Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
File: aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer (raw, json)
Hash identifier: jtacSwdgk3YiLsIhYJJyLwzOtrEcL9DFud3+VA6/KVw=
Subject key identifier: 68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EAC2A79C3876086CDDC45987AC1BB8B89
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jun 2026 11:35:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 176.32.248.0/21
IP: 185.90.252.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:2a:79:c3:87:60:86:cd:dc:45:98:7a:c1:bb:8b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 9 11:35:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:3b:2f:51:5f:52:b1:6c:e7:b7:b3:f4:98:
d0:df:31:b7:ca:fc:73:c1:40:51:0a:40:0c:9e:3c:
4f:70:ff:72:8e:c1:b6:2b:0c:78:dd:49:aa:11:4b:
92:ad:cd:57:32:3f:a0:71:92:31:d6:eb:3a:6a:ca:
67:29:02:b4:5b:2f:b5:d9:20:ea:8c:4b:c6:5f:2e:
d2:a8:ed:b2:71:ab:11:70:0c:b3:2b:55:fa:91:32:
b9:39:6b:5f:32:0c:0e:d7:58:34:85:ea:73:a5:17:
09:19:4b:20:cc:50:ec:e0:31:4a:4f:fa:9d:d9:89:
1b:30:87:7b:e5:99:9b:7f:7b:96:a1:56:3e:cd:91:
97:3c:b1:a1:59:11:ec:db:a5:f4:cf:00:b4:ec:66:
5c:fa:0a:89:ae:79:22:1d:50:d5:f7:a4:98:11:ca:
82:6a:5a:b8:82:d3:ed:ac:0e:cb:43:dc:3f:93:80:
db:6e:bc:44:ac:97:bc:4d:06:0d:24:82:9d:e5:58:
5e:db:d3:5a:7d:63:62:e3:3a:00:55:24:4e:a0:91:
c3:35:2a:a4:48:2a:58:94:8c:f4:34:f0:d0:45:b9:
ce:1f:70:14:e1:ee:e8:72:0c:63:86:b0:e8:5f:b8:
e3:0e:8c:a1:94:33:34:70:34:9d:e0:56:f3:2c:4d:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.248.0/21
185.90.252.0/22
Signature Algorithm: sha256WithRSAEncryption
15:83:22:1f:ae:7f:a4:d2:f5:37:70:56:f1:6b:11:71:7e:02:
34:3e:9e:ad:3d:97:20:43:98:e6:86:eb:17:a9:32:ce:62:18:
43:11:97:56:f5:40:e7:a2:fb:b1:15:60:ad:04:bf:0a:fd:3e:
47:a4:f0:86:a6:f1:eb:c6:90:15:61:7c:95:53:6a:51:78:35:
29:a1:47:19:10:af:57:76:aa:31:eb:84:9e:1e:31:f0:7e:50:
51:16:74:d8:1b:2d:06:8b:64:da:5e:0e:de:96:77:1f:da:46:
90:81:f5:2b:8d:1d:29:c3:c8:16:eb:ad:be:b0:bd:89:aa:84:
bf:3d:34:f0:79:9a:f6:cd:7f:fb:4f:d8:25:85:b2:3c:d0:6c:
b6:ad:8c:1c:75:03:01:93:d7:d3:f9:6a:ea:6d:14:90:6f:54:
25:e7:03:b4:09:61:fd:41:db:1d:93:55:7f:70:95:65:69:f9:
cf:d3:01:23:a3:5d:bd:9e:7b:c4:a2:c9:a1:0a:c7:bc:70:d2:
8d:e0:79:d1:d5:66:5b:88:83:4e:8b:be:53:8e:a8:92:04:6b:
46:1f:24:4d:b2:83:8d:df:46:86:5b:a3:79:3d:42:c5:69:e2:
ae:7e:ed:8a:9e:11:ad:77:49:f4:59:19:b4:bd:7b:0c:a0:6e:
68:73:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:12:38 2026 by rpki-client