Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer (raw, json)
Hash identifier: mPDk6GVJobcWIiyztpD4IFqbsQO2cFPw4JVbZfq9QtI=
Subject key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2EA348C73373C2F67FFA7CCBA8FC465D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Mar 2026 09:32:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 13167
IP: 85.238.128.0/19
IP: 155.250.0.0/16
IP: 2001:4cf8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:a3:48:c7:33:73:c2:f6:7f:fa:7c:cb:a8:fc:46:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 09:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:05:ff:de:4c:62:97:09:a5:cb:83:cd:e4:
f8:31:2e:8b:e0:62:d4:67:6f:c7:f7:e8:d8:d7:e5:
b4:8f:13:19:27:b3:ed:ec:10:2e:1e:52:e2:e1:3b:
b8:ae:d0:1f:08:d1:cd:27:b8:12:02:aa:d7:92:48:
07:7c:39:65:59:34:34:29:eb:6c:e7:87:4c:52:da:
4d:61:18:9e:e9:0b:bd:8c:e8:ee:9c:53:43:64:03:
ca:fb:48:91:8c:f2:54:cd:05:61:6f:17:ae:33:08:
aa:05:af:f7:e5:f4:9f:a8:ba:f6:dc:f9:84:29:31:
16:e2:c7:49:14:8c:4f:3a:1e:42:36:bc:d7:1f:bf:
41:27:f6:bb:5d:24:db:0c:13:f2:d9:de:45:55:ca:
5f:30:08:bd:48:d1:19:97:1e:93:ff:40:37:49:c2:
d9:24:a3:84:5f:b2:96:39:25:ac:72:a9:9a:21:f2:
63:36:54:56:f9:aa:dc:01:70:47:c0:63:a0:a0:a1:
3d:01:b0:7b:c8:f4:91:d7:e9:d6:ac:9b:c6:7a:82:
2f:95:83:b5:b2:69:a6:97:de:fd:77:dc:ac:0e:63:
1c:42:90:43:3b:a6:7d:62:8b:8f:1d:e5:27:26:03:
e6:fc:9a:cd:a9:9e:a7:c1:42:9f:ce:c5:6b:56:93:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.238.128.0/19
155.250.0.0/16
IPv6:
2001:4cf8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13167
Signature Algorithm: sha256WithRSAEncryption
80:c7:04:e7:82:0e:0d:2f:90:7b:7e:9d:61:67:bd:94:91:16:
68:43:d8:ce:31:05:ab:61:67:da:08:89:e0:1f:a9:2a:f9:5b:
fe:81:23:8b:ce:e0:9b:54:19:e8:12:de:16:6b:35:16:9b:54:
b0:3c:1b:d0:4f:de:47:f6:60:c3:b5:00:e6:cf:e4:5a:c4:df:
60:d0:f3:67:a5:7a:84:2e:2f:b1:2e:8b:5b:2e:86:75:42:75:
59:ee:49:48:25:a5:53:7d:2f:95:89:8e:c0:36:f1:c8:f4:33:
3b:f9:39:ba:62:ed:0d:a5:f3:82:2f:9b:b1:9a:a7:f9:a9:89:
31:79:20:10:88:2a:cc:e5:b5:89:59:ee:bf:a4:f7:5d:71:63:
b9:c7:45:71:fb:8b:30:97:8d:b2:9a:38:b0:ab:d4:fb:22:49:
f8:00:d9:83:8e:a5:87:72:ac:a5:b7:09:79:6d:5d:71:80:5e:
51:d6:e8:6d:38:0d:08:49:2a:9b:21:f0:5b:6b:3e:b2:db:60:
b7:c6:0f:69:fe:a6:c3:28:cd:03:74:30:f1:db:06:69:a7:f2:
cf:7d:64:d1:1f:88:5d:55:1c:f4:3c:b2:c5:15:3c:2c:c9:7a:
d0:45:14:35:80:3c:e7:0d:d6:d9:96:07:d3:e0:b6:28:fc:29:
c5:2c:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:15:44 2026 by rpki-client