Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/D44-IQzot2ABjgAdwdAZTY4U2l0.cer
File: D44-IQzot2ABjgAdwdAZTY4U2l0.cer (raw, json)
Hash identifier: IXZNkfv5RBNbiePFMc+MVoIUceNJ3Yz8k1hqHSh3COg=
Subject key identifier: 0F:8E:3E:21:0C:E8:B7:60:01:8E:00:1D:C1:D0:19:4D:8E:14:DA:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FACAA01DEBD4E14DBDEB7EEDD519604B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/D44-IQzot2ABjgAdwdAZTY4U2l0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jul 2026 06:57:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.54.39.0/24
IP: 192.54.73.0/24
IP: 194.120.110.0/23
IP: 194.120.170.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:aa:01:de:bd:4e:14:db:de:b7:ee:dd:51:96:04:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 06:57:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f8e3e210ce8b760018e001dc1d0194d8e14da5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:b8:3f:54:c8:79:b5:c8:8c:c0:bc:33:04:
0e:03:c7:f2:3c:d7:21:c5:0a:43:ab:af:3e:f8:6e:
f3:aa:3a:88:e4:0c:87:d1:02:ee:4b:67:d9:9c:f3:
55:51:51:c8:d8:12:ca:6b:6e:ae:41:8e:70:10:18:
3b:fa:bb:65:58:c5:f5:f1:f1:e9:51:02:c3:1f:f1:
bd:f3:17:62:2d:89:e6:f5:d0:aa:92:4c:0f:cd:a4:
cd:04:8f:fe:f0:84:33:8f:4a:63:5c:62:f5:96:74:
64:38:9c:cf:7c:e0:4f:57:da:40:d4:12:54:66:43:
c4:d3:1c:6b:65:f5:d0:c3:f9:00:8c:44:80:3b:ca:
52:8a:f4:61:cd:88:34:99:48:3a:2e:33:19:c9:a5:
41:99:eb:f3:3b:66:d9:ac:a5:39:95:cc:e6:fa:ec:
50:ed:5b:58:38:57:e2:c6:7c:f2:a3:8e:df:92:8c:
66:8b:90:b3:0c:f6:a2:2b:5f:54:de:1e:c9:3c:e4:
8d:1f:9d:ce:ba:e7:f9:09:91:1d:fa:d9:2a:ee:23:
b6:33:2a:cd:ab:37:ce:b9:96:c1:a0:3e:4c:a7:c4:
91:38:f4:51:e3:90:8c:5b:d2:53:27:65:f4:70:aa:
6d:b3:a0:49:f6:3c:6c:55:8c:bc:4c:8f:bd:55:3a:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:3E:21:0C:E8:B7:60:01:8E:00:1D:C1:D0:19:4D:8E:14:DA:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/D44-IQzot2ABjgAdwdAZTY4U2l0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.39.0/24
192.54.73.0/24
194.120.110.0/23
194.120.170.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ad:78:c0:fe:6e:d5:f7:66:0a:19:ec:23:ff:4f:9a:7e:d8:
7a:56:ee:1f:23:49:20:8d:d8:f0:da:f2:ac:14:f1:03:94:3f:
9c:de:e1:34:8c:e9:36:45:22:df:60:73:a1:4a:24:77:ca:7f:
81:f6:f5:6d:c2:4c:ce:a1:a6:aa:26:ad:ae:53:cd:12:31:af:
fe:1a:2a:cd:4c:37:60:73:99:7d:c5:f5:61:04:fc:b2:06:5d:
bc:24:12:7d:bc:73:35:ba:f1:0a:4a:eb:94:61:5f:d3:4d:f4:
1a:94:b5:d7:50:d6:d4:e6:1a:08:37:23:b3:fb:d9:49:ae:e9:
cf:25:4d:38:8e:e3:da:4d:67:e3:4a:75:5a:8e:4a:71:91:49:
d9:61:0d:27:79:20:eb:34:d6:25:60:ef:af:7c:8d:af:7e:b2:
70:52:8a:ed:d7:f3:92:a7:b6:73:6d:ad:e6:d6:28:b0:60:1f:
96:4c:78:b0:34:d9:95:9a:16:02:99:14:a2:b2:c3:e4:6e:79:
46:7f:23:67:ff:30:23:91:6e:4e:a2:75:47:b1:7a:c8:6d:7b:
d9:a6:c8:a8:ba:71:75:45:b0:c6:19:23:d4:99:71:74:d6:ca:
b1:14:84:42:60:a7:bf:14:5f:57:5f:72:a6:a1:bb:34:84:f1:
57:83:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:44:47 2026 by rpki-client