Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
File: 7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer (raw, json)
Hash identifier: VzjkbyQovcH/TD24Se3Fg2PilBfTmGpm0FTvbMGEHS8=
Subject key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A708DC4D95F627A2A837D198ED0B1323
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 21:46:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 142.228.4.0 -- 142.228.9.255
IP: 142.228.14.0 -- 142.228.23.255
IP: 142.228.34.0/24
IP: 142.228.40.0/22
IP: 142.228.45.0/24
IP: 142.228.56.0/23
IP: 142.228.64.0/23
IP: 142.228.67.0 -- 142.228.72.255
IP: 142.228.74.0 -- 142.228.87.255
IP: 142.228.90.0 -- 142.228.126.255
IP: 142.228.128.0/23
IP: 142.228.131.0 -- 142.228.132.255
IP: 142.228.134.0/24
IP: 142.228.136.0 -- 142.228.149.255
IP: 142.228.151.0 -- 142.228.152.255
IP: 142.228.154.0 -- 142.228.169.255
IP: 142.228.172.0 -- 142.228.179.255
IP: 142.228.182.0 -- 142.228.255.255
IP: 198.33.8.0/23
IP: 198.33.12.0/23
IP: 198.33.16.0/23
IP: 198.33.24.0/23
IP: 198.33.38.0/23
IP: 198.33.42.0/23
IP: 198.33.48.0/23
IP: 198.33.54.0 -- 198.33.57.255
IP: 198.33.60.0/23
IP: 198.33.64.0/23
IP: 198.33.70.0/23
IP: 198.33.80.0/20
IP: 198.33.100.0/22
IP: 198.33.108.0/22
IP: 198.33.124.0/22
IP: 198.33.132.0 -- 198.33.155.255
IP: 198.33.176.0/21
IP: 198.33.188.0/22
IP: 198.33.212.0 -- 198.33.243.255
IP: 198.33.248.0/21
IP: 198.34.64.0/19
IP: 198.34.112.0 -- 198.34.123.255
IP: 198.34.176.0/21
IP: 198.34.188.0/22
IP: 198.34.200.0/22
IP: 198.34.216.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:08:dc:4d:95:f6:27:a2:a8:37:d1:98:ed:0b:13:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 21:46:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:a7:05:b1:62:f8:3a:01:cf:1c:83:ba:39:
40:50:b4:61:3b:8a:9d:8c:ff:e0:76:6a:e4:32:06:
98:e5:6c:42:05:a0:fc:3e:bb:5e:4e:fc:9e:d9:de:
38:d6:3b:f5:0d:3e:9f:86:59:ce:41:71:c8:ab:77:
0e:9b:7b:b1:7b:bb:df:f0:5c:23:48:08:a5:85:93:
d8:89:8f:20:06:98:13:6f:4d:ac:b1:f9:46:e6:be:
ce:b1:2a:08:a2:75:78:47:0a:27:cb:cd:48:5f:70:
8a:66:dc:6a:a1:2c:85:2f:ad:df:7f:b3:a2:e2:69:
9c:4c:4f:d3:9b:6d:af:52:93:f8:a2:3c:f0:dd:a9:
c4:2c:e8:61:b4:04:34:03:5b:57:a8:53:33:0d:c3:
d6:49:44:18:6a:da:79:44:51:5c:09:a4:27:09:a0:
92:6b:c4:3d:fe:34:d6:5d:83:86:f0:25:66:2e:5e:
41:15:b4:05:84:ef:22:43:71:06:10:43:cc:51:1c:
55:db:5b:23:16:c3:f3:12:cd:fa:23:ed:8d:14:2a:
6d:5a:8b:f3:e0:fb:83:e4:90:a6:77:6d:5b:39:0a:
94:fe:ff:2a:9d:2b:f4:c4:0e:80:09:8c:53:3f:4a:
17:fd:e4:4a:bb:e6:b0:f9:b4:c6:a6:a2:82:e9:92:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.4.0-142.228.9.255
142.228.14.0-142.228.23.255
142.228.34.0/24
142.228.40.0/22
142.228.45.0/24
142.228.56.0/23
142.228.64.0/23
142.228.67.0-142.228.72.255
142.228.74.0-142.228.87.255
142.228.90.0-142.228.126.255
142.228.128.0/23
142.228.131.0-142.228.132.255
142.228.134.0/24
142.228.136.0-142.228.149.255
142.228.151.0-142.228.152.255
142.228.154.0-142.228.169.255
142.228.172.0-142.228.179.255
142.228.182.0-142.228.255.255
198.33.8.0/23
198.33.12.0/23
198.33.16.0/23
198.33.24.0/23
198.33.38.0/23
198.33.42.0/23
198.33.48.0/23
198.33.54.0-198.33.57.255
198.33.60.0/23
198.33.64.0/23
198.33.70.0/23
198.33.80.0/20
198.33.100.0/22
198.33.108.0/22
198.33.124.0/22
198.33.132.0-198.33.155.255
198.33.176.0/21
198.33.188.0/22
198.33.212.0-198.33.243.255
198.33.248.0/21
198.34.64.0/19
198.34.112.0-198.34.123.255
198.34.176.0/21
198.34.188.0/22
198.34.200.0/22
198.34.216.0/21
Signature Algorithm: sha256WithRSAEncryption
88:ef:37:0d:bc:2b:6f:de:96:e1:20:9d:53:9c:41:72:9e:54:
9e:48:b0:16:d4:07:6f:f1:3f:e0:20:7c:6a:89:8b:40:c1:6d:
04:98:e3:e2:69:02:07:93:cb:d5:12:51:6b:1b:78:96:d4:54:
9c:88:86:44:e0:5f:b5:da:20:ec:d1:7a:fc:d4:40:47:11:ca:
a0:26:47:ea:66:38:11:e8:0e:b9:f1:06:d4:7a:7b:1c:e3:2b:
5d:c4:58:82:76:32:8f:6e:a0:22:10:16:43:e7:30:b2:92:a4:
88:4b:b2:66:2e:c8:76:43:0c:a1:ef:d2:6e:9f:a4:c7:23:b6:
74:80:51:c7:d1:d2:03:08:1a:dd:8a:b2:f5:fe:16:dc:0c:b9:
9c:2c:e1:e0:80:20:aa:68:de:5e:9a:3c:c1:4c:67:e8:f5:be:
9e:39:47:ac:6b:c3:c0:b2:8d:73:e9:7f:0e:dd:f1:d7:0d:bf:
b6:20:c3:f9:57:ad:ef:8c:69:45:54:99:42:e5:ce:29:b3:a8:
93:2c:cc:d2:91:b3:c7:ec:75:db:b4:81:c3:15:f0:70:b4:49:
e1:0c:13:01:a5:87:70:5f:49:1f:79:64:fe:aa:5d:03:71:fc:
4b:88:2b:3c:e6:ba:07:81:f2:5a:87:c4:0a:f1:90:e0:2b:87:
89:5b:4d:72
-----BEGIN CERTIFICATE-----
MIIG+zCCBeOgAwIBAgISAaCnCNxNlfYnoqg30ZjtCxMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTE1MjE0NjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGYzNmIyNDM1NjAzNDYwNTNiYzYwY2VkNGU5OGFhNDhlYTFhMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZKnBbFi+DoBzxyDujlAULRhO4qd
jP/gdmrkMgaY5WxCBaD8PrteTvye2d441jv1DT6fhlnOQXHIq3cOm3uxe7vf8Fwj
SAilhZPYiY8gBpgTb02ssflG5r7OsSoIonV4Rwony81IX3CKZtxqoSyFL63ff7Oi
4mmcTE/Tm22vUpP4ojzw3anELOhhtAQ0A1tXqFMzDcPWSUQYatp5RFFcCaQnCaCS
a8Q9/jTWXYOG8CVmLl5BFbQFhO8iQ3EGEEPMURxV21sjFsPzEs36I+2NFCptWovz
4PuD5JCmd21bOQqU/v8qnSv0xA6ACYxTP0oX/eRKu+aw+bTGpqKC6ZKglwIDAQAB
o4IEBzCCBAMwHQYDVR0OBBYEFO3zayQ1YDRgU7xgztTpiqSOoaBjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzRjNzA3
NC05OGMxLTQzMzktYTA0ZS03Y2IyZmQyMzJjY2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvNGM3MDc0
LTk4YzEtNDMzOS1hMDRlLTdjYjJmZDIzMmNjYy8xLzdmTnJKRFZnTkdCVHZHRE8x
T21LcEk2aG9HTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBoAYIKwYB
BQUHAQcBAf8EggGPMIIBizCCAYcEAgABMIIBfzAMAwQCjuQEAwQBjuQIMAwDBAGO
5A4DBAOO5BADBACO5CIDBAKO5CgDBACO5C0DBAGO5DgDBAGO5EAwDAMEAI7kQwME
AI7kSDAMAwQBjuRKAwQDjuRQMAwDBAGO5FoDBACO5H4DBAGO5IAwDAMEAI7kgwME
AI7khAMEAI7khjAMAwQDjuSIAwQBjuSUMAwDBACO5JcDBACO5JgwDAMEAY7kmgME
AY7kqDAMAwQCjuSsAwQCjuSwMAsDBAGO5LYDAwCO5AMEAcYhCAMEAcYhDAMEAcYh
EAMEAcYhGAMEAcYhJgMEAcYhKgMEAcYhMDAMAwQBxiE2AwQBxiE4AwQBxiE8AwQB
xiFAAwQBxiFGAwQExiFQAwQCxiFkAwQCxiFsAwQCxiF8MAwDBALGIYQDBALGIZgD
BAPGIbADBALGIbwwDAMEAsYh1AMEAsYh8AMEA8Yh+AMEBcYiQDAMAwQExiJwAwQC
xiJ4AwQDxiKwAwQCxiK8AwQCxiLIAwQDxiLYMA0GCSqGSIb3DQEBCwUAA4IBAQCI
7zcNvCtv3pbhIJ1TnEFynlSeSLAW1Adv8T/gIHxqiYtAwW0EmOPiaQIHk8vVElFr
G3iW1FSciIZE4F+12iDs0Xr81EBHEcqgJkfqZjgR6A658QbUensc4ytdxFiCdjKP
bqAiEBZD5zCykqSIS7JmLsh2Qwyh79Jun6THI7Z0gFHH0dIDCBrdirL1/hbcDLmc
LOHggCCqaN5emjzBTGfo9b6eOUesa8PAso1z6X8O3fHXDb+2IMP5V63vjGlFVJlC
5c4ps6iTLMzSkbPH7HXbtIHDFfBwtEnhDBMBpYdwX0kfeWT+ql0DcfxLiCs85roH
gfJah8QK8ZDgK4eJW01y
-----END CERTIFICATE-----
Generated at Sat Sep 19 09:59:54 2026 by rpki-client