Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
File: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer (raw, json)
Hash identifier: HV9WoWq5RXdIfmvmTLWKxeGBNrkVzvFcE1xfCfznv5k=
Subject key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C9A6E185E456708DFC379422AC1D4ECC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Feb 2026 14:50:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.80.12.0/22
IP: 2a0f:bf40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:6e:18:5e:45:67:08:df:c3:79:42:2a:c1:d4:ec:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 14:50:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:64:88:c1:3a:0d:da:4b:17:1b:3b:54:de:
ee:9f:88:ba:95:15:26:00:db:a6:ca:b5:b5:cb:e3:
c1:30:9c:0e:6e:f5:02:88:f8:6c:38:d9:6f:10:f4:
2c:12:73:65:07:04:4d:0b:2c:f6:9d:1c:18:8d:d2:
b8:8b:6a:b3:82:e7:d6:46:5c:62:04:13:87:31:a0:
f2:0d:99:2c:4a:92:b7:9f:e4:ac:18:f0:f3:fb:54:
59:08:67:b3:f6:07:ea:a5:32:d4:d4:8a:17:d7:b1:
f5:b1:4c:42:7e:da:8a:4a:a6:a9:e7:be:80:00:66:
87:97:56:a4:c2:8f:1a:5e:7b:06:55:2e:7e:4a:17:
d6:d2:c9:dc:4b:3f:fe:ca:67:fa:0a:40:15:9f:d0:
9b:d7:d5:2a:35:3e:c1:19:04:4f:84:13:cf:bf:88:
8f:ed:60:22:3b:29:56:35:39:3e:79:22:49:53:a8:
3b:3f:13:9e:54:37:35:69:27:fb:53:fc:fc:81:90:
6c:84:97:be:3c:98:c8:0b:bd:63:a5:81:e2:b5:48:
d7:c7:b7:ed:1b:42:3a:e8:c7:55:2d:62:3d:2f:2f:
50:1e:cd:b2:0e:72:d8:e4:ff:5e:e7:f7:51:2f:03:
45:8a:83:d6:43:3e:98:49:c1:0c:95:88:d0:13:7b:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.12.0/22
IPv6:
2a0f:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
61:47:66:a9:cc:b5:6c:91:55:2f:27:de:d1:12:99:18:27:94:
19:44:db:28:c0:83:e7:75:51:91:b6:91:fb:46:87:d3:ff:00:
7c:b1:06:0e:b4:29:c2:c2:b8:cb:15:1b:35:c3:6a:72:2d:c1:
e7:11:52:b4:c8:c4:f5:6d:69:18:ae:83:b2:ef:e4:6f:df:46:
72:f8:db:89:0f:6a:cc:4e:7c:34:73:15:10:9b:15:1d:7a:fa:
31:d7:2d:97:03:b3:c0:af:f2:20:56:b7:42:f9:e5:3d:e5:78:
eb:f8:8d:61:1c:93:5e:6c:d5:3d:2b:f2:63:f0:a8:c8:47:73:
0d:13:b7:ba:a5:4d:aa:0a:29:76:9d:5c:a1:d9:15:12:8d:4d:
32:f0:9a:1f:03:56:ca:52:fc:03:10:84:8b:24:9e:94:74:a1:
d8:cf:9c:dd:bf:e4:5d:73:e6:a3:42:bc:d4:62:ee:4f:0b:22:
79:c3:31:6d:95:35:f6:00:d9:94:f6:78:5d:31:32:96:91:15:
d4:23:54:f0:7a:33:f6:74:f2:08:1e:df:cf:5b:68:3e:9f:05:
c7:fd:12:40:70:a6:5d:d7:67:19:30:1f:a1:ed:e4:6b:0e:10:
05:fa:98:78:f2:f9:80:4f:f9:ad:b9:04:e8:2b:7b:ca:e8:a6:
7e:7d:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:50:12 2026 by rpki-client