Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/EkTDoNBBKujnAR6ftnhqwtu91Aw.cer
File: EkTDoNBBKujnAR6ftnhqwtu91Aw.cer (raw, json)
Hash identifier: 15EeNN+Fy6Pmc76cdqp/l/fmb03xVaF6VeLYAzMc+xE=
Subject key identifier: 12:44:C3:A0:D0:41:2A:E8:E7:01:1E:9F:B6:78:6A:C2:DB:BD:D4:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E6AFDEA56F0DF500F9F1E02F49578893
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/EkTDoNBBKujnAR6ftnhqwtu91Aw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 06:24:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 24906
IP: 193.201.34.0/24
IP: 193.222.131.0/24
IP: 194.50.49.0/24
IP: 2001:67c:700::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:af:de:a5:6f:0d:f5:00:f9:f1:e0:2f:49:57:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 06:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1244c3a0d0412ae8e7011e9fb6786ac2dbbdd40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:57:5d:0a:41:15:2d:17:7a:b8:a8:23:d4:
69:c9:db:0a:ac:31:24:57:85:38:d3:6d:3e:c9:ff:
2c:97:c7:8f:40:20:c5:6a:ee:95:f3:1a:15:23:f2:
c2:b4:16:84:ec:76:2e:94:89:33:c3:e4:b4:ef:3f:
3c:b6:4d:24:5b:4b:7b:76:29:d5:36:4f:e9:53:6b:
19:60:ae:2a:69:51:89:ee:54:46:90:e3:cd:98:f0:
c9:23:58:83:3a:68:5e:40:cc:e5:49:4c:fc:55:8e:
7e:f3:2b:95:e5:f3:13:f1:28:11:14:8f:88:ac:92:
a2:ee:4f:4c:14:88:df:3e:11:fe:f8:73:47:07:1b:
2d:4f:11:1c:83:3a:67:c3:64:c9:6c:34:e2:44:4f:
fe:2d:ed:8a:ae:cc:e6:0c:90:b1:81:e0:c6:24:3d:
3b:ae:f0:a8:b0:ae:58:4c:c4:d5:82:d7:4e:ab:0f:
26:66:21:52:fc:54:ca:10:0b:2f:8a:2e:3a:bf:e6:
7b:ca:f6:a4:b4:2b:03:27:4a:9a:60:8d:e8:10:df:
dc:13:0c:4b:a0:b3:cc:aa:d0:eb:2b:52:6a:29:a2:
87:a3:a3:8d:d3:f8:6f:01:ff:ee:39:ea:05:bd:f0:
c2:15:18:c0:71:0a:d3:35:1b:87:a3:d2:f3:09:2f:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:44:C3:A0:D0:41:2A:E8:E7:01:1E:9F:B6:78:6A:C2:DB:BD:D4:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/EkTDoNBBKujnAR6ftnhqwtu91Aw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.34.0/24
193.222.131.0/24
194.50.49.0/24
IPv6:
2001:67c:700::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24906
Signature Algorithm: sha256WithRSAEncryption
1c:34:94:46:40:f0:ca:75:77:a8:f6:00:86:f5:20:35:e0:28:
17:21:c0:34:9b:6d:6d:94:c0:92:b9:53:cc:6e:96:81:1d:3e:
37:b3:2e:51:62:f5:9b:5a:16:b8:9f:cc:c9:8d:86:68:cb:ab:
1b:88:c5:e2:e2:e5:ef:55:fb:cb:91:0b:ec:a4:49:87:ed:fe:
04:4a:cc:b3:35:13:a1:02:51:c5:36:a6:20:f9:c6:5f:44:6c:
d7:2b:d6:01:ae:ad:12:8f:e7:a0:26:36:44:63:ea:4b:4b:54:
5e:d2:38:ac:0e:c2:9e:35:cc:92:5f:ed:a1:c0:0c:c3:7a:27:
d7:f8:fe:2e:96:06:78:c8:c1:a9:7d:7c:6a:dc:4a:c0:22:7b:
d2:ab:32:a8:d9:d1:e9:b6:26:07:3b:42:93:9e:63:2a:4b:0e:
cd:38:67:a5:17:67:fb:0a:d9:0e:d5:7e:34:d3:b3:92:f0:8b:
a5:80:56:6f:6b:ee:4b:2c:f5:6a:44:c9:a9:1e:3b:9c:e4:dd:
15:a4:b4:d4:dd:31:6d:e4:6c:10:b6:6e:de:2a:ac:a9:94:85:
fe:0b:3f:e5:d6:ae:39:3a:01:57:d9:2d:ae:cf:32:ed:e9:00:
ee:d0:cd:cd:17:23:c5:15:92:c0:ea:35:8a:6d:aa:9f:1c:24:
4f:9f:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:31:07 2026 by rpki-client