Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer
File: jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer (raw, json)
Hash identifier: NaDfrSF9TKTSoZL0rbuE+a42hW/NBx5h/OIK0zhzsgU=
Subject key identifier: 8D:45:45:67:BC:45:8C:46:D9:94:9A:6C:10:E6:DA:15:8A:A7:A5:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAC6A232F806075A1112D60044C9C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.76.14.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:c6:a2:32:f8:06:07:5a:11:12:d6:00:44:c9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d454567bc458c46d9949a6c10e6da158aa7a5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:be:6b:e4:e8:df:22:25:a5:ad:be:97:e1:
09:e2:ed:9d:f6:a5:c3:11:74:5a:0b:10:32:88:1d:
74:96:6d:8d:4a:52:5c:60:c4:fe:38:13:e4:73:04:
88:a5:ee:28:42:88:dc:1b:7b:e2:42:ed:88:cf:d7:
58:f4:42:4b:1b:fc:91:8a:7e:c0:f1:7a:e0:ca:e4:
01:49:0e:0c:a3:c6:93:b4:ae:02:5e:59:81:3a:76:
3b:50:5c:b2:e0:92:cb:0b:6b:7f:1f:19:4a:85:85:
3d:08:f6:0f:c6:72:a8:54:65:50:c5:ce:a4:8d:ff:
94:f0:05:1a:99:e5:a9:cc:d5:90:61:23:d2:c9:c7:
db:a1:92:db:30:79:3c:67:59:d7:15:8c:c0:21:23:
7e:ea:8a:ae:e6:3c:b7:1b:76:a1:58:17:98:4e:1e:
07:4c:a9:ac:e0:58:bf:36:39:13:1b:8c:aa:e2:31:
3f:02:0a:96:08:fe:9f:a2:6f:60:14:b7:6a:e6:e1:
72:48:06:bc:1c:26:0a:e2:ff:c1:5e:8c:1a:a1:23:
f1:d2:7f:97:0b:92:dc:1f:77:a8:60:53:f9:e6:55:
53:58:78:e7:92:de:fe:e5:f6:05:33:44:67:a2:89:
d8:ce:e7:5f:cf:38:f4:47:56:0d:fa:1c:f5:ab:66:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:45:45:67:BC:45:8C:46:D9:94:9A:6C:10:E6:DA:15:8A:A7:A5:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:06:6d:4c:21:5c:47:a9:e9:f5:9f:ef:c3:f5:d4:1c:9c:42:
9e:6b:b3:b1:63:cf:ff:ab:94:90:09:ea:89:a5:9f:38:4e:78:
92:f7:ed:ee:d6:08:73:46:56:c2:ea:40:83:e5:0f:e9:b9:7c:
2e:4e:a7:f8:89:14:f9:19:9a:ac:36:2d:59:18:e8:aa:84:f1:
0c:49:06:86:3b:c1:c5:cc:9c:43:10:6b:72:b8:a5:98:92:4b:
32:68:26:b4:3b:8f:18:5d:f0:16:cc:86:a4:e0:68:3b:8e:7b:
3e:4b:c4:26:db:73:d3:05:42:a1:d3:90:b5:ae:b1:dc:db:3e:
51:48:29:c0:26:1a:32:d0:e8:a0:98:78:08:c4:2d:51:47:da:
8f:15:37:67:5f:95:29:23:15:ba:e1:c9:6d:c6:08:21:1f:c6:
27:f2:b3:52:91:69:3b:2d:11:09:ab:4a:70:8d:0c:48:4e:83:
87:f2:19:e0:b0:7e:23:15:b6:08:17:0c:55:49:97:8e:b3:a2:
27:98:7e:c2:8d:b2:59:42:6a:87:ae:09:55:22:18:eb:d7:9f:
b7:99:8d:5f:d5:70:cd:2f:9a:9c:93:6e:28:98:1d:6a:0f:3a:
0d:8e:0d:cd:7c:0a:13:a6:74:8c:d6:b5:5f:13:fb:95:ff:7e:
48:d7:3c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:45 2026 by rpki-client