Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.cer (raw, json)
Hash identifier: iZohuXbR+G1wS/6yv0JIPLwrwW4GL1uZ+qPM2geH5I4=
Subject key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79110D65E067FE2FE50523FB920EFFA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.189.74.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:0d:65:e0:67:fe:2f:e5:05:23:fb:92:0e:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:46:0b:51:d7:67:2a:2f:bf:89:6a:13:d5:
c4:1f:25:44:c2:8c:f6:bb:5b:38:b8:fd:04:d5:61:
cb:a0:94:a6:5f:2b:bc:fb:77:c8:5d:7e:37:1f:ce:
5f:d9:f6:b4:79:d9:4e:0e:25:3d:53:21:65:a3:e1:
90:0f:08:f6:97:c9:cc:64:73:92:28:0b:f6:b3:9c:
12:55:49:af:76:df:99:ab:05:b0:78:ff:2a:f7:91:
ec:51:b8:c3:1d:a0:72:c3:fa:e5:4a:4f:44:8d:6b:
b1:9d:50:42:8d:d7:1b:3a:f1:9e:f6:1a:17:6a:cc:
6a:f7:86:6a:d2:2f:86:47:37:74:e9:98:21:22:15:
55:05:e3:69:91:6a:ee:bc:a1:93:a0:f7:63:6d:e2:
a7:ab:a5:5f:7e:ae:5b:36:0d:57:1a:f4:85:53:2b:
cc:b9:80:82:c6:9c:5b:ed:0c:64:22:ff:2e:7e:f9:
05:78:fb:9a:4d:c5:b4:c6:c0:68:69:dd:29:a5:39:
e1:e8:d5:00:cd:34:25:4b:e3:2b:3c:7f:11:4e:b3:
ba:4f:88:6e:96:ed:09:a5:23:d4:7d:9d:ca:e0:df:
4f:87:5a:f3:b8:d9:a8:cc:5e:de:0b:48:9f:2d:c9:
46:c0:3e:ed:b8:c9:8d:e5:8d:b2:a9:2e:6b:fa:7a:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.74.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c5:a1:49:e3:40:e8:eb:76:38:5f:0d:50:05:90:94:70:8f:
7e:e7:e0:de:2c:d1:51:18:70:86:4a:6f:88:12:f0:99:c5:be:
c2:70:44:3a:f4:5a:c9:24:b2:f2:64:38:a8:21:56:8f:5d:60:
e7:5e:fe:3f:9d:52:13:14:f3:17:d2:f9:63:12:de:c5:8b:cb:
48:52:98:84:69:d8:a0:c0:1f:3e:a9:6b:27:30:25:e8:0f:df:
36:5e:bd:0a:6e:b6:5a:74:18:01:a7:44:6e:4b:07:35:bd:41:
fe:27:2f:b8:f5:41:46:4f:d3:86:bb:69:50:fe:31:17:6f:21:
fe:eb:c6:93:03:82:94:c2:d3:31:c2:14:2d:c1:f2:6a:ea:4e:
bf:4d:83:cd:5c:a9:65:eb:f9:4e:10:19:cd:52:a0:b0:7a:ef:
46:79:5a:19:9c:32:f0:e5:35:58:84:29:ae:04:ab:00:cd:67:
80:53:06:4e:7c:b6:d5:21:4c:9e:5a:af:ce:ec:c1:9a:ea:3e:
67:8b:75:6e:8f:08:c7:fb:34:5e:e1:06:e8:63:fd:5c:00:1a:
9a:7d:43:13:9f:22:7e:bc:a4:72:99:c0:2a:2c:64:dd:db:fa:
39:4e:08:7d:ff:9d:c8:fa:4c:a8:12:e2:27:d1:7d:fc:57:b2:
35:a1:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:58:21 2026 by rpki-client