Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
File: tGZGB9tMTT48FWLyjSDPuSMkGBA.cer (raw, json)
Hash identifier: O6Gy+6+OjI3Etn4SPov63yLqCOAGuw+TfNhU9+BO55s=
Subject key identifier: B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ED02B8D0E444F4DB99E51C9DD27B4BA7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jun 2026 11:22:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.56.84.0/22
IP: 2a05:5540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:2b:8d:0e:44:4f:4d:b9:9e:51:c9:dd:27:b4:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 11:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:91:38:f0:9c:bc:93:20:db:c2:2c:53:b7:
9f:98:95:1a:76:d3:61:b3:2a:44:d7:26:9f:39:49:
6c:e4:85:0a:be:98:65:d9:90:64:2e:06:f8:35:2f:
8b:66:a3:26:0d:1e:cf:08:30:d3:77:e3:d7:6f:cc:
b0:78:80:e6:5f:99:d2:98:ad:9c:8e:49:ee:8d:28:
71:e8:95:49:95:7d:2a:fb:4c:c0:96:46:df:13:5c:
e4:be:2c:26:0f:87:70:ea:87:2e:07:a0:c3:4c:15:
a2:47:03:29:0b:7f:d6:24:a7:fc:9a:db:99:ed:9d:
25:73:6a:a5:32:ca:60:ef:fe:ca:9c:ca:91:a2:7c:
a7:b5:4d:be:7e:c5:bb:a8:66:b5:4f:80:e6:f2:17:
3b:48:84:43:da:d2:c1:32:4f:b0:97:da:ee:7e:bc:
f4:43:0c:a6:aa:29:b8:61:65:16:0e:da:95:73:8e:
57:85:70:e3:f0:8b:97:cc:d3:9c:b8:bb:ea:01:78:
a8:36:4e:4a:76:f1:aa:a0:8d:75:01:c2:ba:18:29:
b6:36:f1:ec:95:1d:ab:07:bb:39:76:db:47:77:f4:
79:b2:2f:5c:df:39:c8:9a:1c:72:c6:c3:40:7b:44:
1c:96:23:bb:b2:b2:ea:e6:0a:b7:56:3a:3c:42:24:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.84.0/22
IPv6:
2a05:5540::/29
Signature Algorithm: sha256WithRSAEncryption
51:80:6f:66:9d:20:b0:cd:ba:ac:be:e3:bd:fe:39:d9:d6:d9:
f0:80:24:0d:ad:dd:c6:71:57:fd:13:4e:cd:63:85:fa:97:f9:
39:c1:5c:fa:b2:49:77:9a:21:46:66:36:38:c9:58:79:4e:42:
92:37:98:33:06:f3:c4:03:da:53:03:e9:f9:8a:96:bf:1b:8e:
eb:f2:b4:85:35:d8:09:85:3e:37:1b:2a:e3:39:de:e1:05:bb:
a2:1b:52:79:87:c5:4d:3f:cb:f7:68:ff:c9:e5:25:b4:aa:49:
74:17:8a:42:fa:18:90:1e:3e:0b:d0:3b:51:cc:43:04:1b:08:
18:06:e7:a8:73:df:1d:30:98:9e:3c:64:86:22:8e:d5:ef:52:
e9:e7:7c:c1:7e:97:ad:25:c0:e4:aa:bc:71:15:3e:11:ed:92:
3f:da:9c:42:c3:5c:7c:7e:76:09:71:0f:c9:98:5e:00:68:16:
11:47:f0:d5:bb:59:93:e6:96:36:70:56:af:ca:77:24:8e:c9:
05:df:1e:74:1a:ec:4a:62:a2:2d:12:2e:99:01:92:ca:4f:78:
53:0e:0a:00:f5:94:2c:53:d8:3a:1a:0d:5a:0f:87:91:c3:49:
af:5f:13:81:f7:c4:06:13:76:98:18:47:48:dc:79:86:5e:e9:
c1:d7:d0:c0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZ7QK40ORE9NuZ5Ryd0ntLp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjE2MTEyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDY2NDYwN2RiNGM0ZDNlM2MxNTYyZjI4ZDIwY2ZiOTIzMjQxODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8uROPCcvJMg28IsU7efmJUadtNh
sypE1yafOUls5IUKvphl2ZBkLgb4NS+LZqMmDR7PCDDTd+PXb8yweIDmX5nSmK2c
jknujShx6JVJlX0q+0zAlkbfE1zkviwmD4dw6ocuB6DDTBWiRwMpC3/WJKf8mtuZ
7Z0lc2qlMspg7/7KnMqRonyntU2+fsW7qGa1T4Dm8hc7SIRD2tLBMk+wl9rufrz0
Qwymqim4YWUWDtqVc45XhXDj8IuXzNOcuLvqAXioNk5KdvGqoI11AcK6GCm2NvHs
lR2rB7s5dttHd/R5si9c3znImhxyxsNAe0QcliO7srLq5gq3Vjo8QiSpUQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLRmRgfbTE0+PBVi8o0gz7kjJBgQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzMzNjA4
NC1kMmNmLTQzNDYtYTcyMC1jNDIzNjQ2NWExMGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvMzM2MDg0
LWQyY2YtNDM0Ni1hNzIwLWM0MjM2NDY1YTEwYi8xL3RHWkdCOXRNVFQ0OEZXTHlq
U0RQdVNNa0dCQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwjhUMA0EAgACMAcDBQMqBVVAMA0GCSqGSIb3
DQEBCwUAA4IBAQBRgG9mnSCwzbqsvuO9/jnZ1tnwgCQNrd3GcVf9E07NY4X6l/k5
wVz6skl3miFGZjY4yVh5TkKSN5gzBvPEA9pTA+n5ipa/G47r8rSFNdgJhT43Gyrj
Od7hBbuiG1J5h8VNP8v3aP/J5SW0qkl0F4pC+hiQHj4L0DtRzEMEGwgYBueoc98d
MJiePGSGIo7V71Lp53zBfpetJcDkqrxxFT4R7ZI/2pxCw1x8fnYJcQ/JmF4AaBYR
R/DVu1mT5pY2cFavynckjskF3x50GuxKYqItEi6ZAZLKT3hTDgoA9ZQsU9g6Gg1a
D4eRw0mvXxOB98QGE3aYGEdI3HmGXunB19DA
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:37:14 2026 by rpki-client