Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
File: rx7uIsUBU2MRinHSapRj3JN0uig.cer (raw, json)
Hash identifier: /4vx9fdltAHtP5DnJ0Mdzq78v2XuSXAm0L2wqKrnKiI=
Subject key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C994FF3AA2215E39A9FC0388984CB3311
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Feb 2026 09:37:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211209
AS: 212177
IP: 80.75.219.0/24
IP: 193.201.149.128/26
IP: 2001:7f8:52::/48
IP: 2a03:f980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:4f:f3:aa:22:15:e3:9a:9f:c0:38:89:84:cb:33:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 09:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:dd:99:95:4e:22:c1:ad:c3:c8:ce:89:ad:
e0:6e:01:10:3a:5f:e3:00:ed:ef:35:45:16:d8:b3:
ef:3b:cd:1a:a6:94:14:09:e8:60:26:be:6d:58:49:
15:5d:c8:cf:ee:0a:ac:fa:3e:03:e4:fc:94:c7:90:
95:8d:35:ec:47:16:c6:ac:d2:a7:68:74:39:24:be:
5a:e9:6b:67:31:ed:bb:e5:a6:b1:2d:bd:7b:3e:42:
cd:bc:0b:f0:65:b1:55:1c:51:1a:5b:8c:40:5e:bf:
1d:db:b0:81:27:d2:e5:bb:6b:e2:9e:80:59:1f:a4:
08:b2:f6:a9:b3:47:f9:4a:f7:40:c4:58:66:7f:11:
8f:42:73:ba:21:99:a4:43:e1:6a:e1:cd:ba:15:c0:
b7:bc:6e:c5:5a:fc:e5:3f:c5:bf:56:94:92:e8:e2:
29:2a:65:1a:a2:b0:21:72:be:e8:b5:6c:2b:c7:8f:
7f:38:82:8f:76:7b:63:a0:9f:db:c3:02:a4:b9:c3:
e0:3d:ee:72:e8:a5:80:77:bd:c4:e5:f9:61:1d:5d:
ef:85:f2:47:ac:e5:fd:ee:1c:29:c1:50:1d:ca:ae:
12:b9:f8:34:bf:50:e1:88:62:44:b3:93:55:66:55:
e7:ab:a2:a6:cc:fd:77:12:58:7e:a1:a3:b4:ba:a7:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.219.0/24
193.201.149.128/26
IPv6:
2001:7f8:52::/48
2a03:f980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211209
212177
Signature Algorithm: sha256WithRSAEncryption
09:fa:4f:4c:14:49:ef:05:74:af:80:6f:19:39:89:d1:8a:3b:
ba:ec:69:21:6e:b5:8a:82:12:24:a8:05:55:6e:3a:9f:40:25:
59:65:5f:a2:f6:15:8f:0c:d5:0b:2d:dc:a3:f6:b3:d2:51:6d:
cd:a4:c1:91:0e:bd:da:a6:fb:4b:ba:44:1d:a7:66:f2:0c:1e:
3c:04:d9:62:87:15:ca:4f:51:f3:c5:65:2b:47:28:90:bc:fe:
5c:db:41:6e:09:19:14:7e:8d:e7:b7:a0:aa:fd:6d:db:19:ae:
7f:42:c8:20:c8:82:57:e2:15:10:eb:c3:8a:d1:e8:b1:b3:82:
be:df:48:09:ae:f4:6c:68:53:fc:1f:80:56:1c:3a:6a:35:ed:
b9:7f:3d:e5:4d:0e:8e:f3:02:8c:f0:0d:bd:a8:6e:5e:c9:7f:
bc:6d:0e:86:46:e7:26:11:42:f5:ee:28:73:d3:68:ad:59:3d:
33:6f:bb:97:5d:8e:fb:3d:c0:83:10:e6:2f:0a:ee:e1:25:10:
d2:68:33:79:ed:4d:d6:ce:72:34:b8:13:16:c6:5a:0e:fb:45:
4c:a6:b0:6f:0b:40:0e:af:ee:2d:23:93:ea:ab:e0:bf:b0:28:
d2:df:de:b0:e6:fc:5a:48:68:07:d3:68:72:a0:b3:49:3b:a4:
61:d1:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:51:56 2026 by rpki-client