
Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
File: 7m9I_I5rX9kh3jgFehSgwJioJjs.cer (raw, json)
Hash identifier: 8asEE/l7w76sqOodu0PcbMGGvDvoe0XJnjLezB5n7JY=
Subject key identifier: EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD6416B8F51C13CFFE08A802914809860
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 08:47:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.15.218.0/24
IP: 194.127.157.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:41:6b:8f:51:c1:3c:ff:e0:8a:80:29:14:80:98:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 08:47:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:0c:76:39:10:a9:93:11:4c:1b:5e:62:98:
45:47:39:23:cc:14:64:76:c1:4a:f0:60:12:0c:e0:
9c:61:48:50:e0:1b:1a:be:40:99:d5:1e:40:c3:f3:
34:d8:49:99:74:2c:e5:a1:a2:ad:00:2d:44:3a:05:
de:b8:54:58:95:5e:7b:b3:b4:e6:97:c9:eb:0c:c1:
cb:77:30:16:ec:1f:39:0f:02:5e:17:fc:7d:32:08:
86:0d:ed:89:98:44:9d:fd:fe:89:5b:dc:b0:2a:a2:
0e:91:60:3a:cf:ed:95:ab:33:df:4c:48:cd:5e:05:
60:0f:4e:f0:7a:94:1a:c6:88:25:c0:30:33:8c:a7:
15:09:32:5d:69:ef:ec:8e:3c:27:3f:87:bf:cc:76:
f5:0d:b7:fb:2e:9f:b3:bb:7f:8e:fe:a8:1f:f4:f0:
e4:44:88:1e:c1:96:96:06:c9:58:b6:c8:00:eb:50:
a0:a8:1f:c8:cf:71:6e:0a:9e:c0:a6:2f:9f:5a:2d:
4b:3e:91:b6:57:25:26:cd:60:e0:fc:f5:9f:91:d5:
69:a6:09:c1:2b:a2:30:09:40:5b:e6:ae:e1:19:9d:
94:ef:6c:39:b0:21:af:92:4c:d6:99:4e:8d:d8:19:
ad:b5:b9:3b:8a:07:82:7a:13:31:ea:70:7b:2e:0f:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.218.0/24
194.127.157.0/24
Signature Algorithm: sha256WithRSAEncryption
89:38:d5:02:25:c6:6a:a3:c2:6d:b2:26:49:a5:f7:d6:61:f5:
73:de:b8:2c:49:b1:ae:37:42:01:02:de:7b:ce:b0:c6:6b:56:
5e:73:3a:e5:45:b7:1f:2d:02:55:9d:66:a2:f1:69:2c:e5:90:
02:78:9a:ec:29:1f:f6:a0:ce:5b:bd:47:29:30:78:e8:f7:f6:
c9:26:c2:42:d8:8a:f0:00:58:b9:83:44:d3:f3:fd:a7:81:df:
16:ef:6a:06:ff:fc:7f:38:14:48:dc:0b:e7:78:6a:43:e8:51:
32:e1:aa:ae:68:db:a8:76:d8:48:38:17:cc:27:39:52:e6:e8:
f2:8c:68:88:94:1b:3a:b0:67:ee:d2:f7:eb:c4:b7:5c:1b:92:
4b:7b:5e:b4:58:0a:88:2e:3a:fa:9a:a3:dc:1d:8d:c2:b2:25:
8f:45:aa:6d:45:9f:cd:d4:62:94:d1:d3:d0:b9:e8:1e:8c:54:
df:19:79:a9:91:6e:55:c3:c3:1d:f1:de:a7:c1:2e:7e:37:32:
c5:b2:80:da:78:c5:31:9b:3b:bc:bf:16:7e:a5:39:92:0b:1e:
53:80:14:93:2a:b9:24:28:d2:13:9f:34:cd:8f:6e:d3:40:f9:
11:ae:02:79:81:e9:1d:67:9c:d6:fc:ac:1a:53:30:71:dc:70:
5e:a9:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:24:46 2026 by rpki-client