Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
File: XstMrbut1QD0nKaX1Waidh4Bdgg.cer (raw, json)
Hash identifier: pJGzEUAzF/tmQ/OIvIkwmYOzof2VV6//m5EH8VuASno=
Subject key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ECF6DD0D4A777EF009EF3976F380E0510
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 16 Jun 2026 07:55:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 80.75.221.0/24
IP: 86.54.172.0/24
IP: 141.193.228.0/24
IP: 170.62.190.0/24
IP: 185.206.253.0/24
IP: 213.254.170.0/24
IP: 2a03:e080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:6d:d0:d4:a7:77:ef:00:9e:f3:97:6f:38:0e:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 07:55:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:73:4a:c0:4d:cc:95:cb:b3:28:51:49:5d:
64:17:27:6d:18:08:ed:b9:f9:68:75:54:06:2b:09:
17:bc:72:73:0a:a1:b8:74:af:ed:d2:66:91:9f:ca:
48:71:b0:53:a8:c4:eb:e5:79:e4:15:c5:b9:f1:4a:
8b:7d:a8:38:8e:55:66:b4:b3:e5:dd:8c:b6:fe:6e:
79:01:4a:b8:f9:f3:85:36:74:94:c8:72:c0:eb:11:
fa:0d:cd:5b:48:70:1b:fb:cf:dc:f8:2a:93:52:43:
dd:76:53:38:38:68:6d:3c:5f:59:4c:64:85:d6:be:
48:47:55:a6:7a:2c:37:e7:38:22:ae:56:e5:ba:90:
07:a6:76:69:6c:f1:1a:83:1f:88:ea:c6:3b:a3:d6:
55:80:ac:2b:71:e8:8c:fc:a6:56:3b:f0:12:69:57:
b5:27:64:c4:28:7b:28:e8:12:64:40:c0:14:41:7d:
00:99:ca:a1:86:23:71:ac:b1:5e:12:b6:60:04:09:
ed:10:2b:a6:8c:2b:52:91:c2:9f:a6:09:33:e3:0f:
bd:cb:e4:a8:cd:aa:65:d3:c8:f6:c0:7d:25:76:15:
b0:5c:1a:8c:89:a4:1b:54:c4:cd:e1:55:eb:4f:3b:
df:36:ff:25:9d:77:78:e7:dd:1b:e2:b6:fb:c4:b1:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
86.54.172.0/24
141.193.228.0/24
170.62.190.0/24
185.206.253.0/24
213.254.170.0/24
IPv6:
2a03:e080::/29
Signature Algorithm: sha256WithRSAEncryption
47:61:18:56:82:34:c9:36:02:9f:e8:dd:39:d8:57:87:f3:e4:
1f:a8:b9:dd:cb:e2:be:cb:9c:2f:ce:3f:7f:da:65:33:e5:57:
df:8f:3d:f1:99:f4:27:e7:8e:77:ee:63:76:96:2c:ff:e3:33:
c6:3e:ee:97:3c:54:7b:c2:70:d8:94:79:c6:86:59:7f:b6:2f:
42:46:14:ce:09:4f:86:ec:59:68:ef:48:bc:c5:44:14:5a:d2:
0f:aa:a7:ea:bb:76:01:d5:32:c5:4c:ae:9d:b2:61:a2:d6:46:
15:b8:d9:27:57:7d:d8:2b:11:c7:29:c4:b6:9f:ba:a3:67:27:
23:4d:4c:f7:63:e6:ea:b4:5a:16:fb:00:3f:06:49:68:65:2f:
e0:76:7b:22:bd:15:ed:8c:ad:d0:73:00:fb:97:3c:f2:1d:d4:
21:29:7a:90:fd:d9:6b:24:df:c6:53:8f:0b:df:3e:eb:8a:d9:
09:0f:cc:af:9d:2c:f5:a0:1d:26:f9:4a:2d:92:30:d4:45:d6:
81:61:8b:29:1c:51:94:07:19:5d:93:7b:52:ef:37:40:22:8c:
bc:cd:cf:53:bb:46:21:eb:43:62:72:1e:e7:ac:c7:24:ca:03:
d1:20:0b:fe:21:32:af:b7:e0:24:2f:a5:8a:d0:06:aa:c6:e8:
04:a9:09:fc
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAZ7PbdDUp3fvAJ7zl284DgUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjE2MDc1NTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWNiNGNhZGJiYWRkNTAwZjQ5Y2E2OTdkNTY2YTI3NjFlMDE3NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI5zSsBNzJXLsyhRSV1kFydtGAjt
uflodVQGKwkXvHJzCqG4dK/t0maRn8pIcbBTqMTr5XnkFcW58UqLfag4jlVmtLPl
3Yy2/m55AUq4+fOFNnSUyHLA6xH6Dc1bSHAb+8/c+CqTUkPddlM4OGhtPF9ZTGSF
1r5IR1Wmeiw35zgirlblupAHpnZpbPEagx+I6sY7o9ZVgKwrceiM/KZWO/ASaVe1
J2TEKHso6BJkQMAUQX0AmcqhhiNxrLFeErZgBAntECumjCtSkcKfpgkz4w+9y+So
zapl08j2wH0ldhWwXBqMiaQbVMTN4VXrTzvfNv8lnXd4590b4rb7xLFcBwIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFF7LTK27rdUA9Jyml9VmonYeAXYIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FjMGUx
M2Q4LWJmZTAtNDIzNS1hZmI0LWQ1M2VkZmJhY2RkMi8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMw
ZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFjZGQyLzAvNUVDQjRDQURCQkFE
RDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAME
AFBL3QMEAFY2rAMEAI3B5AMEAKo+vgMEALnO/QMEANX+qjANBAIAAjAHAwUDKgPg
gDANBgkqhkiG9w0BAQsFAAOCAQEAR2EYVoI0yTYCn+jdOdhXh/PkH6i53cvivsuc
L84/f9plM+VX34898Zn0J+eOd+5jdpYs/+Mzxj7ulzxUe8Jw2JR5xoZZf7YvQkYU
zglPhuxZaO9IvMVEFFrSD6qn6rt2AdUyxUyunbJhotZGFbjZJ1d92CsRxynEtp+6
o2cnI01M92Pm6rRaFvsAPwZJaGUv4HZ7Ir0V7Yyt0HMA+5c88h3UISl6kP3ZayTf
xlOPC98+64rZCQ/Mr50s9aAdJvlKLZIw1EXWgWGLKRxRlAcZXZN7Uu83QCKMvM3P
U7tGIetDYnIe56zHJMoD0SAL/iEyr7fgJC+litAGqsboBKkJ/A==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:29 2026 by rpki-client