Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
File: Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer (raw, json)
Hash identifier: exf9fnDLTYwkN0K5teNHgz6XYlwcharcCW/QPyET/UE=
Subject key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C69749B7A81FE2444ABE924B01DB98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.217.149.0/24
IP: 2a01:f440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:97:49:b7:a8:1f:e2:44:4a:be:92:4b:01:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:a5:27:4d:3e:51:52:5a:1a:4c:8b:34:84:
ac:c6:03:28:74:25:23:b2:16:72:b9:36:72:5f:9d:
d1:b7:18:9d:3c:e3:6e:51:a7:72:c7:3e:ad:e7:25:
aa:29:b7:41:6f:74:fd:e0:23:12:6a:c1:5c:c5:a4:
9d:c0:53:b0:1d:1b:f9:3a:f2:fb:fa:74:59:70:1e:
da:7f:7d:be:37:b2:01:d9:8d:fc:61:75:c9:95:be:
10:3b:68:a2:d5:d2:88:01:69:f3:57:35:fa:9d:a6:
7b:1f:a4:96:65:53:27:20:63:fb:40:35:5a:27:30:
4d:f1:71:81:a7:23:02:d0:9c:fa:80:cf:e3:ab:52:
dd:33:26:0f:ba:c4:32:3b:7a:c8:2c:56:d0:56:52:
c9:4d:65:5c:bd:9c:26:b2:f3:a1:48:66:1b:37:a6:
47:14:42:57:af:7c:0c:d1:6a:7e:48:c8:58:67:e3:
a5:01:4f:7c:68:7b:37:3c:95:1c:3b:ed:1c:bd:28:
a7:1c:d7:0d:45:ff:08:11:ec:e5:d4:ee:fd:87:f1:
7c:20:dd:95:95:fe:9d:ad:ac:48:d1:d3:4f:e7:99:
86:43:2d:66:da:36:63:c4:c5:e0:09:29:d5:49:89:
bf:dc:74:6d:cc:0d:86:fa:4d:23:fc:e0:0f:09:87:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.149.0/24
IPv6:
2a01:f440::/29
Signature Algorithm: sha256WithRSAEncryption
9c:fa:8b:37:4b:8a:31:6b:81:b0:32:a9:04:cb:b5:fc:93:d4:
68:15:ba:fb:2e:b8:1b:41:cf:92:0a:18:0d:5c:cd:39:29:4e:
bc:51:16:51:e3:20:4f:d7:f8:1a:d6:f9:a2:79:33:9d:4b:02:
37:63:db:62:a7:1c:6a:2c:15:29:de:50:13:60:81:ca:cc:3a:
c8:dd:0f:9d:19:ab:59:30:89:6d:99:6c:b8:62:2b:88:6c:a6:
2c:94:8e:2d:e4:d2:65:66:3c:54:51:9b:a4:51:78:0e:b0:b5:
56:bb:b7:84:74:ac:74:a1:6d:03:55:93:ce:06:26:cb:40:cd:
93:e4:32:d0:a8:d6:76:15:ea:0d:53:af:86:7e:20:ab:3e:9e:
27:a9:26:5d:61:89:d7:9a:91:08:9e:4d:73:50:af:4a:7e:a4:
80:37:d9:46:a6:47:5c:44:f4:fd:7e:c6:ba:8f:d8:05:d6:e3:
b4:15:fb:c2:1b:80:e7:14:ca:c4:74:35:df:17:02:ad:57:a0:
2c:48:b5:92:61:16:03:40:52:58:34:45:6a:01:6f:6f:db:68:
aa:28:db:5c:1d:ee:7a:86:0a:c2:88:03:07:cb:c9:63:5c:01:
fb:3a:91:62:68:5f:1f:b6:02:08:6c:85:37:9f:78:6d:e6:4b:
a6:4c:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 05:54:43 2026 by rpki-client