Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
File: 72eEaVdKzAPXguYygf9E-qqz-Ec.cer (raw, json)
Hash identifier: ZZrcns4vv5HuSSn8YyPaM7a24oafjie3XFO0+1gxD5Y=
Subject key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C94A2E1F071CE0D5E89AF9518D1DF8894
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 11:50:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207440
AS: 209231
IP: 2.56.140.0/22
IP: 86.110.204.0/22
IP: 89.232.172.0/22
IP: 185.161.236.0/22
IP: 185.251.36.0/24
IP: 2a09:c540::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:a2:e1:f0:71:ce:0d:5e:89:af:95:18:d1:df:88:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 11:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef678469574acc03d782e63281ff44faaab3f847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:d9:5b:da:8c:d0:51:ba:7f:8e:f9:b4:48:
28:c6:3c:4a:a0:c8:27:5e:71:d3:7d:b2:d1:1e:3b:
c9:6a:d7:c2:65:0f:c4:6e:f9:86:14:24:da:5c:7f:
1d:e2:34:b2:6e:6f:60:62:f9:0d:e3:42:ed:37:c5:
23:cf:04:20:85:9a:2f:62:5e:5f:12:0d:3e:8f:83:
45:4a:07:07:bd:af:4a:3e:56:8e:50:c2:7b:be:67:
9b:e4:c5:19:6d:44:b3:b6:89:88:ec:f7:ba:ea:f8:
0c:33:50:c7:fd:66:fd:f1:bf:ce:d8:ec:82:db:d7:
de:c8:e0:d8:42:24:f7:f9:f6:d9:1f:ab:42:16:b2:
d1:7e:ed:fc:e0:0b:3f:f5:38:bb:ee:c2:ec:d7:5a:
1f:7f:01:04:01:85:03:d6:02:34:c8:0c:b2:45:d4:
70:b4:42:18:bb:27:10:3b:ef:44:bd:cb:e5:de:29:
fe:14:db:4b:55:7e:3f:3d:c8:14:dd:96:9c:35:24:
32:89:f0:88:4e:4a:d5:92:c7:f1:a4:e5:d9:71:1d:
a4:04:34:ac:68:85:52:31:a2:02:f3:0e:63:cf:15:
cb:a2:65:11:ba:ae:cf:e6:e1:18:7b:45:3a:f4:34:
3c:30:ec:87:20:02:e8:dd:8d:23:13:27:f6:a9:f2:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.140.0/22
86.110.204.0/22
89.232.172.0/22
185.161.236.0/22
185.251.36.0/24
IPv6:
2a09:c540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207440
209231
Signature Algorithm: sha256WithRSAEncryption
64:98:b7:30:72:1f:b6:51:87:28:34:aa:dd:32:41:3d:8d:bd:
b7:ed:95:45:76:ec:59:b6:d3:62:04:0c:62:13:ba:ec:45:12:
b1:14:96:3f:07:5f:30:d9:2f:c1:51:3d:0a:5b:4b:04:a3:91:
e6:16:68:bd:fb:da:91:f9:08:c3:04:7c:be:f2:65:ff:fe:2f:
34:59:f3:9b:e9:18:61:f0:36:f7:fa:18:68:d9:11:18:dc:d1:
60:67:86:3d:c2:c3:8a:d5:be:96:f5:b5:02:82:ad:89:cc:01:
74:b0:a7:fe:88:7f:48:39:d8:47:3d:0c:43:e5:ee:93:84:a9:
5a:aa:fb:7e:6c:32:4f:ef:3b:d9:5a:9d:dc:3f:44:a9:9d:b9:
98:8b:39:ae:39:87:20:8e:6a:d8:3c:44:9e:5e:05:0c:12:51:
01:a0:93:e5:ad:b6:8c:df:d7:ed:84:87:51:72:2b:d2:d6:90:
33:ba:fa:5d:a0:83:bb:0d:a7:35:12:93:d4:05:03:6f:6a:cc:
8a:01:cc:11:6d:74:0b:86:da:e6:26:87:00:41:e1:d4:d2:b0:
63:e3:b8:00:a8:86:30:14:a4:24:ca:3f:a7:fb:1c:9c:d0:3f:
e4:0a:0e:3e:2b:ec:82:d3:9c:67:21:3b:2c:11:2b:59:49:2f:
8d:a8:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:57:38 2026 by rpki-client