Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DetjQ3Fdym7urXHUKMibOzgJzUc.cer
File: DetjQ3Fdym7urXHUKMibOzgJzUc.cer (raw, json)
Hash identifier: UFjNdD6RgjMCfOoC7q8GKiKpBvbXlGc+O0ZCCe1J51w=
Subject key identifier: 0D:EB:63:43:71:5D:CA:6E:EE:AD:71:D4:28:C8:9B:3B:38:09:CD:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9436BCB75DBDACE353C478841C743
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.169.80.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:43:6b:cb:75:db:da:ce:35:3c:47:88:41:c7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0deb6343715dca6eeead71d428c89b3b3809cd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:43:34:fa:57:49:1b:fc:78:9a:3d:ea:a8:3f:
45:7e:5a:4d:9c:b6:b7:a0:2e:0a:b6:13:4d:6a:3e:
a9:92:37:e4:75:20:33:5c:52:62:f2:47:e9:1c:70:
25:eb:fd:69:b8:da:f7:f4:df:5f:a3:b7:38:9e:35:
c1:fe:22:cf:f6:ce:f8:5f:fd:7d:36:b4:46:c7:04:
24:7a:62:9d:e3:52:98:d4:6f:18:3d:68:a8:dc:7e:
41:6c:06:6b:2c:8a:be:62:02:2a:cb:01:6a:d9:3d:
5b:03:37:20:1b:cb:09:32:bd:44:de:b9:d7:0a:b2:
ae:19:95:30:7f:ef:3f:55:04:8c:1c:9c:30:78:b4:
dc:0b:79:6e:5c:c6:eb:f2:e4:7b:2f:d5:77:61:a9:
3b:61:f1:a7:ff:1e:81:88:b6:c5:ac:d4:69:5c:5f:
24:a9:2c:2e:55:1f:fe:37:ae:e3:a5:b1:c2:a9:8e:
b3:32:25:ee:ed:64:d8:ca:5c:bd:52:8c:34:ab:1d:
be:fc:71:61:4b:ad:2e:50:71:ec:90:32:03:57:24:
4c:3f:5d:93:f6:f6:ef:52:ff:70:c9:c2:b5:dc:50:
03:d0:e2:0d:ea:4f:2b:05:46:f2:f4:e7:35:cb:ae:
94:88:96:65:1c:4b:d9:77:17:9e:65:22:d5:c0:f3:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:63:43:71:5D:CA:6E:EE:AD:71:D4:28:C8:9B:3B:38:09:CD:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/DetjQ3Fdym7urXHUKMibOzgJzUc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.80.0/22
Signature Algorithm: sha256WithRSAEncryption
08:70:11:e7:e8:bb:49:1f:62:f3:98:e0:12:ce:5b:a6:c0:e3:
6f:b3:f4:c7:f5:9c:83:58:2d:41:e9:1f:48:97:30:ae:03:76:
37:5a:54:b2:52:6f:e5:ea:b5:b6:16:f5:28:a8:7a:ae:34:eb:
e5:ef:ad:8d:0c:c6:75:55:80:78:54:d0:2a:0b:6f:4d:5f:14:
e5:a1:91:3f:50:55:1e:a2:5b:30:6f:c2:c2:22:8e:00:2f:77:
40:ac:b4:63:53:07:09:82:b6:c0:df:27:ba:f5:48:a4:b6:b8:
7e:a2:2a:55:0c:1d:4c:fd:c1:4c:31:2d:8c:7f:52:0a:ad:9a:
bc:6f:16:1f:36:73:7a:20:6c:ff:89:9e:22:31:c1:50:12:5c:
1d:ed:23:29:f8:e3:19:75:29:72:2b:5c:49:32:b2:c0:c4:37:
47:2c:6b:15:8b:a6:87:b4:60:16:27:74:aa:89:98:a1:9f:0c:
c8:c4:2b:c0:51:15:19:23:d2:fe:9f:12:21:b3:ec:5f:ce:25:
b5:75:92:d8:e0:53:29:2e:ab:29:c9:fc:8e:80:4a:ad:24:35:
ff:11:85:57:13:97:57:56:48:7c:f2:63:de:ec:b3:30:ff:db:
ae:c9:4b:97:a9:62:e1:f4:1a:0a:d3:3e:3f:f6:36:3e:5e:b8:
f3:8b:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:02:48 2026 by rpki-client