Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
File: E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer (raw, json)
Hash identifier: qc2g+DdBxdceRbeJoPRoTPcr4m38v0ssG7K3yTsb6WI=
Subject key identifier: 13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9E23F6BACB19707BE9C6C32BFE986
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 129.104.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:e2:3f:6b:ac:b1:97:07:be:9c:6c:32:bf:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:7e:c8:24:e1:76:05:83:04:87:e7:fa:0d:
93:aa:ea:68:06:f7:03:26:88:f2:d9:34:61:d7:ed:
69:2f:eb:56:e4:ab:b0:55:3c:2b:18:05:85:30:0f:
77:21:e7:d4:22:61:31:36:ad:da:77:e2:02:aa:22:
01:9b:48:91:27:a7:2a:2f:b4:05:4e:d6:cd:3b:30:
83:b9:22:23:07:14:38:09:f1:3c:6b:43:d4:b0:cd:
59:24:ef:10:ad:d9:3f:cc:9a:dd:a3:59:c1:db:70:
d4:ee:b3:4f:80:9c:a5:6e:52:4f:c5:46:ed:de:6f:
e9:af:0e:89:23:ac:40:02:d6:2f:6e:e4:a0:7e:ed:
ba:ee:82:1d:13:27:8d:22:c7:80:a3:6e:f8:c6:10:
31:b7:6b:c5:5d:b1:e1:97:3a:2a:24:81:a9:23:07:
a5:76:10:c8:88:07:5d:9c:3c:a3:96:01:f9:a2:ce:
4d:32:b7:81:8c:e5:3f:cf:e5:8a:d2:df:b5:f9:d1:
00:2e:eb:d6:3b:d8:29:15:30:ee:ff:bc:56:c7:7f:
45:48:89:36:ce:d7:6a:91:cc:5c:f8:58:e8:bd:0b:
90:24:d7:63:f5:10:bc:e8:52:f3:df:c7:fa:27:f2:
53:59:e8:ef:6a:26:6f:9d:86:62:a5:8d:7d:69:cc:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:ea:e5:44:1d:bc:30:d0:33:3c:ea:9c:de:11:54:e6:85:a7:
02:66:54:18:d9:da:e2:f7:2c:7f:67:72:e6:44:2f:41:44:3b:
11:9c:4f:43:60:7e:88:d8:70:a6:4f:dc:68:30:d3:47:75:c0:
68:6d:f6:a0:1c:34:d5:4b:21:b3:31:2e:ed:6b:1a:d8:4a:0a:
17:35:1e:e8:2c:6d:c8:0d:c7:e3:17:4a:37:6c:ba:76:b3:a2:
76:30:bb:13:b1:4a:c8:3c:77:0f:cb:53:50:77:bd:b1:88:e9:
14:09:de:1a:5b:71:ca:c8:f2:65:59:3c:e1:4b:71:8e:7f:81:
af:8e:e6:1d:34:6a:4e:43:00:07:da:24:5c:78:c2:d4:18:8a:
84:27:e1:9d:89:54:34:f3:a4:e5:f7:15:14:87:c0:16:41:fc:
00:6e:54:3a:57:5f:fc:10:2a:d6:64:6b:9d:4b:02:c1:b6:71:
7a:be:63:ef:03:ca:d4:d9:ac:41:78:29:88:99:c9:50:57:42:
33:8d:30:09:2c:10:b5:5b:5d:dc:db:70:3f:64:0f:7c:0f:2f:
ea:0e:34:dc:b2:b8:fd:1d:55:12:ca:88:6a:4b:3d:6f:57:05:
54:7b:18:31:a4:ad:75:ae:38:dd:ed:85:23:8d:a5:98:75:44:
24:9d:4d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:14 2026 by rpki-client