Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
File: Cx_IbXySo01haTZCvs_-mgnkq5M.cer (raw, json)
Hash identifier: zC7E4JkBHAU8aImglshdVx1QF89wg3k5/K1WJJCs7Us=
Subject key identifier: 0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA174210DCF6E34A46B043DDEB969F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 92.42.99.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:17:42:10:dc:f6:e3:4a:46:b0:43:dd:eb:96:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:ed:71:c8:e5:07:5e:5f:36:d7:91:44:9f:
9f:ed:26:6e:b2:12:19:5e:7b:4a:24:f7:21:64:46:
80:3e:dd:e9:57:f0:7e:5a:f0:da:21:dd:30:11:47:
b9:9f:96:f3:ee:14:ad:26:ab:88:43:70:d9:3b:fa:
85:9e:74:11:4a:ab:e8:fa:fa:35:fa:9b:e1:9e:d1:
ff:ba:8b:81:7f:63:62:59:11:de:5e:e9:c8:9a:a3:
18:10:5d:1b:18:41:db:73:37:39:99:cd:25:8a:b5:
42:37:5f:4a:3b:24:55:e3:34:a9:41:df:6d:d6:2b:
7f:51:4d:6a:49:90:40:30:c0:1d:7e:4c:3f:68:28:
ed:5c:70:68:7a:73:64:5e:a2:47:62:d0:37:68:46:
1e:92:0d:b0:a2:d0:71:bf:97:6e:b0:3d:c2:88:84:
2e:13:67:2c:15:c7:cd:cc:8a:91:5a:c1:01:9c:96:
5f:3a:08:34:a9:e5:2a:6d:1a:11:ea:6b:ad:40:68:
67:42:70:6f:ee:fb:aa:c7:ac:7b:63:61:ce:64:d3:
db:d2:ab:13:15:83:d7:25:07:b2:be:be:10:07:cf:
b2:a2:16:cc:18:b3:e6:34:0a:30:24:ab:00:13:12:
f2:65:e0:51:3a:25:19:fb:c1:a8:7b:0d:52:7c:3d:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5e:f7:78:43:ad:65:b3:c1:bb:a4:d7:5c:9b:4d:63:62:2b:
39:ae:09:af:9c:10:a1:9a:d1:b8:72:9a:a0:ba:3f:50:2d:40:
20:e3:7e:d1:9f:30:c7:ef:ab:85:0b:40:f6:a6:6b:8c:9d:a1:
00:dc:a1:27:4f:61:be:33:eb:68:2c:3e:64:6c:d6:db:8f:e0:
f2:8d:2e:c4:e8:7b:b4:82:4a:8c:72:ee:4a:83:d4:d2:bb:a3:
b7:3e:08:15:50:3f:29:31:9c:f0:4f:f3:34:93:80:ff:19:01:
6a:78:f5:be:3a:86:84:4f:83:64:15:cb:19:0e:60:f0:50:2e:
33:23:b6:31:a5:f6:e4:ab:83:f0:ec:aa:71:08:ce:9a:04:cb:
ac:68:e0:59:bc:61:d2:82:0d:31:14:df:19:fe:20:b1:99:f2:
2f:10:0d:11:5a:87:65:bb:d8:0e:14:3c:e5:72:e7:e8:66:45:
f2:e9:51:86:23:c7:91:1c:44:84:66:49:1f:d4:ff:d5:7c:d9:
e8:69:17:32:ea:d7:c9:e2:27:fd:3c:94:0c:eb:73:01:2e:2a:
59:23:6d:b1:1b:c7:58:f5:ef:5a:89:90:48:d5:25:f0:97:49:
a4:99:af:69:6d:5b:97:c4:5c:44:11:ad:ff:6d:3d:30:4e:03:
0b:d8:97:cb
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ8Y+hdCENz240pGsEPd65afMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjFmYzg2ZDdjOTJhMzRkNjE2OTM2NDJiZWNmZmU5YTA5ZTRhYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt7tccjlB15fNteRRJ+f7SZushIZ
XntKJPchZEaAPt3pV/B+WvDaId0wEUe5n5bz7hStJquIQ3DZO/qFnnQRSqvo+vo1
+pvhntH/uouBf2NiWRHeXunImqMYEF0bGEHbczc5mc0lirVCN19KOyRV4zSpQd9t
1it/UU1qSZBAMMAdfkw/aCjtXHBoenNkXqJHYtA3aEYekg2wotBxv5dusD3CiIQu
E2csFcfNzIqRWsEBnJZfOgg0qeUqbRoR6mutQGhnQnBv7vuqx6x7Y2HOZNPb0qsT
FYPXJQeyvr4QB8+yohbMGLPmNAowJKsAExLyZeBROiUZ+8Goew1SfD1m7wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAsfyG18kqNNYWk2Qr7P/poJ5KuTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzJkOTVl
Ny1iYTE3LTQ3N2YtODliNy1kYTVmNmE2NThmOGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMmQ5NWU3
LWJhMTctNDc3Zi04OWI3LWRhNWY2YTY1OGY4Yi8xL0N4X0liWHlTbzAxaGFUWkN2
c18tbWdua3E1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAXCpjMA0GCSqGSIb3DQEBCwUAA4IBAQCHXvd4
Q61ls8G7pNdcm01jYis5rgmvnBChmtG4cpqguj9QLUAg437RnzDH76uFC0D2pmuM
naEA3KEnT2G+M+toLD5kbNbbj+DyjS7E6Hu0gkqMcu5Kg9TSu6O3PggVUD8pMZzw
T/M0k4D/GQFqePW+OoaET4NkFcsZDmDwUC4zI7Yxpfbkq4Pw7KpxCM6aBMusaOBZ
vGHSgg0xFN8Z/iCxmfIvEA0RWodlu9gOFDzlcufoZkXy6VGGI8eRHESEZkkf1P/V
fNnoaRcy6tfJ4if9PJQM63MBLipZI22xG8dY9e9aiZBI1SXwl0mkma9pbVuXxFxE
Ea3/bT0wTgML2JfL
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:33:53 2026 by rpki-client