Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/G4d3_pjm49xetAMT0Hg_C1StKb0.cer
File: G4d3_pjm49xetAMT0Hg_C1StKb0.cer (raw, json)
Hash identifier: TnrBgmW3hmo9PukEfwD67MaSJga9Lta6KY+L5NLwonM=
Subject key identifier: 1B:87:77:FE:98:E6:E3:DC:5E:B4:03:13:D0:78:3F:0B:54:AD:29:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0F71407C7673BEAB5B84F6D797AEF5A69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/G4d3_pjm49xetAMT0Hg_C1StKb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Oct 2026 10:48:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a07:5f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:14:07:c7:67:3b:ea:b5:b8:4f:6d:79:7a:ef:5a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 1 10:48:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b8777fe98e6e3dc5eb40313d0783f0b54ad29bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:ce:0c:9e:55:43:66:fc:47:84:bc:c8:f0:
5d:4d:eb:84:fe:60:a2:d5:2c:c7:16:41:df:c2:a2:
7d:f6:3a:af:5b:e1:d1:41:ff:a9:c9:c9:07:c6:06:
3e:8b:7e:3a:0d:4b:3d:be:59:44:87:1a:85:f7:e2:
12:8a:d7:76:fa:da:c1:a1:0d:d8:01:57:5e:76:f5:
5d:33:f2:90:f8:52:f8:e0:da:2b:30:28:f2:2e:86:
3d:68:2c:b2:13:25:1f:f0:62:45:45:99:01:07:c7:
49:2f:ea:99:df:ce:84:43:88:99:64:99:8e:d1:3f:
d4:2e:34:a7:65:88:2f:62:de:a9:a5:a3:4a:a3:2b:
60:09:9e:a7:e9:57:82:a8:51:c7:0c:2d:ed:6b:23:
53:8b:7e:a5:33:e4:82:db:60:53:c2:fe:c4:7d:a8:
91:b2:6e:19:03:9b:18:b4:54:d1:df:62:e8:2d:9d:
dd:45:9c:c8:f5:eb:6a:71:06:05:42:f6:e4:f7:bc:
dd:1e:30:3d:99:97:b3:4e:58:d8:ea:95:f1:fc:e8:
04:5c:4e:61:1b:59:b3:fb:7f:c0:ca:6c:90:f2:4c:
0d:13:f9:81:f4:ee:7e:39:cc:36:e2:e2:68:33:6f:
62:d3:bf:4f:a0:80:51:80:f0:26:f4:b4:97:2d:e3:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:87:77:FE:98:E6:E3:DC:5E:B4:03:13:D0:78:3F:0B:54:AD:29:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/df8d21-3ed4-43b1-9e5f-e7fe8c47e108/1/G4d3_pjm49xetAMT0Hg_C1StKb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
50:8f:a9:32:25:c4:d7:8d:74:3d:51:19:a6:6e:c1:82:c3:eb:
cf:fe:2b:1e:d8:31:b9:45:50:f1:4d:f1:12:ab:6f:98:8f:e2:
9e:47:1f:d5:ec:93:ed:c1:f5:ab:f5:50:65:84:45:e3:a1:ed:
1d:07:81:db:33:78:3f:fc:b9:47:0c:ba:4a:42:69:a0:e8:bf:
47:7a:5b:ac:b2:43:e5:5d:21:87:a7:0e:51:17:55:fc:ef:65:
05:05:da:23:1f:59:58:cb:97:fc:d7:e8:9c:d7:59:ef:49:d1:
c9:f8:1c:6d:62:4f:cc:0e:da:b9:0e:56:ff:03:f1:86:69:58:
09:28:c1:4a:3b:73:24:c6:1b:44:a3:b1:37:14:08:e9:42:d0:
35:64:26:8f:3e:6b:c8:13:9c:83:93:bc:ec:f4:e6:e0:f1:bd:
23:d1:4c:90:f1:cf:1d:84:8a:b9:1b:62:29:32:e8:8d:7b:bd:
17:11:d7:e8:30:17:a2:74:d1:1b:d9:4a:28:87:4d:09:ba:5b:
26:e8:a7:59:34:64:0d:43:c5:7e:55:1e:e2:f6:57:35:0c:3a:
a7:e3:bb:6f:31:2b:f5:ab:0a:06:90:35:b6:24:79:fd:66:59:
91:21:77:6e:3f:be:1a:25:c0:b4:73:23:6e:8a:b9:f6:c5:66:
83:57:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 19:05:17 2026 by rpki-client