Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87-4hnjViI7HntTg19jollBnAgE.cer
File: 87-4hnjViI7HntTg19jollBnAgE.cer (raw, json)
Hash identifier: qI7E6SOTNJ8iEVuNcfNCKSgx1MIcdGX8/Ledu30+E8Q=
Subject key identifier: F3:BF:B8:86:78:D5:88:8E:C7:9E:D4:E0:D7:D8:E8:96:50:67:02:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD4097DEE66C9FA17B0731C9054B1686D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Apr 2026 12:21:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.91.112.0/22
IP: 2a05:ea80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:09:7d:ee:66:c9:fa:17:b0:73:1c:90:54:b1:68:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 12:21:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3bfb88678d5888ec79ed4e0d7d8e89650670201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:8a:57:74:96:6c:cc:51:ad:4f:80:b2:89:
34:ca:ce:e1:e8:b7:03:f7:be:58:d6:53:55:8f:85:
08:43:a8:66:cf:d7:7c:17:2e:57:b5:99:16:45:c5:
99:ab:81:cf:c0:4e:a4:a1:a8:71:4e:74:e6:8a:34:
13:50:01:02:9d:43:f9:34:11:1a:0e:da:ec:b2:cd:
e0:85:ee:5e:f3:2f:5d:2a:d4:75:ec:d6:e0:40:7f:
22:d6:22:97:0b:67:2d:af:3f:30:32:78:39:ff:f6:
a8:10:3e:1f:6e:e8:25:5f:fb:1b:47:1a:78:7e:ea:
57:1a:5a:f8:ac:44:34:61:2d:05:2f:d7:f5:e6:e9:
d6:23:0a:8a:38:05:22:e6:c1:43:3f:62:c7:ed:ae:
d5:18:57:fc:70:9f:0b:bf:d6:61:d0:37:8c:7f:72:
83:f8:13:1a:c3:83:95:04:b1:3c:72:92:ba:fd:80:
71:22:d4:50:59:c7:46:06:60:70:dd:b5:6a:38:6b:
3a:d8:d3:f3:c5:17:9d:51:09:92:f7:eb:36:01:1d:
3d:e1:21:6f:3a:33:00:55:b7:60:70:3a:d0:28:dd:
4d:8b:0d:4a:63:94:8b:a6:e9:a6:1b:ef:74:81:87:
4a:52:42:f2:bd:9a:3a:0b:d5:dd:e0:7d:05:8f:b0:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BF:B8:86:78:D5:88:8E:C7:9E:D4:E0:D7:D8:E8:96:50:67:02:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/22
IPv6:
2a05:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
26:0e:e3:94:d5:c2:39:f8:b1:6a:b5:9f:79:31:87:c3:21:bd:
17:5a:ea:a2:4d:5e:26:2d:0a:ee:51:ca:56:48:a7:b5:86:05:
92:cc:b8:1b:95:57:6c:7b:0e:63:58:b8:78:55:6b:c3:54:72:
30:b1:27:1c:2e:8d:bb:db:d5:92:b0:6a:58:d2:40:b4:92:71:
bd:16:f8:5d:fb:e0:bb:0b:37:00:7b:66:ba:0b:58:c1:84:0c:
9e:20:1a:ca:be:a0:25:38:54:01:1f:d9:e3:16:6d:0b:97:b1:
53:6d:65:92:81:8d:3c:26:98:5f:74:fb:46:30:d1:ac:b5:d8:
cc:c6:30:49:c7:e0:46:73:25:f7:32:5d:ce:ee:d3:db:d1:1d:
2c:f8:93:50:b8:f9:11:84:03:1f:ca:b0:f3:83:ba:b7:ee:12:
43:54:0f:e9:10:84:a0:56:2b:06:0e:f6:7d:94:c0:11:d9:20:
ca:f8:d4:04:41:3d:2f:5d:99:8f:b8:dd:03:1d:32:b2:be:15:
e6:cd:a8:8a:fe:99:71:dc:1f:eb:fe:27:b4:8e:2e:36:52:cc:
1c:00:73:b7:92:99:d6:14:8b:66:a5:59:9f:70:aa:76:fd:9a:
48:46:1f:8a:d6:82:7f:e7:a9:5d:e9:71:d6:89:91:16:59:89:
98:3b:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:16:05 2026 by rpki-client