Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.cer (raw, json)
Hash identifier: s837sRSHPADtD7mjrkCwABvEBZBOa58k8Qq3k7V1qB0=
Subject key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7759666AE788D5A4246DF9B408EFBE6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.186.236.0/22
IP: 194.49.62.0/23
IP: 194.55.134.0/23
IP: 194.76.209.0/24
IP: 194.99.34.0/24
IP: 2a03:7d00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:66:6a:e7:88:d5:a4:24:6d:f9:b4:08:ef:be:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=208b221700b281f823e322a32221a867e5b079a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:98:44:20:15:8c:ae:41:f9:ad:64:b1:ee:
dc:78:d8:04:e1:b2:df:9f:37:07:ee:dc:71:e1:ed:
82:60:b8:d9:ff:1f:99:a3:c2:52:6b:32:7c:19:f3:
df:c8:c0:10:d6:69:60:e9:69:bc:e0:42:19:e1:56:
8d:41:85:5c:09:c1:92:33:af:13:fc:76:38:d6:38:
fd:00:9d:e4:70:58:7b:0e:aa:af:fd:f5:81:4e:bf:
cc:4c:10:a0:40:06:96:14:83:df:2d:a0:31:58:36:
0c:f1:b1:d4:ea:d7:69:20:73:39:75:39:22:46:07:
22:34:88:c2:f8:9a:5a:13:53:79:40:70:94:c0:a6:
37:01:9e:09:68:89:e2:4e:a3:aa:dc:1d:0d:73:17:
66:07:cd:5b:d8:58:94:f0:24:57:dc:61:a5:18:68:
1e:6f:bb:7f:94:cb:12:b0:58:4a:51:e0:67:92:06:
04:ba:be:15:4f:20:59:86:0d:38:29:23:03:54:b1:
c3:76:6e:81:b3:37:d7:60:aa:a4:bc:e2:2a:ea:d9:
c8:da:f4:1a:0e:21:a4:de:2c:75:ed:6c:6b:fd:01:
5e:bd:61:62:80:38:65:e6:2f:f6:43:7a:96:10:45:
df:98:d2:92:9c:57:17:aa:7b:9b:62:b3:da:e6:e7:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.236.0/22
194.49.62.0/23
194.55.134.0/23
194.76.209.0/24
194.99.34.0/24
IPv6:
2a03:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
a0:f9:0f:38:ab:7e:6d:73:84:d0:8e:e7:97:ce:de:0f:c7:13:
0c:42:a3:a8:72:72:03:87:6c:fc:b0:69:0a:ee:23:9a:4f:91:
fc:ef:a2:98:54:fd:76:cb:8e:26:e8:47:15:0e:00:82:07:9b:
3d:b0:1b:48:f0:98:cc:d6:9e:4e:e6:bd:42:34:fe:7b:d0:47:
ca:55:ca:28:0d:5f:fb:19:f7:23:32:d0:e3:2d:56:e1:1e:1c:
7c:3a:a7:b8:cd:81:97:ae:33:eb:c0:29:bf:d2:fe:7b:73:5c:
ef:ac:0b:59:67:42:f3:d5:bf:2c:55:eb:08:00:61:3a:cb:d5:
d7:8d:01:8f:14:53:3a:03:3d:c1:e3:6a:42:32:78:34:ba:f1:
bb:b6:4a:00:25:c6:05:6d:e3:a1:ce:5d:c2:41:89:c8:20:e7:
51:d2:af:cf:ff:d9:23:93:75:25:a8:8e:70:4f:b9:e4:09:ee:
dd:7c:cd:68:41:c4:98:94:77:ad:ac:e8:78:b6:6f:fd:12:63:
2e:18:32:f9:9e:45:47:92:b6:5d:e2:a0:88:e3:b7:22:7e:54:
aa:a6:25:da:88:61:b8:e8:e4:b6:83:38:8e:9b:31:b8:f9:c6:
bb:87:95:7e:2d:d6:b5:e2:ba:a6:9a:03:6f:77:46:9d:d6:8a:
00:0d:86:3e
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAZt3WWZq54jVpCRt+bQI775qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDhiMjIxNzAwYjI4MWY4MjNlMzIyYTMyMjIxYTg2N2U1YjA3OWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ+YRCAVjK5B+a1kse7ceNgE4bLf
nzcH7txx4e2CYLjZ/x+Zo8JSazJ8GfPfyMAQ1mlg6Wm84EIZ4VaNQYVcCcGSM68T
/HY41jj9AJ3kcFh7Dqqv/fWBTr/MTBCgQAaWFIPfLaAxWDYM8bHU6tdpIHM5dTki
RgciNIjC+JpaE1N5QHCUwKY3AZ4JaIniTqOq3B0NcxdmB81b2FiU8CRX3GGlGGge
b7t/lMsSsFhKUeBnkgYEur4VTyBZhg04KSMDVLHDdm6BszfXYKqkvOIq6tnI2vQa
DiGk3ix17Wxr/QFevWFigDhl5i/2Q3qWEEXfmNKSnFcXqnubYrPa5ueR5wIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFCCLIhcAsoH4I+MioyIhqGflsHmmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzQ4MDM1
NS1kZDZlLTQwZWMtYmNmNi05YjJhOWY0NmE0ODMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNDgwMzU1
LWRkNmUtNDBlYy1iY2Y2LTliMmE5ZjQ2YTQ4My8xL0lJc2lGd0N5Z2ZnajR5S2pJ
aUdvWi1Xd2VhWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQCubrsAwQBwjE+AwQBwjeGAwQAwkzRAwQAwmMi
MA0EAgACMAcDBQAqA30AMA0GCSqGSIb3DQEBCwUAA4IBAQCg+Q84q35tc4TQjueX
zt4PxxMMQqOocnIDh2z8sGkK7iOaT5H876KYVP12y44m6EcVDgCCB5s9sBtI8JjM
1p5O5r1CNP570EfKVcooDV/7GfcjMtDjLVbhHhx8Oqe4zYGXrjPrwCm/0v57c1zv
rAtZZ0Lz1b8sVesIAGE6y9XXjQGPFFM6Az3B42pCMng0uvG7tkoAJcYFbeOhzl3C
QYnIIOdR0q/P/9kjk3UlqI5wT7nkCe7dfM1oQcSYlHetrOh4tm/9EmMuGDL5nkVH
krZd4qCI47ciflSqpiXaiGG46OS2gziOmzG4+ca7h5V+Lda14rqmmgNvd0ad1ooA
DYY+
-----END CERTIFICATE-----
Generated at Thu Mar 5 15:51:17 2026 by rpki-client