Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
File: R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer (raw, json)
Hash identifier: kIQx3+AagUXkKqDebndtv6IgXUsld3Ud3uhuaUFoNdI=
Subject key identifier: 47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C5D785C267B0A6EAF0492B4C8FA604BCE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 14 Feb 2026 18:44:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.245.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5d:78:5c:26:7b:0a:6e:af:04:92:b4:c8:fa:60:4b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 14 18:44:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:60:47:12:01:5f:99:4c:9e:23:fb:b5:e4:
81:4b:78:60:92:e7:5c:50:3d:3d:07:9a:4f:64:1e:
4c:bc:fb:04:9e:db:65:4f:e9:7e:0e:74:dc:26:64:
1b:12:ac:27:d9:86:a1:bb:bb:7d:9d:27:c6:bc:f8:
49:7e:d8:92:54:5e:09:00:5e:65:2b:ff:b3:86:65:
5a:ae:e1:0d:b6:2f:d2:a3:a9:ee:2a:53:ab:9f:00:
7a:59:bc:f6:bb:5c:db:92:05:c9:d3:63:9b:c8:81:
39:74:4a:d4:7d:28:aa:4d:85:fa:57:53:6f:c5:79:
48:af:40:0b:c2:8f:a8:46:bc:4d:64:15:57:18:40:
3d:f2:aa:4f:0e:2a:99:d3:be:07:70:82:5e:5a:ef:
4a:0c:5d:4e:b7:59:4b:6d:06:d7:78:2a:18:11:6f:
61:84:b4:28:47:76:2c:bd:57:7d:9f:d8:00:1b:93:
0b:81:9a:36:51:1e:10:0a:52:b3:d8:85:0e:92:b9:
a6:cc:05:2d:a0:f8:99:32:17:91:c6:19:65:34:01:
e8:b4:18:09:79:59:15:5b:30:8c:da:3a:ba:57:e5:
8a:33:79:a5:f2:80:ce:84:f8:90:ae:04:5f:07:cb:
00:9e:28:d7:3d:78:e5:4b:80:ea:4a:1c:11:70:80:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.8.0/21
Signature Algorithm: sha256WithRSAEncryption
20:80:5e:5b:8b:82:a3:b2:df:9a:5f:10:b6:db:37:ab:87:e4:
79:97:d8:60:a7:d7:ca:ca:14:99:dc:40:55:0c:a6:9f:88:92:
b1:73:39:aa:fb:fa:75:3c:ee:5c:bf:9b:49:d5:90:bc:d1:0c:
c2:f5:3b:64:45:c0:6d:8e:f3:42:97:18:cf:27:78:fd:3f:14:
9b:a5:26:80:e0:94:0d:83:aa:b6:00:07:00:4e:a6:2c:9d:8a:
06:1b:0c:29:c0:f3:58:a8:36:d6:aa:ac:6a:40:c0:46:8b:72:
88:dc:a0:19:18:45:07:17:bc:ea:4e:28:d4:10:1d:e1:4f:a4:
f7:d1:0b:3c:e3:77:bd:95:74:5b:f7:ff:d5:f1:28:9e:dc:55:
06:b5:e4:36:63:6a:7a:c2:bb:af:f5:ca:57:92:c9:d6:0c:bf:
6f:b2:e8:a0:00:78:1a:20:32:d6:61:ef:e7:0d:3f:f5:33:75:
19:91:16:a5:62:6f:37:68:4e:ae:64:c9:6c:1c:e4:76:cc:82:
a6:0c:1f:c1:17:4e:7e:42:2d:e7:2c:34:ea:e7:55:68:cf:53:
4e:05:b3:a4:7f:9e:03:8c:da:b1:5b:7b:a9:ff:76:a0:bb:cb:
30:a9:0e:14:65:45:cb:8c:fe:af:b1:1d:45:a0:40:50:46:36:
fc:4f:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:54:49 2026 by rpki-client