Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
File: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer (raw, json)
Hash identifier: FzYGAgN89Rh7PGfyuAPFwW4nPfrFORQLozHO8/EAA+k=
Subject key identifier: 3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE653707566024C063F326CEF477019A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Mar 2026 08:32:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.211.76.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:53:70:75:66:02:4c:06:3f:32:6c:ef:47:70:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 08:32:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:5b:2c:a0:68:4a:01:fe:b8:1e:bf:62:2e:
e5:81:d1:5e:5a:35:42:ca:77:74:f0:fb:29:35:2a:
25:b0:43:1d:3d:7a:74:49:a0:07:5a:65:a3:55:ac:
dc:9c:f1:51:e1:eb:1c:46:39:99:6d:6d:eb:94:9b:
69:ee:5b:e2:9e:8f:7f:a3:cf:c2:c8:1d:fb:40:37:
f8:1f:da:98:e5:0c:6b:0e:e6:43:9f:68:1c:37:08:
41:e5:02:b6:a6:a2:ea:bc:c9:bb:1d:55:6a:6c:c2:
63:aa:b9:ab:ba:7c:4c:ad:03:d1:9a:93:51:75:e3:
d5:30:77:bc:2c:1b:74:21:c1:27:99:84:7c:ab:e4:
81:b5:3d:e0:6d:a5:7f:03:72:ba:3d:12:5e:38:f7:
f1:38:84:b9:03:15:1d:fe:82:4b:cb:fd:95:34:8c:
70:e3:12:02:c5:2a:76:35:42:a4:aa:64:f6:c4:2d:
df:17:11:63:b0:7e:57:09:96:ff:d4:f7:0a:aa:0d:
10:dd:d8:02:4c:c3:e8:95:a4:7c:56:71:76:f7:85:
dc:aa:2d:46:42:53:4f:45:79:eb:93:02:05:08:ff:
29:00:14:16:0d:1c:04:b0:6e:19:de:56:e3:b3:29:
ba:78:9e:b9:0a:cc:ab:4a:d7:da:97:d1:f4:68:c9:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.76.0/24
Signature Algorithm: sha256WithRSAEncryption
06:09:00:10:9d:d0:ea:f5:bf:67:8f:13:16:66:87:dd:3e:74:
a1:05:3c:9d:ec:77:7c:3a:23:b2:c4:d5:5c:27:9b:69:3b:ad:
da:72:36:5d:b5:6d:ae:2f:71:1c:72:c0:44:57:11:79:69:6f:
4b:a4:5b:c2:ef:6b:94:13:63:b9:7a:83:2a:0c:5e:9c:e8:65:
b8:5b:22:34:c1:f5:b3:4c:ba:0a:88:37:8e:bc:1b:97:6b:dc:
50:bd:b8:12:2d:76:b0:0e:01:ea:00:6d:ab:6e:c3:ff:b9:6b:
7c:81:51:06:51:b3:95:87:98:1e:7b:37:c9:75:1e:34:57:44:
b1:df:e9:f0:63:21:03:df:14:f6:c2:2c:5b:4f:41:00:f1:49:
3a:ab:eb:e9:76:45:45:65:78:3d:ec:0c:80:6e:65:2c:be:f3:
9f:f8:ef:bb:7f:48:13:11:29:8b:9c:32:70:41:95:4e:4a:9a:
bc:10:f2:f7:44:f8:f4:b9:e6:7c:da:68:3d:4f:d7:74:b7:88:
f8:6f:35:09:45:4f:cb:62:5b:4f:0e:d7:c4:d1:f7:02:7f:68:
7c:6a:5e:38:d1:45:8e:81:cd:2a:8b:45:e1:3f:15:aa:75:4e:
f4:84:63:ea:b1:e7:89:17:74:9e:15:e6:20:01:df:24:a2:b3:
d5:a6:ec:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 16:21:18 2026 by rpki-client