Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.cer (raw, json)
Hash identifier: q3NntxzqtuZbmZIjr20s0KWcLziLSHOGX/Bgkyo7kzY=
Subject key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EF3CAF3D2F019E8DA8E538C5D69D296E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Jun 2026 09:23:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a13:a600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 08:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:ca:f3:d2:f0:19:e8:da:8e:53:8c:5d:69:d2:96:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 23 09:23:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:6e:f0:c3:ae:17:33:f6:e0:20:a1:36:ed:
47:06:5a:7f:b5:48:e0:5e:e4:b7:21:68:6f:8a:92:
ba:3c:a9:f2:c2:fe:37:a3:be:bf:50:3e:26:15:3a:
e0:5a:b0:64:fa:8c:52:38:32:ed:2d:ad:20:81:69:
f7:78:32:29:90:fd:3a:94:34:9f:7c:03:1f:29:e1:
d7:11:f7:ca:fa:cb:9b:d6:2c:c0:02:cc:39:84:79:
25:94:5e:1b:41:1b:22:45:dc:01:fa:5e:ab:6d:65:
0a:70:5d:63:f2:2e:9a:94:bf:cb:32:cf:c9:97:0f:
fa:33:dc:ec:bf:69:90:27:45:90:e4:59:21:16:54:
5c:7a:e1:95:8e:fb:6e:09:93:2c:ee:f5:2b:d6:60:
6e:9b:4d:61:2d:57:2f:da:2d:56:3b:1d:8b:9c:0a:
c2:45:da:f8:9f:0a:e2:db:c7:bf:85:56:6f:01:4f:
fa:7f:3e:68:d1:20:cd:57:fe:b8:01:4b:a6:d6:8f:
4a:83:22:61:39:4a:aa:41:1e:b8:98:39:af:fd:a6:
dc:2e:44:cf:a6:b8:66:13:f4:24:e7:8a:9b:c7:07:
ca:ac:b5:55:af:41:58:54:2c:e6:df:d4:7d:74:81:
5a:6f:2a:db:ae:11:b6:9e:da:ef:a6:5a:b1:24:c1:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a600::/29
Signature Algorithm: sha256WithRSAEncryption
65:d5:6c:f8:99:26:dc:c1:a0:ba:c8:61:c5:95:f2:93:87:7b:
71:12:a9:8c:49:10:e4:74:8f:eb:91:e9:07:d2:69:e3:6a:7f:
5e:78:47:31:d3:af:f8:49:5c:0f:39:34:2e:0b:93:ab:34:09:
91:d3:64:9c:36:ac:0c:83:23:51:44:84:22:7c:12:9c:82:d1:
9c:cd:b2:40:eb:4f:1b:6b:53:a7:5f:d7:28:35:12:78:c9:68:
cd:aa:ef:54:0e:d9:b5:58:09:de:40:7f:84:70:8d:07:ae:cb:
6e:03:02:05:4e:13:7f:44:12:7b:63:85:ea:a0:42:3e:2c:33:
a8:b9:29:93:d8:e1:14:66:9c:f3:a3:55:66:63:9e:1a:4e:3b:
52:7e:d0:e0:fc:e6:a1:c2:ac:c9:fd:29:64:b8:fe:41:bd:1c:
1b:3d:34:11:2f:d0:5f:1a:8c:21:99:83:5f:83:1e:00:e4:c4:
28:16:89:10:a3:39:1f:0a:38:16:2c:d2:31:5b:5f:04:34:25:
1e:6f:ed:bf:08:46:e5:c8:6b:36:e2:27:24:8d:40:c4:5d:31:
7a:bc:84:66:c8:74:af:1f:63:73:2b:61:3e:f0:68:d8:d9:f8:
7c:cc:9a:2b:cd:41:bc:12:a6:0f:9b:3e:26:8e:0f:c4:9c:b8:
bf:9c:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 15:31:55 2026 by rpki-client