Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.cer (raw, json)
Hash identifier: nYSOUukwZ+F0Cb9A0+27DqVpsFmoXWImuubMLKuXMVc=
Subject key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BFFC637846B4DDE87BE4F7D1E42F612EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Jan 2026 14:05:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 81.85.60.0/24
IP: 185.173.20.0/22
IP: 2a0b:3100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:c6:37:84:6b:4d:de:87:be:4f:7d:1e:42:f6:12:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 27 14:05:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:12:de:12:bb:5f:19:3b:b1:9d:6e:e3:9e:a7:
8d:69:b2:9c:69:85:58:15:27:10:73:62:be:6c:45:
8a:97:8c:e5:cc:ed:13:07:06:31:b5:bd:43:e0:5b:
b1:0b:c7:ee:b9:91:2f:31:78:38:67:4b:db:16:13:
77:93:c9:6c:e0:6b:44:d9:11:90:f1:5b:b0:af:01:
68:70:d1:11:95:62:49:df:59:82:b4:a5:e6:60:f6:
80:02:22:f2:02:08:0c:a9:f1:b2:06:d3:12:e9:c0:
97:04:27:6b:76:ac:50:3f:6a:31:35:35:c4:ac:99:
6f:ea:cd:84:0b:0c:68:ef:8c:4a:61:9a:66:2f:c3:
2a:51:35:7a:8b:7f:5d:9c:0e:8f:a5:34:48:71:58:
83:3e:7e:e2:77:d6:6d:07:d8:91:1d:cc:6e:3b:c7:
f3:86:1d:ca:3b:60:72:1c:08:22:37:9e:0e:7c:bf:
4d:2d:73:90:f1:e8:49:d2:30:8d:44:ef:2c:b0:5b:
38:7c:08:25:ac:74:1b:92:56:df:53:2f:06:dd:8c:
39:f3:74:39:f1:9d:87:0e:b7:39:69:7e:1a:e8:a2:
bd:e3:a4:1e:8b:70:81:29:50:dd:e0:e6:25:69:b8:
27:ec:64:f7:1c:79:0b:5a:ab:bf:c2:5d:32:44:b4:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.60.0/24
185.173.20.0/22
IPv6:
2a0b:3100::/29
Signature Algorithm: sha256WithRSAEncryption
84:fe:88:ab:95:e5:d5:aa:f6:86:38:15:c2:cc:55:f0:0f:57:
59:dc:ee:55:2d:82:9c:02:39:3a:1d:30:12:9f:e6:54:64:81:
9b:8c:78:45:76:52:85:13:11:8c:4f:08:80:fe:97:38:df:67:
e8:9b:a9:74:37:ce:a4:af:6f:d7:a0:26:2c:a7:11:de:3b:bb:
9d:88:cd:c0:b5:bd:15:bd:fd:d1:0c:7f:b2:54:7c:cd:a5:78:
dd:af:5e:ef:b1:7b:e4:fc:31:1b:93:44:b1:b1:2d:24:c7:57:
85:dd:6d:97:1f:da:6c:47:7b:f6:7a:89:70:6b:02:6b:e1:d2:
64:15:5c:4a:91:74:66:bf:0f:fd:5c:c0:75:e0:95:7e:e6:4b:
86:66:9d:a9:e5:b8:f8:95:9a:74:e1:a5:6f:d9:4a:44:ec:eb:
99:f8:9b:5a:90:5d:44:25:22:b8:f2:de:e3:34:36:85:e9:98:
28:2e:50:46:cf:07:79:8a:08:b5:d4:5e:50:a2:78:95:6a:1f:
2b:7d:1c:cf:5d:ac:48:5b:f1:3f:bc:3b:84:b9:8f:01:aa:9d:
5d:5e:49:50:10:a9:ac:fb:a7:fe:1e:42:fe:b9:d1:b6:ec:2e:
ec:ea:ba:33:87:7a:39:98:b9:4d:a0:80:48:32:e4:14:bc:6b:
4d:8b:e6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:12:41 2026 by rpki-client