Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
File: eMRsCX4Xa85siVwe10S_pD6z3G4.cer (raw, json)
Hash identifier: 3x/mI6s5zNlwT739qlyXfG4GJ4xlT6t3HaJh27duJH4=
Subject key identifier: 78:C4:6C:09:7E:17:6B:CE:6C:89:5C:1E:D7:44:BF:A4:3E:B3:DC:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F95CE26319065953C5798864620BC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 58321
AS: 196903
IP: 5.104.248.0/21
IP: 81.161.192.0/20
IP: 91.232.44.0/23
IP: 109.199.0.0/19
IP: 109.207.48.0/20
IP: 176.227.160.0/21
IP: 178.249.88.0/21
IP: 185.34.76.0/22
IP: 185.73.88.0/22
IP: 185.80.212.0/22
IP: 193.242.168.0/23
IP: 195.3.232.0/22
IP: 2a00:ffc0::/32
IP: 2a04:4c0::/29
IP: 2a05:40c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 14:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:5c:e2:63:19:06:59:53:c5:79:88:64:62:0b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78c46c097e176bce6c895c1ed744bfa43eb3dc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:72:fb:78:36:68:e1:f4:17:98:60:ae:cb:
b7:db:99:5e:3f:01:1c:16:81:8a:05:5f:4b:a0:9b:
d9:d6:a1:22:fc:e4:b3:c8:ac:c4:ac:22:d2:e7:57:
ce:f8:8d:3a:4b:a2:6f:6d:0f:84:0e:ba:9c:e1:e0:
67:ed:41:f4:f7:4e:a6:d4:fc:cf:67:8b:9b:1d:42:
31:2f:e6:56:e7:40:66:ae:1c:29:e9:5b:06:10:a3:
86:a0:b0:17:e5:38:35:d6:06:77:e6:20:0a:a1:3f:
9d:19:6d:91:20:9a:e3:c8:74:01:f0:c0:3c:fd:01:
ce:bd:f0:5b:2e:1c:3a:e2:1a:5c:a1:56:5e:22:36:
52:fc:bf:f9:ed:87:a7:42:b2:d7:80:02:6a:04:be:
30:fc:69:3b:35:88:3c:91:b1:dc:3b:d0:64:db:02:
95:b6:1a:2f:45:54:32:a0:62:b6:91:c7:c0:90:0f:
eb:d9:70:8c:ac:53:04:e3:03:88:96:02:27:b1:bd:
61:ed:16:0b:cb:a3:1a:83:4d:56:a0:1d:23:45:1f:
8e:24:f2:57:57:78:9e:15:1b:c2:de:72:96:7b:4f:
07:99:5d:32:bf:c4:0c:59:5a:e2:bb:20:2d:22:48:
04:68:87:a9:8d:bf:fe:61:dc:7e:76:5f:11:da:96:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:6C:09:7E:17:6B:CE:6C:89:5C:1E:D7:44:BF:A4:3E:B3:DC:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.248.0/21
81.161.192.0/20
91.232.44.0/23
109.199.0.0/19
109.207.48.0/20
176.227.160.0/21
178.249.88.0/21
185.34.76.0/22
185.73.88.0/22
185.80.212.0/22
193.242.168.0/23
195.3.232.0/22
IPv6:
2a00:ffc0::/32
2a04:4c0::/29
2a05:40c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58321
196903
Signature Algorithm: sha256WithRSAEncryption
09:32:6f:c7:e4:21:6c:01:f0:a2:df:39:88:8c:ea:d4:6a:8a:
46:d7:de:77:b8:fe:64:5e:ca:43:d4:96:01:7f:e5:3e:f6:06:
3d:07:89:f6:81:53:ad:f2:22:f1:43:e4:10:43:b2:18:e3:8b:
21:64:54:49:20:7c:1f:59:d9:22:ee:4e:f1:8d:25:66:45:b0:
52:35:75:f7:f4:9e:f7:4a:1d:9e:9a:48:d4:a0:7f:06:1d:d3:
6e:0c:21:2c:ee:5d:fc:62:c0:cc:86:27:6f:69:a0:7c:b0:d0:
9c:a5:e2:f2:c2:d6:02:26:31:7e:d3:b5:f5:14:cf:32:93:c3:
31:d1:7f:77:89:96:4e:eb:4e:f5:4d:4e:c3:2b:7e:1d:ba:15:
15:cf:1c:09:b1:27:7c:c6:7c:33:23:9a:31:ea:17:82:ff:72:
1b:12:31:00:62:b7:7b:b2:af:32:90:42:7a:e9:c7:35:61:54:
ea:69:e9:ca:b0:b5:15:d9:df:be:86:e7:c5:70:94:ad:4b:9c:
aa:52:34:15:aa:d6:ef:38:14:de:21:d6:b5:55:df:8d:18:e2:
9b:64:c0:75:a7:ad:39:b7:72:dc:84:bd:78:1f:25:22:a1:65:
0f:d7:aa:f9:3d:ea:ee:6e:eb:a4:03:70:93:b2:14:60:7c:f9:
03:fa:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 18:39:01 2026 by rpki-client