Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
File: I6ejqG_MgpkfsH6OSL1SPi54Msk.cer (raw, json)
Hash identifier: Tu5cOPlQR+fQ3Hn1GNPT3DgjngC2jSwrgte3ll0fHu8=
Subject key identifier: 23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8D1A3F5F15E0B791CCE5CCE4332089F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jun 2026 10:49:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.43.33.0/24
IP: 2a04:7900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:1a:3f:5f:15:e0:b7:91:cc:e5:cc:e4:33:20:89:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 10:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:05:ed:ac:50:e3:57:87:97:da:11:5f:31:
f0:45:51:6e:77:80:ee:7f:97:f3:75:a4:43:6e:d8:
68:80:48:6d:ad:4c:0d:48:73:d6:2a:4d:d0:88:ca:
c1:5d:d4:8e:bd:e1:25:86:3c:11:63:c3:ee:f1:1f:
4b:94:aa:80:19:bd:57:66:05:52:a4:a6:9d:a3:fc:
ed:48:92:5f:c4:1b:c2:1c:84:82:3b:aa:be:31:21:
65:23:5f:6f:31:20:00:ae:51:0e:b3:b6:a5:e8:92:
41:99:66:cc:44:4f:5d:71:9a:32:ff:bc:9f:03:9c:
f9:a5:e5:50:83:79:13:f8:45:33:b1:c3:70:89:49:
33:95:b5:d4:aa:a7:06:7e:fc:8b:a9:a9:1e:bb:df:
4a:5f:9f:85:29:72:58:7b:c4:4b:3c:95:dc:e1:18:
7f:5c:e5:0e:01:b4:df:1e:60:21:e2:cf:6e:2b:70:
df:4a:c8:08:d7:ed:de:41:5e:bb:22:9e:79:6b:8f:
79:84:7a:fd:10:bd:a8:8f:2b:cf:b4:5f:c5:b0:99:
d7:94:ca:73:03:a9:93:e3:b2:9f:50:8c:3c:25:6b:
12:99:ef:5d:f4:a5:9f:12:b7:4a:e6:96:86:f1:09:
9a:5d:4d:30:0c:45:c3:6b:8d:48:93:54:72:c4:f7:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.33.0/24
IPv6:
2a04:7900::/29
Signature Algorithm: sha256WithRSAEncryption
85:75:9e:80:ce:aa:f2:50:c8:87:b8:51:0a:a3:be:c0:a1:7d:
99:8d:cb:6e:d3:25:b8:49:06:ff:31:0f:08:d3:59:24:94:9e:
d7:64:8d:75:e4:55:bb:37:f7:92:26:b1:97:1f:31:a8:a5:d2:
4c:84:8a:90:de:c7:aa:8b:0d:35:18:c2:37:4d:66:3c:d1:49:
af:fd:dc:2f:5d:e7:ed:4b:5b:2c:dc:d5:3f:07:c1:37:54:06:
ef:04:2e:2e:55:e0:95:d7:b0:5c:64:e0:fe:f0:b1:cf:99:66:
d6:e1:ca:24:51:f3:31:52:71:ad:f4:7c:c2:b6:55:be:4b:6b:
c3:55:c9:e4:d4:97:7b:12:7e:8d:d7:ba:54:80:05:8d:46:b3:
fd:fe:30:14:df:64:9b:13:07:04:cb:c2:4d:7f:f1:28:24:81:
74:fd:39:3f:49:e1:fa:d3:fd:0a:f2:13:94:b9:29:cb:01:c7:
8d:5c:96:20:3d:cc:86:6a:1b:62:0f:6c:41:ed:c9:99:e2:59:
b1:73:c2:da:84:fc:e3:4d:fc:ef:95:b4:fa:03:a4:00:b2:43:
01:c0:56:6b:24:35:e3:ac:c4:e3:a1:ac:af:8d:29:41:94:df:
f6:03:cc:85:fb:36:79:23:7f:64:35:8a:8d:f7:d7:c5:f0:0e:
f4:df:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:22:06 2026 by rpki-client