Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
File: iMzUohaNl27yVSiXv8cZINYzvFU.cer (raw, json)
Hash identifier: iKbD7l6krf6tp7qJ060fpfNRPGwb+AWRmOO/Osn5ZEo=
Subject key identifier: 88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FF5A539A201F611157CF59987BADE6A5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Aug 2026 11:04:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.175.4.0/22
IP: 2a0b:c500::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:a5:39:a2:01:f6:11:15:7c:f5:99:87:ba:de:6a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 11:04:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:9b:47:b1:ac:8d:51:18:0d:bf:b2:f7:e9:
5f:27:e7:9f:8e:86:1b:15:1f:e2:1b:94:ed:ca:6a:
b1:57:91:60:64:40:99:f4:28:0e:a2:3c:96:ec:ab:
87:84:a1:02:e1:72:4c:db:79:ed:2a:c0:c6:2c:ed:
0e:a7:cb:e0:d0:30:6c:84:a7:d7:50:71:7f:b2:e7:
4e:5e:a7:08:8d:82:98:76:e8:0f:91:7b:20:15:28:
2d:2d:dc:9c:9d:73:67:a3:0b:21:7d:d1:55:a3:68:
4c:65:11:1a:d5:b2:fa:ce:47:89:30:ca:8d:fe:5f:
e4:ef:52:fd:b9:31:59:b9:89:9a:88:7a:6e:bd:1b:
a2:dc:a6:09:9b:62:25:36:5a:42:8e:14:be:f9:ff:
35:9c:9f:a8:26:e5:5e:06:f8:9c:b2:ed:4b:0d:33:
60:6a:a8:fe:74:b9:84:d5:f1:fb:f9:4d:b6:ee:0a:
df:2f:54:35:47:23:4d:bd:db:ec:19:95:84:8f:d2:
c1:3a:d0:ce:fd:5e:b9:49:4c:c9:68:89:d6:77:6b:
a7:08:69:c0:66:5d:81:60:1e:e7:09:05:0d:35:21:
0f:62:0f:cd:b4:72:14:2b:a6:3d:4e:94:d8:a7:48:
c4:35:6c:b2:35:f4:9c:c5:b6:f6:91:28:76:b3:14:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.4.0/22
IPv6:
2a0b:c500::/32
Signature Algorithm: sha256WithRSAEncryption
9d:49:d0:60:a3:10:70:fe:f0:41:0f:61:42:7d:80:27:87:06:
7c:38:b7:cc:b9:98:b4:d8:cb:24:a3:a1:04:86:40:46:f6:dd:
6d:58:37:3a:5a:3c:7d:90:77:7e:67:d1:4d:c1:db:04:0f:35:
80:36:1b:ef:cd:cc:55:47:73:d4:13:95:6f:b0:23:50:81:8f:
b8:cf:40:2d:f4:91:55:11:01:62:0f:17:c0:10:28:c2:af:8b:
fb:71:e8:e2:e7:cc:19:a6:05:da:e7:09:d5:fa:25:a0:8a:b0:
ad:91:a0:01:2f:8b:e0:a5:36:90:a7:00:1c:9f:56:0b:aa:18:
ff:96:3e:f2:cb:b0:b5:b9:e7:74:b1:9e:f7:a9:54:6d:26:74:
29:83:5a:39:1c:62:12:50:69:03:de:51:22:0d:c3:ee:31:6b:
e5:27:93:a4:fe:d0:86:72:3a:b6:0f:c1:0d:81:5a:03:5c:30:
3c:52:3d:4c:22:7a:4a:15:bd:43:22:0c:18:6c:55:fa:9b:33:
3b:2e:e6:a9:03:9e:ed:92:03:22:95:5e:5c:3e:3b:3b:21:37:
7c:7b:e7:cd:b3:05:81:54:f8:e0:88:78:b3:81:ad:cd:bd:5a:
08:d9:45:67:a0:94:52:72:ed:7a:45:28:85:5a:d9:45:ea:b4:
b8:0b:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 02:01:28 2026 by rpki-client