Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
File: sWpN-xkGscZ6u1SnCnbMkutIYn0.cer (raw, json)
Hash identifier: kzbtcruVISrdLcUR1LFo77HlKKJQeg5FTpo4F/WhKGE=
Subject key identifier: B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CDBE026E82975E2782858145A2DC96DD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Mar 2026 07:50:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.109.57.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:e0:26:e8:29:75:e2:78:28:58:14:5a:2d:c9:6d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 07:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b16a4dfb1906b1c67abb54a70a76cc92eb48627d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:d5:dd:f5:5d:9f:44:5e:f4:dd:47:fa:89:
f5:51:84:e5:85:e8:6f:e9:ea:37:26:ab:e3:d6:cf:
91:7a:16:65:07:ad:e8:be:4e:ec:ea:ca:3c:10:64:
fd:45:91:99:23:25:03:68:91:2d:5e:ef:e5:b9:8e:
59:40:4f:6d:23:7f:f1:86:4a:f0:80:73:18:ab:8a:
51:ad:48:94:91:e4:17:3a:77:c6:30:bc:29:db:49:
f4:6c:1b:86:cd:d0:a8:7d:63:3a:39:1f:ed:43:be:
65:96:c3:e4:b5:49:2c:5f:c7:e7:e6:82:d1:f8:cb:
d4:89:7a:2a:7f:34:75:5c:d4:53:4a:cb:bc:90:f7:
e0:43:88:94:68:7a:a0:4a:cc:f5:b7:e9:01:cb:61:
49:29:c7:48:12:6e:1e:ac:89:bb:fc:fc:05:75:8d:
ba:45:24:9d:13:f3:57:15:bd:e0:39:04:ba:e2:4c:
a8:c8:87:64:2e:93:69:f3:2b:47:2f:84:f8:d9:7a:
59:fb:1e:a9:e8:12:b8:53:e0:ee:19:fb:47:0e:0a:
c3:64:a4:d8:95:c3:ea:fa:0c:21:56:13:5b:5c:61:
9d:55:07:98:7a:5e:2b:d4:83:e7:c7:6d:1f:3b:45:
00:f2:5a:0d:cf:39:60:47:8c:b5:0f:53:b3:71:8d:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fa:a0:05:4c:89:74:d4:f8:14:1e:c7:39:9c:21:8d:e6:e2:
ea:2b:5e:88:25:5c:dc:d6:62:d6:15:e2:68:50:0c:9b:fb:32:
64:f8:2f:28:68:c2:32:96:a0:1e:8e:cb:e6:04:f1:de:e4:26:
98:58:79:6c:9d:d8:67:1a:7a:60:21:a1:24:e1:66:7f:d5:c8:
88:79:51:b6:16:b7:c8:83:2a:14:b2:8c:10:d5:76:1f:e3:1a:
7a:cb:3d:82:4e:9b:1f:3d:c4:e1:45:2e:b1:d4:b0:26:16:48:
bc:92:7d:77:15:95:25:c5:0d:aa:54:d9:57:5c:38:96:14:46:
a9:67:ab:d0:cb:d0:65:7a:75:94:46:0d:79:95:ee:97:a5:cd:
84:fa:f2:ce:0d:0e:30:35:ae:66:2e:5c:91:24:09:c0:da:b8:
2c:5f:df:2f:56:f0:34:c0:5f:91:f4:73:88:9b:ab:43:ff:b9:
ad:d1:32:cf:90:38:8b:4b:ea:bd:b9:2e:da:3f:45:06:96:ab:
fa:80:80:95:44:ad:24:14:6e:e3:93:55:4a:53:a2:7d:65:0f:
1c:9b:21:c0:78:be:1e:9c:75:05:d2:90:6f:a6:6e:a0:63:18:
5a:5b:02:e1:92:7e:ca:d9:c3:96:c2:66:07:65:ce:26:24:86:
10:67:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:20:02 2026 by rpki-client