
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer
File: EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer (raw, json)
Hash identifier: yrDTIPv/XPh+pnaXNFwgH0eRFmRHOAsR7/qcGjw7Xb0=
Subject key identifier: 12:26:02:3D:E7:C4:27:41:59:0F:2C:97:14:06:70:91:58:52:36:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F3644A77196B04F7767B852F0DAD04214
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 06 Jul 2026 07:11:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.53.37.0/24
IP: 193.58.92.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:44:a7:71:96:b0:4f:77:67:b8:52:f0:da:d0:42:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 07:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1226023de7c42741590f2c97140670915852366e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:30:dd:a1:99:5f:48:15:29:3a:36:84:df:
39:58:0f:b6:4a:65:f9:3d:82:58:1d:99:85:c6:d6:
5a:54:75:4d:fd:c8:ef:44:df:1a:4c:de:4d:39:ee:
19:1f:5a:c6:47:c9:fa:8e:47:50:ac:6e:e4:ef:79:
c6:ef:3c:a7:22:47:77:8c:01:dd:42:64:45:ba:76:
87:b6:7d:66:99:2c:94:0d:8b:29:04:01:dd:23:d0:
bc:96:7e:9f:ee:2d:bd:73:d1:ed:04:77:d5:7d:f1:
95:d6:8c:65:2e:8c:80:02:38:91:75:37:54:f8:a0:
26:4b:2f:88:92:bd:51:a8:c8:bd:aa:e0:60:a1:15:
93:d9:c8:10:57:46:38:8d:5e:71:f5:d5:76:27:0a:
b6:51:11:43:18:0a:0e:80:95:e1:2c:e9:fe:82:92:
86:56:a1:0a:0a:ca:15:0c:64:9a:5c:2f:ba:68:cc:
2f:9a:26:75:40:e5:0f:09:a2:3b:2d:26:bf:1a:c5:
23:c5:fa:60:1f:d8:af:2b:51:3b:ef:6b:28:93:30:
9f:b7:a7:58:a3:a1:b9:00:f0:19:03:0c:15:df:d1:
32:7f:70:cc:8d:fa:33:3c:38:a7:00:8e:46:76:51:
5c:d2:ce:7a:3a:cd:bc:f8:69:b9:51:3c:6f:81:c1:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:26:02:3D:E7:C4:27:41:59:0F:2C:97:14:06:70:91:58:52:36:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.37.0/24
193.58.92.0/22
Signature Algorithm: sha256WithRSAEncryption
96:b4:47:ca:fb:d6:0e:5c:dd:4a:8d:d7:a6:88:f6:bc:e5:1a:
17:af:4f:93:a2:02:ec:d2:1a:da:58:12:bf:59:e6:fd:68:91:
c4:77:22:51:2b:10:ea:59:f8:3c:eb:d1:36:72:e9:df:ad:7a:
95:3e:ef:fb:f9:6e:db:63:06:01:01:44:7e:bb:98:35:df:0e:
aa:98:7f:cd:20:c4:8f:aa:ec:75:8f:86:6b:4c:5e:59:24:6a:
91:77:8d:11:b9:34:1a:d4:93:c5:b3:f0:9a:87:dc:48:85:6f:
f2:1e:5c:bd:38:ad:5c:3e:42:f5:f0:4a:89:2f:ce:c0:6f:e6:
f2:ce:b6:6c:6e:91:9e:77:3e:6c:53:48:92:95:04:f9:72:2a:
74:72:f7:0c:07:1f:95:96:f1:ea:f0:0b:76:ec:a0:e5:68:7b:
d3:f1:a2:f6:1f:9f:e4:1e:b2:1e:77:2e:5b:0e:ba:7d:d5:93:
19:62:d9:61:c6:36:d1:66:34:a0:d8:ae:03:20:07:4f:b1:d4:
f8:c2:3a:c9:80:19:e0:4c:a0:55:34:e1:63:35:64:92:e1:f3:
31:69:ee:8b:5a:aa:69:6f:e4:75:ef:b6:2e:fe:cb:0a:18:99:
4f:24:87:45:4d:83:39:c5:df:f9:4a:af:16:bf:4f:89:33:3a:
0a:7f:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:16:53 2026 by rpki-client