Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer (raw, json)
Hash identifier: JlXDG0lfh/SCgczbKe3tprpX6px1CWeFYtl36GWPgcs=
Subject key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F40B0C16451F8E10B29D5032B7AA47C02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Jul 2026 07:45:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43823
AS: 44306
AS: 44325
IP: 45.142.8.0/22
IP: 46.151.128.0/21
IP: 85.222.160.0/20
IP: 91.199.77.0/24
IP: 91.199.79.0/24
IP: 91.233.36.0/23
IP: 185.151.132.0/22
IP: 213.186.0.0/19
IP: 2a02:2608::/32
IP: 2a0e:d2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:b0:c1:64:51:f8:e1:0b:29:d5:03:2b:7a:a4:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 8 07:45:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:cf:4a:28:c1:11:e1:8d:e3:eb:d3:22:c7:
ba:e8:73:8f:08:b0:31:0a:69:0c:8a:a3:c2:b9:bb:
ce:e0:a0:43:25:c3:19:a9:63:42:1e:e8:d2:e2:a4:
be:03:85:a3:7c:82:9d:f9:a4:4e:ca:c7:8f:09:a7:
7f:dd:d0:f3:f4:92:08:6c:12:ff:f3:d4:0c:b4:52:
eb:ed:85:65:f9:45:a7:61:f9:27:ed:ff:d8:e8:ac:
da:63:fc:bf:24:76:3f:d1:23:54:6b:46:68:fa:0e:
69:ca:f0:da:fa:fa:7b:ec:ac:e5:f9:27:4d:31:79:
a5:f6:d3:62:25:b9:b0:15:b0:0b:10:25:04:b3:62:
76:e2:6f:fb:da:97:ce:e1:6b:40:2d:b4:fa:13:ec:
d0:9b:09:dc:dd:0f:ba:3f:3c:14:82:4d:38:9f:42:
aa:bb:b2:ec:3b:bd:53:66:5a:df:ef:98:38:71:df:
05:a9:a1:10:23:e4:76:5d:2b:e1:0d:f4:25:58:2b:
82:4d:5f:97:ff:1a:e9:cd:d8:79:83:df:eb:ef:8a:
f3:9c:f4:40:06:c7:e5:64:41:d8:af:e4:4c:a7:31:
d2:19:3e:f5:d2:81:3b:4d:a7:97:cc:9a:66:e4:5b:
2d:51:dd:df:71:66:e6:f8:62:e1:57:62:f2:b3:8d:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.8.0/22
46.151.128.0/21
85.222.160.0/20
91.199.77.0/24
91.199.79.0/24
91.233.36.0/23
185.151.132.0/22
213.186.0.0/19
IPv6:
2a02:2608::/32
2a0e:d2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43823
44306
44325
Signature Algorithm: sha256WithRSAEncryption
9c:08:b9:cc:97:f8:05:a0:ab:cb:f6:ad:a2:15:60:38:ff:a5:
92:1f:b9:6c:ef:c8:ad:1e:59:a9:5d:d0:e8:18:7c:ee:2b:e4:
16:0a:82:a9:85:ba:a2:91:6d:bc:74:8b:45:0d:57:ca:c3:58:
73:0f:25:5b:5f:79:f9:24:a2:6b:59:fa:64:69:88:1c:ca:46:
b0:9e:bb:b7:6a:76:8e:00:27:aa:42:fc:94:da:8b:77:91:11:
6a:96:4e:c5:5c:f2:58:24:74:2b:1e:aa:63:d8:d7:93:f7:05:
85:d5:17:90:f3:b0:c9:9e:c1:44:23:f5:00:07:a4:11:56:61:
ad:a8:ce:20:8b:9b:e6:5e:e4:53:f2:f5:4f:aa:3b:d0:8a:5c:
48:4b:ea:92:fc:83:33:80:cf:d5:46:8b:51:b3:4c:98:3b:02:
22:aa:80:35:47:8b:32:57:da:ed:e3:db:78:4e:07:1d:d4:06:
d1:fa:35:e6:15:60:f4:3e:0b:bb:9d:25:d6:19:5b:70:0f:c8:
8e:a7:ec:4d:03:91:2a:6d:b1:2c:08:1c:bb:8d:ad:65:b6:5e:
a7:1c:db:1d:a2:22:c6:99:71:12:29:bf:aa:04:ee:27:3d:7a:
4f:0c:ee:16:b3:7c:55:a5:bf:2c:9e:9d:3e:69:24:4b:26:27:
09:c8:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:14:41 2026 by rpki-client