Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.cer (raw, json)
Hash identifier: kh8/39AeWpAL/hWC+fsotfk6Z2hD6eTwFx7MX9XxkOc=
Subject key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79111ECC018E37D2BE6BFD82B880004A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 93.174.16.0/21
IP: 185.131.4.0/22
IP: 2a04:a2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:1e:cc:01:8e:37:d2:be:6b:fd:82:b8:80:00:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:bd:a7:81:04:e8:54:85:86:1d:a5:d0:ad:
f4:15:f0:3e:3f:67:0c:ae:aa:39:38:38:79:da:05:
cd:e0:da:83:df:d8:6c:d2:49:00:69:7a:82:85:32:
78:d7:74:4d:1a:f1:8c:46:d0:ed:ee:a0:e4:84:cd:
25:ca:1a:7a:c4:ce:d8:de:f5:d5:05:f7:0d:ac:01:
60:cf:b4:1c:3b:13:a8:6b:63:c5:b8:8b:e8:df:7b:
8f:91:7d:ea:bf:09:16:29:a8:c8:9f:97:1d:9a:03:
74:a9:56:bf:4c:b0:a7:ed:aa:8d:30:eb:ff:ae:50:
6e:d1:e8:7f:21:d7:f1:48:4b:8c:17:79:24:4e:a1:
8d:5f:ce:55:ef:84:ed:92:b9:60:fa:ff:5f:64:d9:
f9:ef:2c:ec:92:61:64:26:5c:58:58:00:bb:94:78:
ef:2c:cf:8a:12:2f:12:c0:1e:f4:85:f0:fb:10:d7:
80:c1:f8:eb:f4:0b:23:2e:e2:58:88:82:1b:4d:10:
f5:be:bc:79:3e:00:21:e8:d1:31:dd:c7:5c:e9:c7:
67:0c:5b:92:29:fd:2d:01:64:31:7d:3a:7b:c5:e3:
19:6a:bd:e2:32:c5:a7:90:61:ca:e1:bd:43:f4:dc:
3f:f0:10:f4:35:7e:34:ab:53:03:23:a3:06:a0:d5:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.16.0/21
185.131.4.0/22
IPv6:
2a04:a2c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:d1:a5:6b:56:bd:c7:67:72:24:5d:b6:11:b1:54:ef:a1:1c:
c2:4b:b8:a9:70:b0:e8:31:50:b7:5e:ff:29:b4:0a:f3:ce:0d:
72:7e:85:cf:92:9e:45:10:dd:7d:da:d5:2d:ed:5c:03:88:ea:
78:a5:25:de:93:dd:47:1a:f9:d3:e3:ae:d8:8f:9f:c0:bc:06:
37:bd:00:6e:b0:c1:0f:3e:9b:5e:28:1a:b8:d8:d8:ec:ee:54:
51:19:50:7b:ad:19:6e:3d:77:35:95:5b:5d:60:f5:8e:50:34:
94:36:0a:c3:6d:32:bb:60:ac:be:d5:5e:a4:90:af:59:e5:6d:
ac:7d:7e:cc:8a:f7:da:99:88:16:ce:b8:1b:a9:1c:4b:d4:4b:
32:c9:fd:97:ad:56:ec:84:a6:2f:b4:36:b9:c7:75:8f:7f:50:
32:2c:3f:27:e8:ff:d7:28:f5:8e:14:1f:cb:71:08:8d:b4:b4:
36:aa:b3:69:c1:62:22:a0:c2:8f:06:31:2d:1e:6a:db:d9:e4:
94:73:76:13:ed:a3:64:17:54:d8:e0:5e:bc:f6:84:92:ba:01:
f2:ee:78:5e:96:00:87:0f:14:f7:1f:10:95:e8:ca:90:da:e4:
cd:be:0d:f2:45:1b:42:57:17:62:7f:38:f0:2b:64:27:60:9b:
52:85:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:05 2026 by rpki-client