Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
File: SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer (raw, json)
Hash identifier: yrNNfVWDpR3KFmsdX9O1jwbg6G2k+oq9OE/rgBdQsvM=
Subject key identifier: 4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE2344D0A0238BAE2B2E2111EBC0A26E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Mar 2026 13:20:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 208.122.0.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:34:4d:0a:02:38:ba:e2:b2:e2:11:1e:bc:0a:26:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 12 13:20:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:79:1e:4a:69:79:9c:6b:94:3f:56:1d:6a:
29:f7:f1:79:57:82:4d:0f:7b:46:54:1e:f6:7b:80:
91:66:70:19:c9:d1:4e:99:e4:e1:e1:70:b6:04:27:
09:04:b4:70:a0:c8:a1:b6:0a:b9:61:8c:bf:99:18:
0b:75:d0:21:4d:c8:ca:51:64:f1:d7:7e:2d:27:68:
d5:57:24:52:05:27:35:ba:f0:91:93:d5:17:ab:8e:
15:33:28:eb:96:12:9b:59:80:74:79:40:ec:81:51:
5d:44:53:eb:69:d3:07:94:15:97:0d:30:ed:5b:6f:
7b:b9:fb:ea:36:b8:b5:53:72:a5:79:bf:18:6e:5b:
4e:22:9a:41:ab:c9:af:ec:9e:7d:a4:3e:65:cd:4f:
c8:c4:62:68:a0:ad:76:b3:df:f7:1d:28:cd:39:bb:
a7:3e:1c:9f:b7:84:53:da:f4:7d:31:4e:fa:a8:15:
53:b0:2d:a7:bf:c5:a7:68:8e:93:40:a0:2a:3a:4f:
af:60:8b:74:10:f2:1e:cc:22:d3:90:28:01:74:c6:
7b:f8:66:34:25:99:02:63:14:35:55:d4:62:21:cd:
b8:2d:3d:6d:f8:dd:2f:d2:2c:56:6a:91:3e:68:a1:
5e:6f:b8:28:c9:75:97:77:1a:52:92:7b:d3:b5:31:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.122.0.0/22
Signature Algorithm: sha256WithRSAEncryption
19:78:e5:f1:d6:b8:2e:c5:f8:d5:31:1a:a0:b1:32:aa:a7:79:
60:fc:fe:59:b9:4d:2d:72:7a:03:95:d0:c2:2f:73:ea:e5:9a:
da:19:24:79:84:30:af:8e:d2:00:30:f6:40:b4:61:fb:80:6b:
e7:68:57:c6:dd:ba:e2:e5:2f:09:c0:35:74:43:21:3c:fc:e9:
87:18:93:97:85:e7:ee:78:1f:4e:d0:30:b5:b2:30:2e:8e:e1:
72:b8:ad:fd:2b:31:74:98:19:5d:07:96:b6:94:3d:5b:d3:c6:
e7:31:9b:30:77:ca:70:0f:61:0b:97:95:55:6b:89:24:1d:b4:
cb:78:5c:87:a9:e3:02:8e:38:fa:eb:a2:57:2b:cc:ef:88:e2:
34:61:24:77:38:52:c7:78:fa:56:b6:19:1a:fa:89:b5:77:30:
a4:b4:8c:59:88:a4:9b:fe:c8:63:71:12:3d:f4:67:70:d6:68:
36:5f:42:0d:b7:62:cc:58:dd:a3:2e:ff:ff:3e:c9:14:87:a3:
6e:9f:bb:7f:b7:e4:8d:50:75:a3:f2:2a:e3:ef:02:30:33:4b:
0a:48:2f:19:32:86:a6:57:ea:b3:64:bf:c2:4e:75:94:9d:e5:
08:54:c7:93:9e:1d:15:6d:ab:46:fd:cd:3f:60:bc:66:2e:20:
91:6c:40:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:58:22 2026 by rpki-client