Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
File: 33SEs_Vo6k6qe_DLfIP172Y-sXA.cer (raw, json)
Hash identifier: Q4GThkbntaH6C+0DC7pcU9tFIfZNk9gkGJu1hNA6S40=
Subject key identifier: DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FDD20FD8454D519F6F4932482428D4290
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Aug 2026 16:49:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 155.210.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:20:fd:84:54:d5:19:f6:f4:93:24:82:42:8d:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 16:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:02:4e:65:c5:7d:85:af:e7:99:7e:c9:a8:6f:
dd:1f:36:70:41:be:01:cf:94:0e:4c:8e:8e:88:1a:
69:fb:5b:99:3d:4f:ed:6d:66:81:7f:d0:ae:80:e6:
58:6f:42:9f:b0:c8:b5:71:50:67:17:26:2e:27:0e:
1c:a5:02:b3:d2:3b:8e:51:62:10:8b:4d:e1:51:25:
72:00:8f:f9:18:f4:16:86:76:b5:f6:bc:7d:0d:48:
27:a7:86:cb:6d:e0:ab:1d:9e:42:af:48:40:e7:9e:
74:6d:7c:88:fd:c4:17:73:a1:70:4a:d6:54:32:02:
93:b5:9a:22:3b:1c:be:76:95:2a:6c:db:25:36:7a:
cd:e9:47:34:09:f8:ae:a8:ed:c5:fb:72:b8:ed:5a:
d2:b3:0f:31:27:6e:3b:16:5b:30:bf:c2:ff:bb:1a:
73:58:d0:27:45:62:dd:80:cd:56:bf:87:ca:97:83:
3c:31:31:e7:79:b4:e4:6d:1a:eb:33:35:d1:0d:5a:
f3:9e:9a:fb:c3:37:0b:af:57:35:50:92:f2:47:7a:
f7:f0:8f:79:a2:23:5a:1f:07:da:9f:0a:09:23:f3:
0a:6d:0e:22:40:07:db:38:ed:b4:f5:8a:e2:ec:ac:
77:f9:94:7e:6f:46:f6:bf:8d:2d:51:79:cb:30:79:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:14:44:83:0d:ca:b6:97:c1:1e:3c:2c:f3:0c:59:9d:c9:85:
38:ca:68:27:bf:27:5a:81:0f:57:f4:1c:89:e6:22:ee:4c:9e:
18:71:d9:9f:18:98:c0:f9:4a:7e:85:5b:dd:36:3c:56:56:c5:
54:e6:d8:3a:20:e1:b5:8a:d4:24:f6:8e:33:f8:88:b8:32:af:
d8:5d:f8:7c:44:9d:ca:8d:ac:95:62:d5:ea:8f:a2:98:5d:2a:
6a:9f:0f:11:9a:c9:3e:4f:bc:d1:76:bd:0c:9f:69:da:43:9e:
93:93:ae:13:de:18:b7:cc:6b:11:76:1e:a2:c8:58:29:f1:c0:
5a:b8:a3:82:94:af:4f:48:80:3f:bd:78:75:6b:2e:e0:54:76:
ce:c2:8f:ce:36:28:4b:a7:75:9d:d2:f8:ca:0c:ad:70:06:cb:
fa:d6:21:40:b8:63:e1:22:30:42:09:ce:ec:2a:de:f9:e2:4c:
67:dc:60:89:46:8a:7a:06:ae:d4:9f:e4:3d:5d:9f:9e:b8:79:
08:fb:dd:06:09:d5:ba:78:4f:e0:8a:54:d8:ff:30:96:54:42:
59:fd:81:a4:a2:54:c6:1c:87:7a:1c:67:a0:89:14:50:94:87:
aa:62:38:33:7c:fb:49:81:7b:35:c0:db:83:11:55:ac:69:8a:
41:0f:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:24:20 2026 by rpki-client