Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
File: eWnEvYdneAvsFhoq1hKic128q_0.cer (raw, json)
Hash identifier: 3slLh5c3PzCem/FoogIabjpQWRAtjaVX6Mnqo/N8WQI=
Subject key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77593C1DA15D6C38C80967805C12063F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212926
IP: 88.135.70.0/24
IP: 2a07:e8c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:3c:1d:a1:5d:6c:38:c8:09:67:80:5c:12:06:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:d8:af:3a:e3:de:50:41:de:c5:0c:fd:90:
35:cb:ba:62:22:ad:bc:b9:33:ec:47:b8:ee:63:69:
b9:63:96:89:f3:0c:d9:3f:ff:a1:e1:26:14:f5:84:
62:e7:5d:41:b0:21:7e:ca:70:15:34:02:20:e2:68:
be:31:75:e5:41:f5:01:67:fd:bc:57:d1:fa:f4:49:
66:d5:81:30:e8:49:a7:2e:a4:1d:4b:3e:42:73:f1:
47:86:71:91:60:4e:fe:a9:52:84:30:ae:8e:e7:be:
fe:c8:48:11:c9:8a:f4:d6:ff:04:59:e8:5f:e7:ed:
ad:0a:e4:85:84:86:f2:e3:35:cf:e6:91:62:4d:fd:
cd:e7:0f:53:f5:f2:9c:c7:7c:69:8c:91:e1:9d:bb:
00:2a:06:39:11:1e:e0:fc:12:db:e5:f9:88:a4:81:
8e:2b:39:96:c8:b3:c8:fa:26:48:c4:d6:d4:ff:8f:
ec:5d:31:b4:f8:2c:e6:c1:80:c3:b1:52:d1:97:ed:
f9:b4:e1:84:3f:34:37:c2:1f:e7:aa:b2:ce:9b:48:
72:b3:dd:7b:d3:7d:c1:f8:72:b6:f2:65:a2:b2:df:
d8:0e:bf:62:8e:d4:fd:a4:ee:29:78:13:5a:1a:dd:
53:83:95:66:ac:5c:19:50:02:7a:86:90:3d:dd:9a:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.70.0/24
IPv6:
2a07:e8c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212926
Signature Algorithm: sha256WithRSAEncryption
ad:33:e7:29:a0:d6:99:a2:8a:bf:80:7b:f7:75:09:64:e9:53:
82:b9:f2:1f:b2:1d:85:9c:03:4e:2c:ad:29:00:8e:7b:db:22:
1e:26:58:36:b3:d3:5f:7f:9b:c1:77:6d:72:bb:69:fd:52:e2:
a7:7c:03:6c:36:10:cc:c6:bb:e3:59:e9:2f:63:44:66:55:b1:
b5:c7:82:58:96:78:8b:78:95:09:88:e6:92:38:d4:64:40:2a:
7f:56:d2:a2:91:d4:d1:63:3a:e2:f1:a3:ea:0e:d9:f4:f2:de:
21:a1:95:5c:af:52:30:a2:13:f7:d8:d3:84:24:ad:f4:9d:93:
c6:37:fc:0b:fb:e5:6a:10:8c:7f:a9:d5:82:57:ce:c7:17:cc:
79:44:60:11:a0:2b:c2:bf:3c:0c:77:5a:95:d7:71:ef:3d:9e:
47:f6:f2:c3:8e:c8:9b:b1:7e:a6:17:41:03:c9:1b:32:de:e1:
d0:85:eb:74:04:ab:57:be:b7:51:5c:b8:84:86:64:66:92:79:
4b:91:2b:7e:c1:39:94:15:30:86:87:08:75:4e:48:79:7e:63:
f1:d2:c6:99:ec:68:bb:e7:c8:4e:3a:10:53:22:fd:d5:61:bd:
a2:37:9b:05:43:26:f8:2f:47:62:c1:84:c4:99:fe:31:94:fd:
cf:3d:bf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:11 2026 by rpki-client