Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
File: 5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer (raw, json)
Hash identifier: HF8MsN1VxhpI97JnlVEmip1gotKw3eFNSAzLWDHExNw=
Subject key identifier: E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9EBFDF255A69E894EBB8AA5CAF57A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.10.131.0/24
IP: 77.81.141.0/24
IP: 78.159.151.0/24
IP: 89.44.34.0/24
IP: 91.92.32.0/24
IP: 91.92.36.0/23
IP: 91.231.3.0/24
IP: 95.214.76.0/22
IP: 194.147.64.0/23
IP: 212.11.95.0/24
IP: 2a09:db80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 07:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:eb:fd:f2:55:a6:9e:89:4e:bb:8a:a5:ca:f5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:dd:89:a4:2a:01:5b:b9:01:b0:95:d0:bb:
e5:19:e5:c7:34:60:5f:c7:da:3a:33:3d:59:fe:79:
04:e5:ec:b0:c6:ca:0e:79:f7:ee:42:55:11:9c:8b:
7f:d1:e2:ab:56:66:d6:80:18:bb:c5:b0:4c:53:1e:
6d:65:2c:ae:a8:5c:ef:e7:70:5a:aa:15:74:70:ea:
cd:0e:14:b4:81:c8:dd:4c:45:48:c8:30:31:4b:01:
9a:02:17:87:25:fd:1c:71:76:9e:fc:36:fb:41:0f:
80:22:f6:63:15:3f:1c:4d:ec:7a:07:36:86:b4:37:
82:78:2b:1e:73:33:21:b2:b6:cd:1e:8e:42:a2:55:
e8:cd:48:5a:1b:88:01:06:2d:2c:20:71:f9:d8:87:
4e:3d:d9:87:c0:6c:8e:96:cc:7d:ca:0d:98:b8:ba:
0f:aa:c3:40:1b:a4:7a:ad:44:6a:a6:a0:c2:63:ec:
35:6d:e4:64:64:d8:b2:20:17:0b:d0:0c:dc:d6:6a:
5d:74:0a:20:bc:e2:f7:e9:a3:eb:96:0b:f3:91:37:
7d:ed:21:6a:cb:e7:a9:37:62:92:26:16:b0:89:00:
90:52:ba:7b:03:cc:fb:ca:21:49:8f:f2:23:f4:0d:
c8:07:d4:8a:b5:4c:04:3e:9f:bd:3c:9c:fe:34:00:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.131.0/24
77.81.141.0/24
78.159.151.0/24
89.44.34.0/24
91.92.32.0/24
91.92.36.0/23
91.231.3.0/24
95.214.76.0/22
194.147.64.0/23
212.11.95.0/24
IPv6:
2a09:db80::/29
Signature Algorithm: sha256WithRSAEncryption
aa:1b:2c:d2:07:74:be:d8:e2:6b:dc:13:75:e7:aa:7e:c8:98:
e1:9c:24:2b:96:41:63:93:a0:cf:81:b1:b6:1f:bb:03:05:01:
51:d2:35:c6:dd:9e:66:ca:c7:07:2e:c7:16:9d:72:3d:bd:c0:
5e:77:30:8b:2b:45:32:9b:84:5a:9b:a2:fc:b8:32:1f:60:63:
6b:11:98:24:c8:af:98:08:64:5f:93:97:c9:08:67:2d:66:8b:
29:3e:7d:62:0e:ed:5c:2d:d9:1f:7e:ae:cc:ed:9a:0f:8d:45:
1b:15:6d:f2:ef:78:86:05:9c:07:09:35:16:c1:10:3c:bc:52:
e4:01:2d:db:3c:43:4f:f6:db:d2:96:57:ce:c9:2e:ce:5c:1d:
e5:ff:d4:13:fc:7a:ba:22:71:24:48:b2:17:16:08:7a:f6:c3:
ba:14:08:dc:8f:8c:4e:1f:8f:24:9e:71:15:13:7c:5b:30:1d:
1f:be:f6:ab:7f:9f:ce:51:cb:0d:79:67:14:06:1a:ae:24:43:
96:0d:4b:de:52:ca:db:06:4e:2d:9a:9f:f2:d5:f0:dd:d7:45:
67:fb:9c:19:cd:e8:7e:27:9a:30:36:e5:8d:cc:dd:8e:94:ce:
dc:f3:e2:4e:f7:26:eb:c8:9d:97:45:2c:4a:18:d2:a5:0e:d9:
a0:da:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:23:54 2026 by rpki-client