Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.cer (raw, json)
Hash identifier: bQ25WI6gCWaUi++LJl95K1hGwn7LXvXkn8uhjyr0D8U=
Subject key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7FF24EA30D6A8286E10FD937F8590394
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 18:22:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.22.64.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:4e:a3:0d:6a:82:86:e1:0f:d9:37:f8:59:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 18:22:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:25:4a:ae:92:3d:15:1a:9a:9f:42:1d:8c:
c3:61:40:db:1f:2c:e6:c5:5e:4b:c9:0b:55:1d:d4:
17:e4:fe:5f:2b:68:96:5b:5b:5c:64:b7:0b:62:f8:
7c:c1:47:0e:c2:dc:be:39:f9:07:a6:2f:38:cb:49:
da:e9:17:64:3c:65:e3:00:76:64:e9:cf:93:26:25:
e0:56:f1:22:ea:e5:62:d5:58:9c:0a:6a:96:3e:5b:
8c:20:27:34:f1:9a:70:46:75:c2:9e:8b:e2:2c:fa:
83:78:14:34:53:b2:d5:9d:98:83:8e:b5:cb:03:e6:
20:ee:6b:ed:f0:a3:bd:69:f5:6e:47:9f:a2:86:59:
87:4b:7a:80:b1:73:2f:c3:2f:df:0a:e9:53:bb:18:
a9:09:2a:6f:ee:85:ad:72:59:24:68:9b:be:9b:48:
0e:75:02:f3:d6:cf:a0:a5:9f:2b:13:1d:a5:2f:72:
86:f1:23:78:3e:a6:3c:3c:38:76:1b:fe:41:a0:c7:
9e:ba:7b:d4:71:50:34:9a:c4:d2:16:70:05:c9:62:
4d:19:3a:92:0d:5a:1b:c8:9a:ba:b6:96:4d:40:e6:
dd:e9:78:40:20:6d:ce:9c:de:85:e4:d3:de:7e:7c:
59:8f:96:a3:de:5e:ed:39:db:71:ae:0e:93:71:d1:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.64.0/20
Signature Algorithm: sha256WithRSAEncryption
88:72:9e:2d:61:d7:b2:3a:b4:f2:6d:0f:61:6f:1c:d1:f8:19:
7b:b4:34:7b:8c:de:39:a7:90:6f:9f:fd:57:8a:a0:a6:d5:c9:
3b:d8:ef:ae:be:f6:98:0e:b6:27:6e:9f:3a:aa:c9:30:99:7d:
3f:a5:a1:41:bb:f7:60:90:c5:5b:2d:a4:57:1a:69:56:e1:aa:
dd:f6:29:95:0f:ef:93:f5:f0:e4:44:bd:fa:cd:36:02:29:a8:
70:e9:96:ee:c8:80:8b:04:6d:06:db:8e:8f:46:2d:69:63:31:
c7:2e:92:4b:20:d2:66:56:c9:a6:00:23:67:58:4e:b2:44:fb:
64:e7:6d:24:46:01:4d:e0:c1:a2:ba:7c:cf:43:04:a1:01:12:
e9:95:02:5f:e5:c9:bc:ec:8f:53:66:4d:52:f8:75:b5:3e:48:
8c:a8:f3:4c:5e:a9:9f:c6:3e:e5:e1:ef:59:92:f1:2c:61:6a:
e7:8f:73:d7:a0:6d:58:0d:37:21:53:f3:57:e1:e0:53:c8:ef:
87:ea:1f:1a:17:db:87:e1:d9:16:bb:ab:f9:54:53:37:0d:a8:
54:f7:79:36:e4:11:e9:fc:5e:54:c3:38:5a:a2:d3:47:78:6a:
31:3b:5c:1d:19:2a:ba:f7:97:fe:97:75:e0:1b:31:6c:bb:11:
62:4f:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:41 2026 by rpki-client