Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
File: c9VcG36S5oU5lP21dg9o3N_aay4.cer (raw, json)
Hash identifier: Ic4ZpICQ/JixnFVzkl9Y1BymcxJEMZMehs1LyEKrNxo=
Subject key identifier: 73:D5:5C:1B:7E:92:E6:85:39:94:FD:B5:76:0F:68:DC:DF:DA:6B:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A080D6BB63035C51CB669475333691B5B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Sep 2026 11:45:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 149.170.176.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:d6:bb:63:03:5c:51:cb:66:94:75:33:36:91:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 11:45:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73d55c1b7e92e6853994fdb5760f68dcdfda6b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:e9:04:7c:3d:7c:39:dc:0e:03:15:82:a2:
86:38:d1:6c:38:7e:9f:36:32:dc:49:ef:31:a7:34:
6c:aa:4f:ed:69:7e:5c:7a:e6:2b:4f:e1:e5:55:04:
74:94:39:28:67:12:f4:37:aa:9a:d1:2a:af:36:d5:
13:fd:e2:ca:5c:2d:98:67:2f:c8:37:d2:1c:74:ae:
f8:99:8c:2c:f6:b2:7b:07:12:07:21:35:7b:29:b1:
bb:6c:76:05:e3:6d:a6:40:d4:7e:69:3b:e4:ad:0b:
51:e8:fb:7f:cf:2d:12:4d:6a:bc:16:9d:68:7b:c6:
28:a6:72:5a:eb:0b:af:18:e0:59:1b:fd:ca:4d:15:
63:73:89:27:73:d6:87:7d:0a:c3:07:8f:bb:28:45:
25:46:ec:ed:70:b8:3c:c0:ae:a9:2a:78:15:9f:6c:
39:2c:3e:5b:78:f1:0a:c5:79:1a:4a:41:61:18:37:
7b:39:a0:ff:d8:fd:b5:b6:b0:d6:1f:e3:ee:65:d0:
16:45:c9:23:6b:78:ad:99:db:a6:84:30:0f:39:be:
46:02:27:d4:40:a0:af:d8:6d:89:19:00:e6:07:57:
5d:8c:9c:23:68:2a:b0:48:cc:5e:07:ac:22:c8:87:
de:7f:b7:1e:98:73:a2:a2:a6:22:f8:9b:fa:71:37:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:5C:1B:7E:92:E6:85:39:94:FD:B5:76:0F:68:DC:DF:DA:6B:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.170.176.0/21
Signature Algorithm: sha256WithRSAEncryption
81:6f:85:4d:2a:7f:b4:d6:a1:53:4c:ac:9f:39:13:be:56:27:
16:98:89:a6:56:55:6f:26:f8:ff:fe:f1:b3:8b:67:5e:18:e2:
e0:b1:c6:87:2b:99:e6:cd:b4:39:79:c7:1d:f8:4c:04:b7:9f:
df:98:57:84:64:3f:f3:da:9e:87:79:0a:30:93:57:65:9e:bb:
cb:35:f6:79:0a:de:92:af:6e:41:3d:7a:1b:f2:52:48:c0:62:
5f:fd:06:e7:24:b1:00:63:ff:9e:d1:a2:a9:cb:48:92:68:44:
53:a1:2c:c7:6d:0d:db:03:fb:b0:27:d3:50:82:b4:c6:2b:e2:
95:2c:bd:a5:36:68:52:a7:25:31:b5:7a:72:4e:4f:75:3d:16:
56:1b:c2:77:1f:e4:f3:a0:5c:9e:c4:c6:e2:db:c6:56:38:35:
2b:d4:e7:6f:e9:9c:7e:2d:1a:63:76:40:98:ec:a2:b3:7f:b8:
3d:7f:3f:2d:92:3f:25:0d:c3:d9:47:0f:2d:ab:06:e9:9d:ab:
fc:91:3d:c0:10:d5:d9:4b:97:76:98:84:69:f5:69:d8:23:44:
43:2f:79:69:ae:fb:89:88:0f:f1:05:84:8f:aa:ea:c4:76:29:
a8:8a:03:5e:f8:bf:13:d9:37:07:15:83:20:fb:29:f6:a6:70:
af:c3:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:25 2026 by rpki-client