Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
File: TWJ6NJyeo81uXc2grNej_IQ-xzs.cer (raw, json)
Hash identifier: VTuztTnMMZIVmdmTnL2HfZ8n3tLC2rRPPHysFSF6e5Y=
Subject key identifier: 4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E73F05110F348C336903735060F5903AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 29 May 2026 13:33:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 89.200.220.0/22
IP: 2a0c:f4c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:f0:51:10:f3:48:c3:36:90:37:35:06:0f:59:03:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 13:33:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d627a349c9ea3cd6e5dcda0acd7a3fc843ec73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:06:60:5d:37:88:f3:d9:ed:7c:6e:c7:c6:
53:24:fb:2a:1a:c0:f4:41:e0:1c:61:5e:5c:c3:04:
82:7b:72:c5:3c:20:a9:cf:91:5b:ab:63:78:71:b6:
12:5e:82:e0:0c:a6:f2:3f:1d:e6:0d:e5:39:59:a1:
a7:f3:fa:d8:d5:c6:3b:cd:77:f8:57:fa:f1:f2:08:
55:7a:9c:56:d1:a7:63:67:d1:fa:b7:5d:70:ba:18:
05:9b:6d:8d:dc:7d:eb:e7:1e:2e:64:ab:82:f7:a5:
e2:7a:12:4b:fb:1d:ac:0b:a6:46:09:c6:87:2f:2a:
93:e9:e3:66:c0:41:73:62:20:cf:97:40:df:55:f3:
2e:d2:46:aa:60:41:13:c0:ba:32:61:a8:31:6e:85:
f0:00:c1:96:6e:5c:09:06:f3:a1:c8:9d:bf:58:5e:
db:49:40:7b:cc:2b:12:31:a2:cf:e2:77:52:f8:35:
63:26:76:ba:34:1b:9a:be:91:dc:37:c3:90:f6:d3:
a4:ec:f6:71:39:6d:75:83:14:12:91:c3:bb:7f:f2:
cd:85:33:eb:d1:9c:c5:49:e1:a1:11:bb:d4:d3:29:
e5:e2:21:3d:b0:bb:b9:9a:35:4b:0e:0c:77:3e:b1:
07:7a:75:81:da:6e:20:7a:ef:14:1c:2f:96:fd:e8:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.200.220.0/22
IPv6:
2a0c:f4c0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:9f:03:f3:e0:c8:fe:9f:f3:e6:b0:8b:de:99:c4:f5:ef:85:
fa:83:ad:6c:9c:3e:64:24:40:b0:35:c1:1c:12:e0:b9:fa:c2:
fe:c0:7b:47:ef:34:ed:08:a6:63:1b:75:d4:8a:5f:13:de:e5:
ea:32:a9:37:30:be:a6:dc:a0:82:fa:09:19:1e:a5:93:65:b3:
39:fe:21:ed:f4:51:27:0d:1c:eb:71:a8:52:89:3d:2c:1e:2a:
40:5e:8e:02:32:7d:e4:a8:91:a9:bd:db:e4:26:58:0a:cc:ce:
f9:a9:4e:49:1a:8b:46:47:98:6e:11:d4:13:9e:29:03:05:27:
77:b4:c1:ff:82:ab:d4:79:2a:2c:a5:ba:f9:8c:83:9f:bf:a1:
a4:c5:d0:48:90:89:5c:38:e1:0a:5f:7e:6f:45:8a:07:9b:b0:
c7:b6:20:ec:9e:f9:3e:84:67:ac:dc:07:e6:f6:fc:48:2f:25:
ab:1d:47:c6:d1:db:c3:46:1d:31:49:32:5e:98:7d:8e:84:10:
40:65:2b:c2:d2:c4:15:15:3e:cd:cb:ef:ca:df:26:05:78:3f:
1a:c8:60:63:e6:a9:fb:eb:e7:ea:09:61:fb:a8:d4:f4:f5:66:
aa:e2:1a:89:6c:d1:b2:5b:dc:1a:24:51:0a:b2:69:ad:b5:f9:
d8:fb:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:28:35 2026 by rpki-client