Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer
File: tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer (raw, json)
Hash identifier: 88KwwgCzYIMQjKdwwvsUs1kXwaj13h4+EZjHCWTKCRo=
Subject key identifier: B4:4D:5D:7A:74:63:96:F2:4C:FD:8D:20:0B:FD:59:0F:D0:88:EC:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9FAEECB7148FCCE9903F7F4EAC79F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35535
IP: 80.241.112.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:fa:ee:cb:71:48:fc:ce:99:03:f7:f4:ea:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b44d5d7a746396f24cfd8d200bfd590fd088eca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:7f:97:7f:39:b1:d3:5d:a7:6a:ee:ec:c3:
7f:c8:83:0c:65:d8:89:e1:cc:df:c2:6f:c5:4a:a9:
41:98:51:4c:b2:88:9c:ff:58:43:6f:48:b6:46:66:
92:ed:e1:d1:0a:cf:32:89:82:17:94:15:8b:e0:6b:
1c:7a:f5:9a:46:14:33:2d:d0:45:2f:e9:57:b6:98:
77:11:a1:2c:1b:7a:67:09:68:93:b6:8d:92:14:3a:
55:42:49:72:2d:e7:0e:76:18:fd:6b:3f:3f:b9:e4:
ef:b1:78:e6:6a:64:bf:df:90:58:b3:76:61:46:25:
40:49:4a:2f:f0:a1:03:10:fa:69:f5:34:76:a0:8d:
25:d0:6a:d4:1d:d1:db:12:2f:69:65:15:cc:22:ce:
1a:6c:90:5f:ea:48:1d:ed:05:7b:9c:dc:e6:7e:39:
2f:fd:be:e2:4b:07:24:6c:aa:7d:4e:03:bd:58:5c:
bc:56:63:66:28:cc:15:84:1e:2e:0a:68:5b:0b:28:
41:82:96:86:1d:15:8d:44:0f:d2:f9:dd:7c:de:f2:
63:08:08:14:59:d6:78:67:df:72:74:a2:ce:bd:98:
44:ab:42:c6:94:26:d1:53:21:59:9a:6f:ec:a1:f6:
35:96:3f:9f:a6:7f:dd:ac:40:7d:95:c3:47:c8:74:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:5D:7A:74:63:96:F2:4C:FD:8D:20:0B:FD:59:0F:D0:88:EC:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.112.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35535
Signature Algorithm: sha256WithRSAEncryption
6d:7e:28:ff:11:05:df:89:f8:4f:d4:e2:2e:b0:af:0e:b5:7b:
90:ae:63:b1:f6:9d:fe:e9:56:17:f2:67:89:19:04:1d:eb:69:
46:36:70:0f:2a:ec:d1:c5:7d:52:e6:11:19:12:43:f9:f8:71:
bc:50:4c:9e:f4:df:d1:75:31:13:70:d6:df:7d:c2:bf:79:e0:
52:0f:17:24:bf:7b:1a:c0:23:1c:49:d3:6e:d7:62:8f:2d:09:
d0:31:96:65:f1:51:05:7e:a2:63:73:c6:58:14:f4:11:96:b0:
55:95:45:81:fc:bf:2b:24:65:b3:ca:b7:a5:45:66:19:ca:59:
4b:56:b1:0f:13:1f:69:d5:f4:63:f7:ec:55:a7:18:b6:6d:00:
27:d3:fd:44:47:08:d7:62:96:42:84:26:7a:4e:3c:e2:95:c0:
60:37:db:82:ee:ce:06:01:32:69:84:10:96:74:66:ea:d0:b9:
39:0a:39:b1:27:aa:4c:ab:31:43:93:5b:5d:02:de:d0:99:ca:
3f:9f:d8:94:4e:db:ca:c1:89:06:d7:0d:81:ad:5f:a3:c1:48:
6e:57:b3:e6:2e:e5:3e:b3:61:19:bd:4f:89:7a:f8:d3:92:8d:
fb:31:ec:80:4c:0c:b0:11:0d:81:4e:2d:cf:c4:37:ef:34:7a:
3a:1a:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:42 2026 by rpki-client