Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
File: 2TwNCKbGLnc4LoBBfocgmABMpOw.cer (raw, json)
Hash identifier: Agrhp4yIxWl2KfxixIU60QSfBL/pjFIfiNcu/mWydDc=
Subject key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EB096C5022FCF75B391C94938F5C78FAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 08:12:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.83.68.0/22
IP: 192.145.108.0 -- 192.145.110.255
IP: 2a05:3cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:96:c5:02:2f:cf:75:b3:91:c9:49:38:f5:c7:8f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 08:12:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:11:fb:0c:9d:8f:95:b2:61:12:e8:aa:44:
65:1a:42:df:c8:d5:04:02:0e:89:89:69:69:0b:4c:
ec:ca:a6:17:5a:d8:42:cc:6d:ae:0a:8a:54:e7:be:
27:b5:53:9f:54:77:4f:d9:e7:94:1d:f3:9e:bf:48:
46:8c:d1:2d:02:5d:5b:69:e9:c0:45:7a:eb:42:b8:
b3:30:31:84:6b:86:25:c4:8c:6f:35:e0:de:4c:98:
78:8a:38:08:0a:0b:e7:de:ce:af:b3:16:e2:bd:bc:
61:dc:50:94:11:1c:c5:bb:65:9d:69:47:d7:96:7d:
cf:d7:91:f1:5f:63:02:d0:c1:0b:59:5f:21:79:e6:
f4:10:bf:55:ca:e4:85:8d:99:ab:ed:66:30:dc:1a:
ca:45:85:50:a6:76:e0:03:e0:25:c4:f1:01:94:d1:
36:ac:dc:2e:a3:d2:a2:94:11:2b:22:e4:c7:08:5b:
87:7d:61:86:f5:b0:f4:11:4c:19:52:64:01:5e:2d:
2e:89:e3:f6:e5:f5:09:f8:b4:c5:17:22:4b:d4:0b:
9b:7a:25:63:f5:c6:ce:21:b7:6d:32:f0:e7:c1:08:
37:e9:bc:0c:5e:b9:ab:9b:f5:e7:ba:3f:d9:26:8f:
53:d0:df:c7:21:33:13:d8:f4:8f:ac:99:23:81:19:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.68.0/22
192.145.108.0-192.145.110.255
IPv6:
2a05:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
34:1c:9a:72:5a:7b:54:13:9c:e5:66:7e:db:1e:62:cc:9d:f2:
ac:bb:9a:3b:b6:53:30:b0:4b:9e:fa:73:47:a5:d9:57:b4:fc:
0a:bc:11:2d:d2:f4:ba:0b:01:2e:43:d1:8d:56:14:cc:b0:cb:
f3:ba:47:80:65:bf:47:ac:35:4a:fb:90:39:80:08:21:f6:a0:
42:e0:12:53:af:eb:1c:63:64:5f:26:ae:8b:04:7a:fc:8b:80:
27:e0:14:67:71:03:e7:d5:c0:e6:fd:1a:d2:ac:ef:65:15:7b:
0f:c7:74:dc:10:20:9f:f0:35:fb:58:bd:76:2c:97:0b:d3:30:
70:56:1c:df:33:f5:4a:e9:9c:b4:07:9f:fa:c8:f9:d4:ed:3c:
c7:2f:69:8b:44:79:3c:b4:9b:47:16:b1:ae:9c:12:39:ff:97:
28:2a:ed:8b:23:27:da:2b:6a:01:92:86:e6:46:5d:48:7c:67:
f2:61:e8:e5:a5:7e:5c:cd:34:4d:96:dc:09:c4:9e:52:43:47:
df:cf:f3:bf:6d:ba:2d:0e:22:14:3f:77:24:30:2d:b1:29:3c:
ad:f4:d6:b1:4a:a3:c7:26:e4:7a:e4:b8:1a:1d:d5:9f:3f:77:
c6:c0:25:43:92:c8:97:d9:d5:ca:7d:2b:69:10:4d:90:9b:8a:
17:e0:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:56:58 2026 by rpki-client