Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9mdTRY_iqSQPU98eSDYHaCCAvGQ.cer
File: 9mdTRY_iqSQPU98eSDYHaCCAvGQ.cer (raw, json)
Hash identifier: joCo/4fW+mosA0Xd/yAfEb5CrlH7/xahQjCYDpLLu8I=
Subject key identifier: F6:67:53:45:8F:E2:A9:24:0F:53:DF:1E:48:36:07:68:20:80:BC:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FACA7ECA83922DFD72D23F01D7F5E7F8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/9mdTRY_iqSQPU98eSDYHaCCAvGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jul 2026 06:55:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.30.36.0 -- 193.30.38.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:a7:ec:a8:39:22:df:d7:2d:23:f0:1d:7f:5e:7f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 06:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f66753458fe2a9240f53df1e483607682080bc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:d1:48:e0:0c:f7:1d:01:2a:21:85:f9:c8:
9f:ff:9f:09:f4:bb:8b:97:b1:de:22:5c:48:7a:6f:
68:d0:59:f2:18:fa:19:53:93:d1:67:24:ec:fe:89:
1a:71:a8:a3:d0:4a:a0:af:3d:b6:29:ea:bf:ed:1a:
05:ef:3f:37:43:90:cb:f6:3d:55:7f:ee:ce:d4:7e:
05:bc:e8:36:96:42:47:30:0a:03:83:95:2e:8f:ad:
d9:2a:3d:01:42:4c:14:45:45:ee:d3:5b:77:3a:a6:
ae:0d:f7:af:61:67:2d:c5:b8:3f:d6:09:47:a1:56:
eb:11:16:15:f3:ad:66:f5:55:45:b2:2f:68:70:a9:
5b:25:bc:1f:3c:59:f1:eb:51:60:96:54:7c:f9:c2:
fa:48:39:4e:4d:aa:86:32:56:04:bd:a8:ba:e8:8a:
0a:3a:dc:a6:ab:a0:7d:06:78:dd:d3:91:ed:8b:bb:
94:f6:8d:f4:5d:2d:6a:62:c6:05:bd:dc:46:b9:5d:
43:d1:ed:09:07:00:da:d0:b3:42:65:ac:52:4b:d6:
40:6c:b6:7e:02:df:25:26:2d:73:44:dd:1b:ec:e9:
1a:45:cb:e9:11:01:e5:83:b1:95:71:07:a8:ba:12:
61:12:ee:1b:82:61:85:97:30:24:de:3f:c6:3b:68:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:53:45:8F:E2:A9:24:0F:53:DF:1E:48:36:07:68:20:80:BC:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/9mdTRY_iqSQPU98eSDYHaCCAvGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.36.0-193.30.38.255
Signature Algorithm: sha256WithRSAEncryption
1b:27:5e:a1:29:1c:06:a4:01:97:d4:56:98:02:60:85:fa:8a:
f1:f5:3e:17:fe:f9:2e:9e:7e:13:e0:86:f6:2d:1c:3c:a5:a5:
58:96:fc:7e:01:00:4c:b1:7e:05:5d:c5:8d:14:db:64:54:48:
e6:44:03:b7:6d:b3:fb:22:27:26:cb:e7:f0:8d:3b:ab:d4:7e:
66:e6:b5:b0:af:bf:c1:ee:6c:02:d9:c3:cc:b3:c5:89:d7:2b:
00:9f:80:82:c0:26:d6:70:94:be:a7:96:f2:59:80:1d:40:d7:
40:26:44:83:42:24:5c:40:ef:bf:cd:97:8b:b1:c2:5d:b2:bc:
3d:76:1d:7c:e5:c7:90:2a:b5:a2:11:5a:7b:a9:bc:bd:49:e4:
aa:98:1a:8f:df:4a:53:53:1a:8f:f5:4d:dc:07:d0:28:30:16:
32:cc:b5:31:80:62:d4:29:cb:d3:7f:dd:cb:51:fe:4a:5a:21:
7c:54:51:cb:0e:d1:a0:e1:15:05:1d:1b:a1:d0:2a:4d:4d:3f:
6a:10:e9:c7:c4:d5:75:c6:16:27:09:a8:f5:30:69:56:ba:e5:
18:5c:a3:83:42:09:56:12:e5:28:44:ef:27:bf:bb:c8:7e:c6:
3a:ec:96:54:c0:ce:ba:4f:6a:d4:0e:c2:1a:18:b7:fb:15:27:
54:a6:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:45:01 2026 by rpki-client