Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
File: uZVEmZdyeKdVcLNAP006oAsbNug.cer (raw, json)
Hash identifier: rSghnRUDJjtQl2XZCekfSXPLa4cugZDzKI1PxMv0tFA=
Subject key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD74F2B3B6CB42929DED7B44EEC4E476B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 13:41:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8459
AS: 12741
AS: 12887
AS: 12968
AS: 13086
AS: 15503
AS: 15587
AS: 15857
AS: 28982
AS: 29167
AS: 30793
AS: 38944
AS: 41398
AS: 41809
AS: 42401
AS: 43939
AS: 49876
AS: 50408
AS: 51620
AS: 56324
IP: 5.57.128.0/18
IP: 5.226.64.0 -- 5.226.135.255
IP: 37.128.0.0/17
IP: 62.69.192.0/18
IP: 62.87.128.0/17
IP: 62.89.64.0/18
IP: 62.111.128.0/17
IP: 62.148.64.0/19
IP: 62.181.160.0/19
IP: 62.233.128.0/17
IP: 62.244.128.0/19
IP: 77.65.128.0/17
IP: 77.87.136.0/21
IP: 77.88.128.0/18
IP: 77.252.0.0/14
IP: 78.8.0.0/14
IP: 80.238.64.0/19
IP: 81.168.128.0/17
IP: 81.210.0.0/17
IP: 81.219.0.0/16
IP: 82.143.128.0/18
IP: 83.142.56.0/21
IP: 83.142.112.0/21
IP: 83.143.96.0/21
IP: 83.238.0.0/16
IP: 84.38.96.0/20
IP: 84.40.128.0/17
IP: 84.234.0.0/20
IP: 84.234.32.0/20
IP: 85.31.240.0/20
IP: 85.128.0.0/17
IP: 85.202.48.0/20
IP: 85.202.208.0/20
IP: 87.99.0.0/18
IP: 87.105.0.0/16
IP: 87.204.0.0/15
IP: 87.239.72.0/21
IP: 87.239.216.0/21
IP: 89.171.0.0/16
IP: 89.187.224.0/19
IP: 89.200.152.0/21
IP: 90.156.0.0/17
IP: 91.142.192.0/20
IP: 91.145.128.0/18
IP: 91.146.192.0/18
IP: 91.150.128.0/19
IP: 91.192.88.0/22
IP: 91.193.196.0/22
IP: 91.195.232.0/23
IP: 91.202.172.0/22
IP: 91.213.255.0/24
IP: 91.215.228.0/22
IP: 91.220.225.0/24
IP: 93.159.0.0/18
IP: 93.180.160.0/19
IP: 93.181.128.0/18
IP: 95.155.64.0/18
IP: 159.205.0.0/16
IP: 178.16.112.0/20
IP: 178.36.0.0/15
IP: 178.214.128.0/19
IP: 178.252.0.0/18
IP: 185.2.36.0/22
IP: 185.18.176.0/22
IP: 185.58.160.0/22
IP: 185.72.184.0/22
IP: 185.164.140.0/22
IP: 185.244.96.0/22
IP: 188.114.64.0/19
IP: 188.127.0.0/19
IP: 193.19.104.0/23
IP: 193.19.122.0/23
IP: 193.58.232.0/24
IP: 193.91.16.0/20
IP: 193.93.144.0/22
IP: 193.105.180.0/24
IP: 193.107.196.0/22
IP: 193.138.140.0/22
IP: 193.151.64.0/22
IP: 193.192.160.0/19
IP: 193.238.40.0/22
IP: 193.239.224.0/23
IP: 194.6.204.0/22
IP: 194.9.78.0/23
IP: 194.33.185.0/24
IP: 194.146.128.0/22
IP: 194.150.238.0/23
IP: 194.187.180.0/22
IP: 194.242.0.0/23
IP: 195.38.31.0/24
IP: 195.74.56.0/22
IP: 195.85.209.0/24
IP: 195.114.160.0/19
IP: 195.128.172.0/23
IP: 195.128.180.0/23
IP: 195.160.174.0/23
IP: 195.222.100.0/22
IP: 195.225.248.0/22
IP: 212.49.32.0/19
IP: 212.106.0.0/19
IP: 213.17.128.0/17
IP: 213.134.128.0/19
IP: 213.146.32.0/19
IP: 213.186.64.0/19
IP: 213.195.128.0/18
IP: 213.216.64.0/18
IP: 213.238.64.0/18
IP: 213.241.0.0/17
IP: 217.30.128.0/19
IP: 217.197.64.0/20
IP: 2001:16b0::/32
IP: 2001:41b0::/32
IP: 2a00:1d00::/32
IP: 2a00:1d18::/32
IP: 2a00:7340::/32
IP: 2a01:6800::/32
IP: 2a01:af40::/32
IP: 2a02:2270::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:4f:2b:3b:6c:b4:29:29:de:d7:b4:4e:ec:4e:47:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 13:41:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:fb:73:7e:a9:68:bb:64:38:d5:52:43:89:
0e:af:ab:ee:c7:46:c6:62:75:1d:22:f6:70:e4:3b:
35:5e:60:be:46:cc:da:c3:a2:78:90:cd:e9:25:e5:
42:9a:1f:20:f3:76:c4:e7:eb:aa:b6:5f:f3:36:43:
39:e2:8a:e5:18:e0:36:c2:3b:1d:a2:b5:25:58:5b:
d7:f6:02:be:14:41:bc:40:17:5f:02:53:1e:36:1c:
e6:91:65:75:02:60:23:1a:12:be:01:56:62:58:dc:
20:08:3f:fd:30:b7:6e:e2:88:90:1a:91:79:00:1b:
c4:e2:56:d0:1a:09:37:80:56:a5:8f:15:90:b5:ff:
aa:c7:7e:e7:59:33:6c:75:cf:e2:5f:dc:27:26:aa:
02:3b:31:db:88:1e:45:e7:0a:8d:90:76:ec:d6:82:
e4:6a:36:13:e4:6c:3e:f2:83:15:ee:8e:22:75:02:
3d:2f:5b:bb:9f:9e:e1:7b:b6:3b:95:79:9a:bf:eb:
4b:73:5e:08:bf:e6:e3:47:61:46:5e:3f:1f:e7:d0:
fc:5e:d6:e4:b3:78:4f:c5:4f:df:94:10:52:6a:78:
46:4b:c5:74:02:55:bc:af:c3:cf:ef:bf:e3:31:2f:
0c:05:13:6b:35:a1:3e:9d:75:eb:c2:80:1b:51:b0:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.128.0/18
5.226.64.0-5.226.135.255
37.128.0.0/17
62.69.192.0/18
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.128.0/17
77.87.136.0/21
77.88.128.0/18
77.252.0.0/14
78.8.0.0/14
80.238.64.0/19
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.142.56.0/21
83.142.112.0/21
83.143.96.0/21
83.238.0.0/16
84.38.96.0/20
84.40.128.0/17
84.234.0.0/20
84.234.32.0/20
85.31.240.0/20
85.128.0.0/17
85.202.48.0/20
85.202.208.0/20
87.99.0.0/18
87.105.0.0/16
87.204.0.0/15
87.239.72.0/21
87.239.216.0/21
89.171.0.0/16
89.187.224.0/19
89.200.152.0/21
90.156.0.0/17
91.142.192.0/20
91.145.128.0/18
91.146.192.0/18
91.150.128.0/19
91.192.88.0/22
91.193.196.0/22
91.195.232.0/23
91.202.172.0/22
91.213.255.0/24
91.215.228.0/22
91.220.225.0/24
93.159.0.0/18
93.180.160.0/19
93.181.128.0/18
95.155.64.0/18
159.205.0.0/16
178.16.112.0/20
178.36.0.0/15
178.214.128.0/19
178.252.0.0/18
185.2.36.0/22
185.18.176.0/22
185.58.160.0/22
185.72.184.0/22
185.164.140.0/22
185.244.96.0/22
188.114.64.0/19
188.127.0.0/19
193.19.104.0/23
193.19.122.0/23
193.58.232.0/24
193.91.16.0/20
193.93.144.0/22
193.105.180.0/24
193.107.196.0/22
193.138.140.0/22
193.151.64.0/22
193.192.160.0/19
193.238.40.0/22
193.239.224.0/23
194.6.204.0/22
194.9.78.0/23
194.33.185.0/24
194.146.128.0/22
194.150.238.0/23
194.187.180.0/22
194.242.0.0/23
195.38.31.0/24
195.74.56.0/22
195.85.209.0/24
195.114.160.0/19
195.128.172.0/23
195.128.180.0/23
195.160.174.0/23
195.222.100.0/22
195.225.248.0/22
212.49.32.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
217.197.64.0/20
IPv6:
2001:16b0::/32
2001:41b0::/32
2a00:1d00::/32
2a00:1d18::/32
2a00:7340::/32
2a01:6800::/32
2a01:af40::/32
2a02:2270::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8459
12741
12887
12968
13086
15503
15587
15857
28982
29167
30793
38944
41398
41809
42401
43939
49876
50408
51620
56324
Signature Algorithm: sha256WithRSAEncryption
65:76:03:bf:f7:44:93:bd:e9:35:d0:93:e2:23:b7:20:71:1e:
63:c8:32:1d:2a:01:36:5c:d2:45:14:66:f5:0c:1c:a9:87:dc:
71:ba:b1:d1:b8:0b:6a:2e:e7:2c:88:8a:1e:8c:05:6a:89:df:
bd:6d:9c:7b:cc:90:7f:69:7c:cb:c4:86:23:0b:cd:9a:58:c9:
57:29:3f:ed:6c:b0:d4:45:51:8e:10:e0:d2:7e:0b:da:b4:9c:
36:52:f6:a6:16:f5:7b:0f:53:fd:ad:78:ad:19:4d:55:a0:0d:
00:30:73:e5:e0:1f:7b:9a:f3:2a:67:97:f4:fc:e8:82:54:0f:
c2:1a:20:ca:2a:cc:35:6a:6d:c7:2f:e2:f5:21:ac:93:5e:c4:
c4:cc:62:de:d7:11:cb:f4:52:0b:22:86:e8:75:7a:49:f1:fe:
21:77:e2:62:1e:66:80:1e:4a:26:1c:61:af:96:1c:1f:50:00:
8e:d5:af:64:5b:62:b4:ca:bb:4b:77:2c:6f:51:bf:73:5e:ab:
0c:49:ff:b4:3c:2b:48:38:96:48:8e:63:0e:20:91:db:5f:74:
61:3d:a5:3e:f4:b1:c7:85:94:d3:e9:ba:10:30:58:71:f6:a4:
31:e2:ef:ff:b9:54:cb:e5:f2:d6:dd:70:4b:06:51:22:f1:37:
23:b5:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:02:15 2026 by rpki-client