Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9w47e16yTwSxjLZcQmgd2kLVFsY.cer
File: 9w47e16yTwSxjLZcQmgd2kLVFsY.cer (raw, json)
Hash identifier: yPad3rTq6AhIOnq+E95zi6FSLT0MX465FCJWHJPoq1g=
Subject key identifier: F7:0E:3B:7B:5E:B2:4F:04:B1:8C:B6:5C:42:68:1D:DA:42:D5:16:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2F4983AFAF4CE21D42F661E774EB4299
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Mar 2026 12:34:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51065
IP: 91.216.127.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:49:83:af:af:4c:e2:1d:42:f6:61:e7:74:eb:42:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 12:34:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f70e3b7b5eb24f04b18cb65c42681dda42d516c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:86:51:c2:b2:e9:d5:32:2a:00:57:df:6a:
f8:7c:3d:e3:47:9c:4d:b6:ea:53:71:18:f1:08:9e:
d4:65:b1:1e:c3:47:52:eb:dd:31:d7:ed:4f:e5:b4:
3c:78:1a:be:5c:57:b4:14:fd:8f:ea:43:53:56:77:
cc:58:eb:68:a5:4a:55:5b:58:37:1c:d0:78:98:1b:
31:7b:16:86:d2:e6:11:64:75:f3:61:57:81:6c:d7:
c4:f2:7a:d3:b9:62:09:dd:dd:a0:4c:93:08:ac:29:
02:02:b1:8d:4b:91:e5:a7:69:2d:b2:a5:8f:a5:94:
94:3b:86:a9:b2:ef:b4:80:6a:ec:1c:43:31:c5:8e:
03:75:b5:ea:de:a6:84:c3:74:9c:f1:f7:9a:d3:6b:
56:86:3b:cf:8c:66:b1:8f:0f:3a:ae:05:14:e8:90:
6b:d6:ea:71:eb:d0:6d:89:1d:f0:5a:9a:6b:68:f1:
60:7e:1e:00:68:62:7b:5d:d0:af:81:2d:72:99:1b:
4a:c7:df:8d:65:98:d0:24:ce:26:d1:bb:4b:55:cc:
cd:70:1a:41:c8:c3:4d:9b:e7:8e:46:6e:c8:19:bf:
69:ae:a4:12:33:15:cc:fd:b2:da:f0:b2:51:e5:36:
43:a8:2d:38:01:55:6d:42:90:95:57:9a:cf:db:d5:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:3B:7B:5E:B2:4F:04:B1:8C:B6:5C:42:68:1D:DA:42:D5:16:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/acfb75-4cd5-4595-9b3e-192d6a343da2/1/9w47e16yTwSxjLZcQmgd2kLVFsY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.127.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51065
Signature Algorithm: sha256WithRSAEncryption
81:79:e7:9e:bf:69:bb:e2:c5:72:84:1e:38:47:42:29:26:f0:
75:88:87:61:a1:9f:ab:3b:da:d1:99:81:6b:c1:50:24:ee:c9:
58:ee:79:09:d1:fd:fe:44:05:b8:f6:d7:6a:01:94:db:d4:39:
36:72:a4:00:01:fb:93:2b:a2:92:1a:e1:13:f9:4f:3f:3a:01:
94:1b:f5:b8:f5:b8:03:01:44:f4:4a:b5:1b:c1:86:ba:10:38:
99:d4:6e:7c:60:f9:3f:2f:f4:df:41:72:06:e3:14:68:60:43:
9b:d7:f6:cf:70:28:05:08:bc:8f:d3:ca:f4:62:29:fb:53:ea:
f0:c1:bf:44:1a:db:c0:01:c5:1e:c1:90:a7:01:68:42:1e:61:
f4:3c:5b:44:dc:ab:5e:33:f0:e6:fd:e8:eb:2e:c1:5f:e2:e1:
ea:7b:91:0f:ba:60:99:a2:e8:d5:6e:47:ff:fc:f6:89:32:29:
40:3e:75:3b:74:77:3c:99:1e:0e:b7:d8:53:b9:af:a2:6b:5d:
88:40:fb:13:ba:63:c2:11:82:4f:66:de:b4:bf:ed:5c:a5:d2:
0c:34:dd:5c:8b:3e:bb:bf:43:a5:0b:59:4c:00:06:c2:90:ff:
7e:d5:f3:99:01:99:b9:08:21:0c:e9:23:9f:29:0b:bd:98:05:
c1:c0:11:0b
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ0vSYOvr0ziHUL2Yed060KZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzI3MTIzNDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzBlM2I3YjVlYjI0ZjA0YjE4Y2I2NWM0MjY4MWRkYTQyZDUxNmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOKGUcKy6dUyKgBX32r4fD3jR5xN
tupTcRjxCJ7UZbEew0dS690x1+1P5bQ8eBq+XFe0FP2P6kNTVnfMWOtopUpVW1g3
HNB4mBsxexaG0uYRZHXzYVeBbNfE8nrTuWIJ3d2gTJMIrCkCArGNS5Hlp2ktsqWP
pZSUO4apsu+0gGrsHEMxxY4DdbXq3qaEw3Sc8fea02tWhjvPjGaxjw86rgUU6JBr
1upx69BtiR3wWppraPFgfh4AaGJ7XdCvgS1ymRtKx9+NZZjQJM4m0btLVczNcBpB
yMNNm+eORm7IGb9prqQSMxXM/bLa8LJR5TZDqC04AVVtQpCVV5rP29U3KwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPcOO3tesk8EsYy2XEJoHdpC1RbGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1L2FjZmI3
NS00Y2Q1LTQ1OTUtOWIzZS0xOTJkNmEzNDNkYTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvYWNmYjc1
LTRjZDUtNDU5NS05YjNlLTE5MmQ2YTM0M2RhMi8xLzl3NDdlMTZ5VHdTeGpMWmNR
bWdkMmtMVkZzWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9h/MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDHeTANBgkqhkiG9w0BAQsFAAOCAQEAgXnnnr9pu+LFcoQeOEdCKSbwdYiHYaGf
qzva0ZmBa8FQJO7JWO55CdH9/kQFuPbXagGU29Q5NnKkAAH7kyuikhrhE/lPPzoB
lBv1uPW4AwFE9Eq1G8GGuhA4mdRufGD5Py/030FyBuMUaGBDm9f2z3AoBQi8j9PK
9GIp+1Pq8MG/RBrbwAHFHsGQpwFoQh5h9DxbRNyrXjPw5v3o6y7BX+Lh6nuRD7pg
maLo1W5H//z2iTIpQD51O3R3PJkeDrfYU7mvomtdiED7E7pjwhGCT2betL/tXKXS
DDTdXIs+u79DpQtZTAAGwpD/ftXzmQGZuQghDOkjnykLvZgFwcARCw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:17 2026 by rpki-client