Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
File: I2nPaT78ECyTf6ynugnMyuxXSUg.cer (raw, json)
Hash identifier: PAd/sxxA1Y4cq9ye3PFGy1Hl/BV8XkIwNTNARVrN3U0=
Subject key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11F7758325EC3F85642D8134386B2A7DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 Oct 2026 07:01:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 80.46.192.0/19
IP: 2a0d:36c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:77:58:32:5e:c3:f8:56:42:d8:13:43:86:b2:a7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 07:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2369cf693efc102c937faca7ba09cccaec574948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:df:56:2a:7b:8e:6d:bb:67:22:9e:6b:96:
4c:eb:e2:97:4f:78:e3:b0:9b:4a:d2:02:63:8f:54:
8a:4c:de:05:65:18:be:25:81:c1:53:0d:fb:a1:ba:
c9:94:59:3e:6f:36:6e:9e:3d:f8:09:43:f4:99:33:
1c:4f:1b:c0:69:c8:80:42:d3:d0:fd:e6:49:7a:31:
f7:d8:4b:e2:b1:fd:f7:74:9d:d3:48:17:36:ce:66:
da:46:cc:2c:92:04:24:c6:e6:a1:5f:58:74:9e:19:
45:09:6b:05:57:8c:e8:ba:22:32:7b:2a:ad:80:0a:
f0:1b:18:6f:c4:43:58:81:0b:80:e0:0c:61:a0:c8:
bc:5a:a6:af:1b:3e:0a:ef:03:58:04:fe:8c:56:b6:
9e:b8:51:4a:ee:12:e4:56:e9:04:b8:1c:49:bb:56:
f7:f2:d6:1c:7c:4a:63:6d:4f:c9:a2:74:36:c1:3c:
b6:a7:54:81:00:ca:20:98:d2:9b:6c:42:d9:75:72:
5f:3c:07:16:82:cf:65:9e:d1:e9:ec:ca:ea:b5:5d:
4b:16:6f:e2:a8:8d:ee:b5:8c:19:aa:2a:b2:0c:26:
f7:91:3f:9a:3f:82:9a:c3:7a:a5:68:78:73:22:2b:
b9:1c:82:61:7e:7f:3a:ed:2f:d1:8c:6e:64:b0:5c:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.46.192.0/19
IPv6:
2a0d:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:50:3f:8b:a2:c3:0d:7d:78:b8:73:d8:8c:5f:0c:35:2e:bc:
ec:65:5c:f0:54:2f:51:a5:09:cb:2e:75:f4:58:e5:ef:16:a5:
67:67:f4:7b:5f:75:a2:cc:4a:75:f7:47:b6:bf:82:fd:3e:2d:
94:2a:80:b3:d4:32:0c:fc:f7:3a:c9:21:a1:ab:d8:cc:9e:1e:
80:29:bc:88:c4:65:95:10:4d:77:3c:ee:de:7e:34:86:db:47:
ec:8e:7b:73:d0:df:32:b8:bc:be:c7:84:9a:09:b9:04:7c:12:
76:69:34:63:9c:07:2f:e1:9c:30:47:aa:a9:e9:ed:a7:0c:1f:
34:87:a1:8d:71:b4:6d:d2:63:81:ec:fd:59:28:4c:45:94:cc:
cd:b1:f7:04:16:42:7a:ed:39:ca:69:59:7d:b8:3c:af:fc:30:
82:b1:d8:73:df:da:50:f5:ce:43:f9:59:24:ae:ef:b4:50:a1:
af:5c:2a:40:8b:ec:2a:3a:27:42:64:a1:bb:46:e2:36:66:94:
b3:b7:eb:ff:ad:1f:5f:3f:e6:ce:91:ed:d0:9a:d8:1d:d0:d1:
9d:21:ac:8f:ee:c0:cb:cb:02:5d:75:bd:c6:a3:9d:78:ae:68:
12:86:f0:ec:0d:5c:5b:09:1c:07:92:63:fe:84:cb:1c:a9:95:
0d:4f:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:09 2026 by rpki-client