Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
File: TddPu7rljdCHbZnoDsgqEaRHf34.cer (raw, json)
Hash identifier: b+Fw3fqUBtsYIOf9S3JVPiLnOGdqTOn1mdVskxu7AKU=
Subject key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA31905797AAD7ECCF4B049269142D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:17:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25124
AS: 43245
IP: 81.91.128.0/20
IP: 91.184.80.0/20
IP: 94.139.176.0/20
IP: 109.162.128.0/17
IP: 213.207.208.0 -- 213.207.255.255
IP: 2a01:3c8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:19:05:79:7a:ad:7e:cc:f4:b0:49:26:91:42:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:17:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:10:a7:b1:fe:f7:8b:1c:58:63:c0:fb:dc:
bd:fd:14:1f:4f:53:53:a1:a3:e0:82:20:a2:b5:39:
7b:b9:f5:d4:ee:6b:56:85:8e:33:ad:ca:47:76:89:
1b:61:33:ee:7d:77:af:41:23:80:2c:62:76:65:a9:
cf:de:a2:45:5c:cf:9f:9d:09:54:99:1f:78:71:e7:
6f:50:c8:dd:8e:1a:68:32:ca:b8:82:28:4e:8b:9c:
26:0d:6d:cc:13:b4:5c:36:00:49:b9:98:6d:e9:b7:
db:2c:7f:0e:7e:5d:a3:22:3a:43:b7:1e:db:19:76:
e0:7c:ee:61:c7:ea:f8:50:11:64:71:ec:5a:99:f0:
62:4b:56:6b:4c:e0:1d:a1:f5:cb:73:e0:d0:0c:18:
38:ae:00:0d:dd:f1:de:e5:26:02:8b:bb:ef:c0:dd:
6b:86:ec:2a:bb:eb:72:d0:c5:b2:0a:f7:73:70:fd:
7f:f7:ea:e5:9d:81:9f:21:c3:8c:4d:d8:d8:de:87:
2c:49:01:a5:d0:69:e3:6d:23:b9:a9:a5:86:61:c8:
b3:6e:29:fd:46:33:ea:f7:b9:02:0b:08:16:2a:bf:
84:d5:3f:b1:0e:10:ac:de:65:91:43:c4:42:07:d5:
43:68:82:2c:6d:5c:4f:b5:62:52:44:10:36:00:c4:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.128.0/20
91.184.80.0/20
94.139.176.0/20
109.162.128.0/17
213.207.208.0-213.207.255.255
IPv6:
2a01:3c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25124
43245
Signature Algorithm: sha256WithRSAEncryption
8a:8d:3a:3f:9c:03:0b:f3:13:46:ba:0e:97:3f:d2:c2:c7:64:
b5:35:0f:cb:55:69:a9:47:9e:bb:1a:27:ac:ef:a1:cf:5f:c7:
9b:14:2d:a8:9e:ed:1f:03:3a:cf:01:c8:95:51:9c:94:d3:af:
2a:ee:99:a0:01:9c:ba:07:59:b5:f2:d3:40:c4:1a:c7:72:0a:
c7:c8:e5:ac:aa:db:20:e8:86:aa:ce:08:fc:03:4b:be:4f:36:
af:2f:8c:bb:da:87:bf:4a:88:5d:e5:c9:ae:be:36:88:75:cc:
02:e7:bc:0a:a2:84:85:9c:48:30:97:0f:b7:78:41:57:63:95:
8c:1a:7d:8f:b4:16:89:7a:a3:b6:f2:93:17:56:23:2d:a5:ce:
10:cc:9b:86:53:be:d5:b1:6b:8c:49:de:8a:01:f2:85:d5:02:
6f:c6:32:4a:df:16:b1:56:65:e6:90:fc:5e:3c:ad:23:81:f8:
fe:89:a1:b5:33:47:0f:07:56:94:fc:ad:ee:75:dc:1c:3e:cb:
22:dc:53:fa:2b:09:c9:92:ac:d4:cc:df:ad:4f:66:94:1e:78:
e7:9d:18:dd:ac:2f:b1:89:33:e5:1b:2b:8d:d8:27:12:5c:94:
d6:d2:a1:8f:a6:36:86:f7:23:d4:cf:75:99:f8:57:a6:d1:ac:
37:41:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:46:49 2026 by rpki-client