Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
File: Xff7OeIB66Y00CA8TyjeWuB5Wog.cer (raw, json)
Hash identifier: Ay7v4Yc9YhLeH6IMHetUcaR/2pS5JL+fMJN4hGZmQAo=
Subject key identifier: 5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F4B48B4CB2520B691A2C50B2AE609DB61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Jul 2026 09:08:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 109.68.217.0/24
IP: 2a14:f880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:48:b4:cb:25:20:b6:91:a2:c5:0b:2a:e6:09:db:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 10 09:08:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:a5:9d:32:3c:e4:52:23:e6:f5:aa:18:04:
61:48:44:39:8c:cd:d1:19:9b:13:09:7f:40:e6:6d:
93:24:9b:6e:d9:8d:89:b3:be:3f:38:7c:3b:2c:66:
c1:98:48:3b:5f:01:79:00:18:d8:c5:b7:bb:d0:01:
7d:21:dd:6d:76:9f:79:39:59:49:b7:96:81:5a:08:
c8:ff:bc:ac:84:21:17:e9:5d:48:f8:a8:54:9a:bf:
ee:b5:b2:c3:42:26:5c:cd:e7:0f:83:cd:33:4b:2a:
7c:20:8f:6a:b9:96:0a:21:8d:58:b3:ac:0c:97:16:
4b:f6:fa:d0:91:34:4e:09:a5:75:c8:43:cf:fc:48:
9f:e5:5b:93:d0:92:8d:ee:9d:61:22:81:86:49:45:
2d:e0:c1:8b:50:c1:68:dc:1f:41:71:23:ee:ec:d1:
3b:60:d0:e4:99:56:f4:6b:9c:97:67:ab:8c:8d:e4:
48:bb:eb:76:0f:09:53:a5:ac:92:e0:59:cb:4a:92:
5f:5e:1b:e5:e8:3c:3c:5f:99:63:eb:b5:54:68:b3:
46:8d:cf:bd:f8:04:bd:ce:4a:ca:f1:3c:9d:46:50:
0d:91:81:3d:5e:40:c9:37:35:f4:fe:43:f5:92:79:
93:ad:bf:57:a5:98:f8:7b:dd:47:08:76:d0:be:bd:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.217.0/24
IPv6:
2a14:f880::/29
Signature Algorithm: sha256WithRSAEncryption
33:31:04:d9:e7:e2:c3:73:43:3c:b3:15:42:fa:1d:5a:7a:af:
6a:43:95:05:e0:b9:ed:29:9b:5d:34:b6:70:aa:21:f7:8c:ab:
3b:ba:42:92:8e:f0:3e:de:92:9c:de:0b:bf:98:91:15:0c:60:
f5:05:8d:90:e7:8c:0b:b6:18:ac:95:bf:fc:c6:38:90:f7:dc:
d9:ed:7c:d1:6b:dd:e5:de:5b:b5:74:a1:98:a8:f7:98:8e:0b:
79:91:21:76:e2:ea:53:82:4d:06:72:d1:e6:14:bd:cb:a1:6d:
90:2e:2f:4b:00:5e:b9:07:55:11:7f:ac:12:95:20:1f:81:ba:
06:86:65:82:44:0a:44:9a:dd:f6:96:15:ad:8f:3f:24:b2:95:
e4:7f:c8:73:46:07:02:c3:0a:65:fd:91:cd:bf:c8:aa:71:f1:
c9:3f:0c:dc:fa:58:f8:4c:f7:17:3b:44:92:eb:a6:6e:c0:49:
52:32:ed:5d:02:ba:cf:ea:42:d0:4f:9c:db:45:c8:f8:51:0f:
86:a7:c0:e7:e3:7e:65:88:28:f6:07:82:78:66:ac:9d:bd:f3:
6a:75:1e:96:68:8d:a5:58:e0:19:54:b7:2f:df:b7:fe:1d:0e:
31:3e:00:0e:b3:62:c9:d4:e1:86:a6:32:81:09:dd:81:7f:02:
d0:ec:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:44 2026 by rpki-client