Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
File: c18B8zOIfOznDMXnKS8nA96mVWA.cer (raw, json)
Hash identifier: y4ASqiCWMzwbQtSxMjM+nb9hNjL21CnqxT9/akKiF0A=
Subject key identifier: 73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA0BFED7AC8B4433477E847584263A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60609
IP: 185.37.212.0/22
IP: 185.77.156.0/22
IP: 185.86.8.0/22
IP: 185.158.168.0/22
IP: 2a04:7280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:0b:fe:d7:ac:8b:44:33:47:7e:84:75:84:26:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=735f01f333887cece70cc5e7292f2703dea65560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:8b:7b:f0:81:38:3a:6a:3c:db:cf:dc:22:
a9:a6:a7:17:33:50:32:97:36:b6:8d:a4:b7:b3:bf:
c5:00:fb:19:e4:53:e9:b2:f3:5c:79:da:6d:70:12:
2b:5c:8d:ff:7c:c0:7c:11:15:ec:ff:ad:6e:9c:5c:
b9:ba:9a:1b:41:16:af:00:46:d6:21:f0:c2:d3:d8:
3c:5a:0b:86:57:74:91:ea:ac:3a:2d:4b:8e:7c:44:
f8:ae:69:49:8e:f2:19:64:8f:6d:0c:e3:43:e0:0e:
30:97:f5:65:65:24:41:18:12:35:1c:db:c6:da:04:
1f:45:4b:8c:7a:bb:b0:7a:ee:80:11:04:4a:af:b4:
6a:b5:13:21:d3:a1:9d:2a:37:4b:42:66:87:a6:af:
f9:2f:ed:ac:0a:2e:16:7d:a1:92:ce:33:3a:5d:c8:
07:ea:f3:a4:14:7f:3e:52:51:50:55:40:7d:13:f0:
64:f4:b5:38:86:d9:3b:52:ab:b0:ec:c6:52:c2:04:
40:b5:3a:a4:90:b6:8c:33:29:8e:4f:32:7e:91:3a:
b7:a7:91:d1:4c:58:2e:f8:80:53:26:ff:05:84:8f:
4d:46:59:a2:00:c2:9c:18:ad:01:e6:36:eb:47:6d:
fb:e2:76:56:20:32:a5:84:05:48:e9:4f:58:87:ef:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.212.0/22
185.77.156.0/22
185.86.8.0/22
185.158.168.0/22
IPv6:
2a04:7280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60609
Signature Algorithm: sha256WithRSAEncryption
62:89:c3:41:11:df:15:cd:a3:ec:03:60:7c:f2:4d:95:8b:b2:
3f:e0:76:fa:2c:18:12:17:89:7c:75:be:51:a2:09:8d:2b:d3:
3b:c5:26:8a:9f:11:b0:70:76:c6:05:a0:36:e5:50:a1:77:db:
4e:57:82:1e:c3:d1:27:15:d0:ff:ba:4f:8f:5f:cb:dd:17:83:
5d:18:20:5d:75:f8:af:25:aa:57:6f:ca:8e:45:f7:74:18:cd:
03:5f:50:ab:4e:ac:f4:b3:90:08:4c:e6:49:c2:6f:66:26:b3:
8e:9d:3e:15:5c:b2:b9:73:b6:e1:1b:53:36:e1:78:f6:12:38:
8c:77:f9:b2:4e:e7:ec:4f:f5:d9:3d:88:0e:a5:af:0d:68:52:
f3:85:50:64:2f:b4:70:18:41:af:ce:b7:57:4c:36:8b:92:29:
87:e9:51:86:64:a9:6a:76:e6:d0:a3:46:75:a6:cb:b8:9e:71:
25:44:84:02:93:52:23:d8:17:d8:dc:6c:09:1f:b0:c8:68:21:
3d:73:99:4b:f1:d6:2c:54:b4:3a:6d:a0:f8:e5:b6:0b:ea:26:
44:7c:f9:9d:fa:56:9b:3c:86:37:04:fc:12:1f:f3:db:dd:f2:
91:02:81:f8:26:61:dc:06:db:ed:0a:9f:c9:7d:b4:6c:bb:23:
a4:94:42:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:52:40 2026 by rpki-client