Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
File: rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer (raw, json)
Hash identifier: HLoYXQknx2YSZnzxx9kqDtRXBcORtR8EKZr4u5/yqik=
Subject key identifier: AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F93B58677245AB639F39D86F939039734
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 24 Jul 2026 10:39:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60336
IP: 83.175.136.0/22
IP: 91.231.44.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:b5:86:77:24:5a:b6:39:f3:9d:86:f9:39:03:97:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 24 10:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acc6e6df87d9996c5a235740ec5e43afd2ded8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:a3:93:c9:3f:21:4d:aa:66:99:78:72:11:
06:39:3c:46:ce:ed:56:35:66:d5:46:1b:42:f8:71:
6f:36:57:bb:5f:a8:6c:19:d7:96:9c:75:76:0f:4a:
20:7f:3d:0c:1d:a3:14:07:b7:6b:f6:93:03:8d:8a:
79:a4:7e:88:85:f9:ed:73:b9:66:78:e2:fd:48:4e:
a8:fb:41:69:75:df:82:40:68:45:0b:ba:f1:82:89:
b3:c2:64:85:24:89:d1:52:04:24:12:1a:c2:4b:a1:
e3:ba:58:2c:5f:29:ac:79:39:d3:a5:5b:35:34:bf:
89:0a:ac:0f:ff:fb:10:55:51:5a:e5:35:99:50:99:
7b:3a:c1:66:3d:06:0b:eb:e9:bb:3a:e1:88:23:8e:
ba:34:ce:25:bb:5e:06:34:94:53:13:fb:99:99:c4:
e8:5c:cc:a8:f4:d8:d4:1f:c0:47:67:f5:39:a1:23:
5d:4f:08:75:0a:6f:5d:cd:3e:d4:45:ef:93:84:89:
6d:fe:a6:9c:ba:7e:6f:d6:c3:9d:b8:3c:5b:c0:f2:
65:3d:34:b7:61:b5:25:58:6d:a5:13:fd:45:7f:30:
dd:02:a8:4c:03:cf:d2:ca:6c:22:3e:f0:d0:3f:82:
2e:87:eb:36:52:0d:5e:a6:58:f7:51:8b:27:50:04:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.136.0/22
91.231.44.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60336
Signature Algorithm: sha256WithRSAEncryption
14:cf:72:0a:67:81:6e:c7:d2:b2:e4:b6:ca:29:97:5f:f2:43:
18:e2:97:df:32:3b:ad:1a:13:46:50:ff:19:ff:5a:42:53:d9:
27:ad:51:6b:79:02:c9:63:41:1b:e4:6c:3b:4e:10:a2:60:5d:
4e:62:79:b2:2e:18:87:c1:3c:3d:d9:14:cb:6a:a6:45:94:bc:
e8:eb:18:e9:2e:22:33:c7:ea:99:60:73:ed:a5:5d:d2:e4:af:
3d:86:db:62:59:5a:44:fa:48:40:1d:bc:e4:69:08:09:99:a8:
d1:5c:fd:2f:c0:d7:72:ab:f7:60:e7:90:fe:e4:41:76:38:fd:
ef:97:0b:8f:1c:a4:d8:ae:05:d0:99:04:4e:65:bc:a9:5a:26:
fa:97:bb:70:3a:64:e3:08:5c:84:0f:70:75:55:6f:c7:cc:f0:
bb:36:68:9b:c8:89:cb:1c:6b:5c:64:11:f4:1b:b9:b5:2f:68:
72:4d:b9:32:88:9b:a2:1e:05:a5:da:f0:fe:41:10:fc:ff:a3:
27:be:46:e6:6d:7a:4e:9f:2e:18:f3:a4:14:69:06:e5:7f:cb:
51:e9:f3:10:5f:97:a6:00:8d:80:d5:5a:73:20:1b:10:ce:88:
6a:cc:69:37:ec:9e:a4:22:7a:ef:40:aa:1e:7f:b4:3e:6b:8a:
3f:fc:7d:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:16 2026 by rpki-client