Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer
File: 7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer (raw, json)
Hash identifier: g2mY29XYSJ1kRfsvesROgUGaVcJmv4vAspqAuWim2kU=
Subject key identifier: ED:5F:CB:D9:72:21:4A:BE:7F:7D:01:6E:D1:BC:13:3A:D0:61:EA:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FEB3074FC0EE1B00B2E25068B2C6D61AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Aug 2026 10:20:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 94.127.17.0/24
IP: 2a02:cc80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:30:74:fc:0e:e1:b0:0b:2e:25:06:8b:2c:6d:61:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 10 10:20:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed5fcbd972214abe7f7d016ed1bc133ad061eaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:14:3a:50:ef:51:5e:24:5b:c6:6b:db:69:
41:04:0c:d9:31:ae:14:e0:90:f8:85:e8:34:b6:e4:
1e:79:2c:59:6d:fc:65:34:31:4c:b4:42:83:27:e1:
87:a2:30:69:0e:7e:25:b1:87:dc:e0:d5:d0:25:73:
9e:f0:06:47:b9:d6:c6:eb:a2:58:bb:f3:f7:45:60:
71:c0:ba:c4:70:a1:2a:c0:8f:23:97:7e:c8:79:49:
16:ce:ac:03:f7:89:a0:47:53:65:25:35:31:7e:9e:
f5:3d:64:73:53:0b:a9:dd:35:d7:2d:49:0d:15:ec:
1e:3e:ec:d8:e0:69:ff:fa:a5:34:02:fd:ea:a2:42:
3b:29:33:ea:a6:dc:48:f2:b4:ac:6f:76:6e:e7:af:
78:15:64:86:75:42:e2:7d:7c:33:e7:c1:4b:c4:ae:
f7:f3:66:04:05:f3:13:27:a6:15:d3:fa:7f:7d:7b:
97:3d:75:d0:df:c2:37:2f:3d:47:56:99:5e:e2:c7:
e6:99:83:47:12:50:a4:d7:48:6e:14:14:46:84:cc:
31:9b:e6:8c:1e:43:70:b5:2a:be:2e:2e:f2:a8:70:
1f:9a:2f:a6:68:fc:cd:65:36:22:b8:69:ef:77:6c:
4c:ce:fd:d6:16:02:5a:cc:91:e6:8a:f9:b3:1c:5b:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5F:CB:D9:72:21:4A:BE:7F:7D:01:6E:D1:BC:13:3A:D0:61:EA:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.17.0/24
IPv6:
2a02:cc80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:69:4d:e2:b7:7a:34:37:cb:a0:d7:e0:bb:e7:09:78:ab:d9:
5d:99:77:7d:43:62:72:24:d0:25:e3:31:97:85:71:c2:77:c8:
c6:8f:39:f9:c6:e6:cc:cf:65:0c:17:df:48:79:97:45:37:35:
40:26:af:69:85:69:29:2a:8d:fd:f3:1d:65:b6:b7:ad:e9:49:
b0:c7:f7:29:87:97:18:b7:68:51:5f:50:b6:da:6d:4d:40:ea:
0b:0f:5d:94:45:51:88:45:4d:7e:0b:19:3c:3e:0e:5d:56:30:
1f:5c:1b:97:c2:37:c1:dc:d8:e2:eb:75:5c:1a:00:16:e9:9f:
e2:59:68:e4:b9:36:8e:61:dd:65:75:0e:95:02:94:72:40:0c:
21:93:20:95:2c:6a:9a:bb:51:23:ac:69:f4:74:be:b1:14:e6:
f4:9f:42:b1:c6:c3:18:57:42:fb:ed:9f:da:c4:fa:0f:05:91:
1b:b9:37:05:fc:48:76:31:90:1f:d5:92:7f:25:ee:fd:38:79:
07:71:d9:11:de:1b:65:41:cb:c2:00:02:60:52:b7:92:9c:4b:
81:c5:2e:f4:d9:7a:53:5f:60:20:b2:97:9d:6e:5e:4f:fe:f4:
ae:34:b5:af:27:1b:61:43:44:92:72:f5:1a:f6:ad:5a:da:85:
fb:46:0b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:41:42 2026 by rpki-client