Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer (raw, json)
Hash identifier: 5/wEK2yAStbCds8jpblMxQCJ/tIRlSWu/6dJosm7aVs=
Subject key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797F213B39CC67CC9FCDC6672264454C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.60.57.0/24
IP: 2a0e:3200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:21:3b:39:cc:67:cc:9f:cd:c6:67:22:64:45:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c1affe59d58621d945b897fe6b7947d562529b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:b5:42:25:b2:56:c6:75:75:b9:ca:1d:f0:
35:71:76:ad:fb:d9:90:eb:5a:bd:5d:da:02:02:a9:
70:e6:c1:e5:68:3c:a6:b0:8c:48:4a:7f:16:c6:c2:
1d:59:4a:a1:36:e7:17:d0:8d:6e:50:ac:1b:16:d2:
ab:16:80:de:e1:2c:ee:75:75:6f:73:99:1b:ce:6c:
c4:f3:18:58:b6:85:b8:ea:f9:19:8d:ac:8e:05:6d:
de:89:1b:de:84:59:73:23:2e:01:d9:2d:7f:ff:f1:
cb:65:92:de:c7:24:ed:65:ff:7a:68:6c:66:41:a1:
34:4f:e6:a7:1c:55:7e:63:11:51:ba:99:40:a6:20:
10:b5:33:c3:08:20:f8:4d:0f:2d:2c:58:e5:e6:01:
3b:bb:d9:ed:09:eb:3a:ae:d2:d7:5a:f8:0e:25:b1:
b4:39:2c:81:d7:02:e2:13:8f:23:7e:53:93:e3:39:
06:ec:9e:5c:1a:0e:b4:81:11:21:fc:47:24:d3:ba:
6e:4a:83:cd:dd:87:b2:19:cc:96:d9:dc:6e:a1:46:
25:41:3e:28:23:ef:89:3a:ac:ac:e8:6f:55:ed:c3:
f2:0c:bb:4c:b6:3b:d9:e9:12:c9:ab:7e:e2:8d:cc:
ed:13:fe:49:0a:e1:4d:0f:26:cb:2a:d2:d7:be:6d:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.57.0/24
IPv6:
2a0e:3200::/29
Signature Algorithm: sha256WithRSAEncryption
75:7d:b3:37:81:29:33:a8:de:94:69:ce:78:9a:4e:88:81:85:
01:9d:7b:9a:09:b4:0f:62:61:95:3e:5f:97:22:6f:5a:e9:c3:
ca:41:a8:84:f6:06:0d:86:4d:9d:e1:de:04:8e:72:97:52:3a:
1b:66:4e:6e:ad:a7:f2:6f:81:47:76:6e:05:72:fe:fd:10:13:
38:4a:fa:79:8a:2d:ab:fc:35:bc:a9:d7:73:47:65:b2:3e:3a:
3b:22:78:a4:6d:08:bd:08:f0:63:e1:eb:70:ab:22:3a:d8:9c:
3a:4a:df:f2:6b:d5:df:86:3e:4d:88:df:ac:9d:84:32:73:1e:
b7:7d:91:8c:dc:87:ae:1b:26:89:e3:c1:bc:5e:af:2f:d9:ed:
bb:61:ec:0e:e5:54:fc:24:87:b8:12:4d:a6:2e:c9:b6:e2:66:
4d:1c:20:84:82:91:0a:d3:b7:ef:93:a6:f5:2c:9a:28:df:04:
f6:6b:dd:51:3e:5c:57:47:48:10:57:25:23:01:3a:8c:a1:8b:
02:ac:80:b8:9f:98:b5:54:b1:3a:d5:63:29:d8:8e:72:b9:d7:
23:2e:ab:67:e1:f8:71:eb:e8:30:e8:d9:27:cf:51:e1:00:45:
c1:2a:20:ff:9a:29:91:74:43:b7:53:d6:f7:37:8b:6d:1e:11:
2a:b1:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:44 2026 by rpki-client