Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
File: 1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer (raw, json)
Hash identifier: tiHMzQoREAPucW5t6jfFnwdDi6JawHZqisROeWNN/ZI=
Subject key identifier: D6:6D:02:C2:DE:23:EC:FA:FA:1B:F6:E6:9A:AF:0A:05:3A:D2:A9:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA4FE20963362D714FF4BB4178E6E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29031
IP: 91.201.108.0/22
IP: 193.239.24.0/22
IP: 195.3.132.0/22
IP: 195.69.200.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:4f:e2:09:63:36:2d:71:4f:f4:bb:41:78:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d66d02c2de23ecfafa1bf6e69aaf0a053ad2a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:f9:48:d6:70:3d:ca:26:f2:6f:d8:e0:60:
01:7f:d1:cd:a3:d3:09:1c:ac:13:13:9d:69:a4:39:
d8:c3:4f:7b:6d:df:d7:f2:95:49:7f:e2:0e:94:28:
37:39:b2:f4:a2:e6:e4:bb:37:8b:bf:ad:8a:81:7d:
ee:0e:14:0b:4a:1e:e0:03:21:7f:bc:22:7e:39:a2:
5c:98:8f:45:6a:84:73:40:95:c8:7a:9e:9b:10:c2:
b4:52:6d:4c:c6:52:e7:52:35:ba:1b:ad:34:56:75:
37:8b:b8:b0:cf:6a:ee:af:21:eb:66:9e:7c:9a:a5:
16:37:29:32:71:46:e1:cc:43:81:eb:bc:53:42:92:
50:77:e6:59:79:a3:49:96:7e:01:55:57:e8:c1:e8:
e9:5d:f3:06:f8:98:cc:74:17:21:3b:bd:ab:ce:4d:
d7:b5:8d:e1:2b:0d:78:5d:c2:9d:b3:81:28:dc:57:
f0:77:07:30:4f:af:59:76:0f:ff:7e:24:29:79:3a:
6f:e2:5c:ad:c1:6a:8b:09:2c:0b:93:9b:41:3e:55:
31:76:63:fd:be:48:85:47:0f:86:29:c9:24:83:c7:
db:87:d7:e1:cf:11:44:b4:78:47:6e:0b:19:8a:43:
c0:ca:a3:fe:9c:78:4a:cc:8b:79:a9:c3:d9:8f:8e:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6D:02:C2:DE:23:EC:FA:FA:1B:F6:E6:9A:AF:0A:05:3A:D2:A9:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.108.0/22
193.239.24.0/22
195.3.132.0/22
195.69.200.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29031
Signature Algorithm: sha256WithRSAEncryption
a6:7a:25:60:9f:00:52:95:5f:00:73:b5:8b:91:44:43:6e:7d:
e6:ea:e7:ce:25:8a:69:94:9c:5c:95:ac:1b:22:db:db:81:4e:
23:a3:6b:1e:8e:07:4d:95:15:df:ef:ca:48:40:bd:67:4c:3d:
a3:ab:2b:36:08:d6:55:06:6e:a2:8d:5c:73:7e:4c:8a:d2:83:
ca:28:b0:3b:bc:a0:35:00:a5:4c:44:1a:b9:cd:be:ba:e4:91:
d6:61:76:78:25:01:11:0e:b7:0f:3e:86:04:1e:f0:4e:f7:cd:
c7:5c:27:2b:76:79:d1:8c:9c:ac:b3:25:59:6c:da:b1:81:b4:
17:2e:25:a6:a8:e0:45:be:fb:5b:52:1e:9f:96:c8:d4:ea:c8:
f1:c2:7f:97:04:8a:25:d6:a8:67:bf:eb:5d:af:06:49:46:fb:
87:61:0e:88:64:8f:9b:6c:f8:27:72:8d:51:51:70:32:76:f3:
93:0c:a8:0a:f1:55:b1:23:26:87:38:ea:a7:2e:ec:36:2f:30:
64:0d:20:b9:46:95:ae:4a:59:4c:b5:e9:99:82:8b:ca:48:54:
66:aa:4a:cb:9b:85:6b:06:d1:23:e3:79:cf:d7:2d:29:bf:84:
80:23:55:ca:92:0a:91:c5:4f:01:d7:6c:87:54:17:3d:42:d2:
c5:7f:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:02 2026 by rpki-client