.240.0/22
213.239.138.0/23
IPv6:
2a02:2870::/29
Signature Algorithm: sha256WithRSAEncryption
5f:2a:ca:b1:2d:41:3a:6f:11:f9:6a:ab:8b:0c:32:19:28:60:
76:15:6f:11:2f:9d:5e:3b:1a:45:d4:b9:82:1e:d1:27:ea:ca:
b9:6f:f5:bc:e8:fb:7e:03:88:b2:ff:f3:aa:1a:07:3e:a9:9c:
d1:80:25:2c:f0:5e:50:f1:86:33:c0:04:40:ef:5e:f5:d2:15:
be:fc:23:c8:9d:0a:06:26:a8:56:b2:ab:c0:13:8f:ea:b4:dd:
76:e6:ad:a2:65:3e:0f:19:63:ce:b5:e7:8c:4e:20:87:6a:ce:
e7:34:93:02:cb:06:ff:5e:18:85:e2:26:d2:de:40:0f:31:4e:
d7:0f:9c:39:44:c0:4e:8b:b1:3c:e9:0d:ec:ad:31:99:03:c4:
64:b3:7a:9a:30:5c:83:d5:07:0c:e9:36:d7:7d:ec:21:de:a0:
b0:d8:c8:b3:99:34:a8:4a:c1:c0:a4:62:76:87:3f:8a:88:3c:
04:f3:03:50:d1:88:e6:83:0e:1b:6a:f0:6f:8a:9d:da:ce:b2:
43:8c:85:4a:ed:c7:c8:e8:2a:ff:68:26:c4:02:dc:5d:ad:79:
93:fc:6a:e1:29:f2:51:1b:3e:76:5a:8b:f0:32:2e:de:49:f5:
ac:9c:97:fa:a2:d7:a9:ec:36:95:a3:13:a8:0a:fc:f0:a6:59:
a7:2f:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:40:15 2026 by rpki-client