Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer (raw, json)
Hash identifier: 3WCXyoupgQKvIxRPZVF1Q/SpHMjusDT90lg4Ys/A2U0=
Subject key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DFCC68CD9CB3F6076B7ADCD78C4821A79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 May 2026 10:12:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.214.76.0/22
IP: 217.18.50.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:c6:8c:d9:cb:3f:60:76:b7:ad:cd:78:c4:82:1a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 10:12:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:0c:57:80:c6:48:73:75:e2:95:4e:92:4a:
98:df:4c:80:09:46:54:04:ab:9c:70:9a:16:8b:b1:
ae:11:61:87:96:8b:22:91:bc:d1:c0:57:a8:58:28:
e7:bc:b6:8b:44:0f:d8:1d:e5:14:55:d6:eb:a6:78:
0f:dd:cb:c2:f8:68:f5:f3:da:6b:dd:14:70:21:80:
66:7c:c7:68:81:a5:20:ed:04:b4:ff:d7:42:69:42:
75:56:30:8a:aa:cf:3d:d9:b8:9b:9e:ed:f2:60:f3:
91:52:57:57:14:d1:c9:01:3e:7e:0d:53:fb:fe:b1:
d6:2a:cd:21:8c:8e:97:fa:85:68:4b:f5:97:43:c8:
86:1f:71:bb:39:1e:14:23:04:59:8c:72:aa:c9:e6:
ef:66:3b:0e:20:c0:67:60:d8:58:82:46:16:7e:15:
d4:1e:e0:d7:63:e0:82:e0:81:ed:10:9b:e6:b4:07:
af:17:c6:a3:df:6a:65:9e:86:fd:68:f3:44:dc:d7:
80:60:1d:f2:0f:0f:97:55:f2:a3:26:b0:b8:18:12:
a5:24:30:28:ac:9f:2a:61:fe:bf:55:d5:f4:1d:9a:
7d:cf:2b:38:87:9d:f5:a4:a8:e6:82:88:1d:ab:82:
af:c2:16:72:0d:f3:d5:96:61:5c:6d:56:7f:8f:35:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.76.0/22
217.18.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:af:a6:41:a0:f0:1a:4a:6d:f5:e3:ea:cc:fd:80:27:c2:cb:
c0:5f:13:6c:39:8e:bf:da:18:db:91:2b:e0:f2:52:d6:f0:7e:
73:6f:48:21:94:5c:a9:cc:b3:1d:79:bf:a9:a1:2d:b9:f9:80:
d0:ca:17:43:31:53:89:c5:bc:62:02:96:d2:11:a0:ce:62:85:
46:25:95:fa:95:28:cb:2e:2e:07:32:a6:4e:81:1d:23:bf:fc:
0d:c1:ce:8a:ef:f1:c5:2a:ec:b2:e8:2f:78:cc:34:b4:07:52:
ba:e9:c3:ef:b6:e8:38:61:72:ff:49:bb:07:da:cb:77:78:87:
1b:63:ea:01:83:ea:b6:7e:85:a8:a4:c3:6a:08:49:7a:7b:d3:
21:81:ff:fc:ae:93:0f:16:14:c1:99:a8:0c:16:ee:6c:c9:07:
30:e1:f2:d1:39:12:4f:1b:38:61:78:04:5e:f5:f5:73:1a:fb:
a1:50:9d:f6:24:4a:04:43:28:7e:2b:0d:a2:a9:7c:7e:04:5f:
f9:eb:e7:ac:b2:5b:76:56:a4:69:07:d2:f5:fd:10:12:a5:c5:
c8:9a:83:8a:a5:91:01:b5:ac:2b:bf:5c:3d:62:8a:9a:57:fd:
42:f3:58:23:8e:0d:64:14:d2:18:32:4a:be:08:b5:3d:c7:45:
14:86:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:01:39 2026 by rpki-client