Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer (raw, json)
Hash identifier: 9+yHoXiFeB/g9waDqUebXuARmQ+/IVUuhqwWL7QmtBY=
Subject key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EF92EBA226FCD89BAA56352765B6EC754
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Jun 2026 10:30:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215261
IP: 45.146.6.0/24
IP: 94.156.37.0/24
IP: 2001:67c:fac::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:2e:ba:22:6f:cd:89:ba:a5:63:52:76:5b:6e:c7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 24 10:30:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e35607a494200ff1f3d599e25fc013f38640cd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:dc:87:f5:84:41:16:b8:37:3c:78:f9:24:
b0:0c:d7:43:44:ed:bc:a8:58:1a:33:5e:08:90:7e:
a3:cd:fd:b0:f6:16:94:70:cd:43:e8:57:0e:6b:97:
db:b6:bd:96:15:e6:9e:ac:35:61:8c:50:2f:1f:24:
55:d1:73:23:df:06:25:e6:84:fd:19:10:6f:0a:74:
ac:68:1a:08:7f:1d:7b:ae:0a:65:ba:e2:80:49:23:
0a:64:4e:10:a7:82:07:7b:79:10:90:04:8d:65:eb:
3d:b9:75:75:17:03:98:03:4c:44:f4:83:ed:49:a2:
7c:77:a0:44:de:44:20:93:93:e5:33:cb:c3:5a:7c:
77:d4:48:b8:dc:06:37:19:45:0b:fd:63:4c:38:8d:
b7:75:30:01:ea:64:bb:97:de:85:62:4c:37:43:ae:
d3:e0:01:57:b1:f3:03:7c:c5:f5:a0:b0:d0:a2:ce:
eb:9b:ac:2d:cf:25:9d:89:f2:9b:a5:6a:0c:a7:56:
cc:92:05:4f:7e:b1:fa:e8:14:f9:00:7f:5f:39:f2:
a0:5d:f7:85:06:05:c3:63:a6:f5:ac:b5:ed:41:6c:
c0:b7:11:b8:55:85:67:a4:a7:a1:6d:85:0a:95:82:
03:11:85:cf:72:16:40:5d:6a:3f:d0:01:56:1a:fd:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.6.0/24
94.156.37.0/24
IPv6:
2001:67c:fac::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215261
Signature Algorithm: sha256WithRSAEncryption
82:61:47:38:7a:ab:da:ea:15:42:43:6c:91:ae:54:24:10:c8:
a6:6d:93:26:73:56:1a:7d:40:14:d7:02:6c:da:5a:32:6c:51:
33:55:42:d9:73:70:82:25:6c:1c:32:86:a0:8e:b7:dd:33:cf:
42:38:13:4e:5c:06:61:5d:6e:ec:a6:fa:39:57:70:d3:e6:a7:
ce:09:8d:7c:c1:d3:8f:2c:58:e4:f6:cd:4e:9e:cd:75:49:d8:
bd:e1:b8:cd:fa:23:23:86:a1:c6:0b:87:83:43:a4:ff:03:12:
42:b0:04:99:8b:4c:05:18:90:fb:d5:be:4d:ae:0f:b4:cb:c9:
5f:30:67:a7:ba:94:ac:51:fb:34:e6:ef:52:c0:81:48:bc:8d:
03:85:9b:88:c0:ef:85:a8:93:f6:bc:5c:ea:b3:d2:f0:c9:ba:
d8:dd:7e:2f:43:0b:c7:0f:1f:7c:ef:f2:e1:df:b4:f4:78:79:
90:a4:1d:74:57:c7:7a:72:bd:68:38:5a:13:41:48:46:c3:c2:
dd:58:ed:65:07:cb:c8:db:9f:7d:52:e0:40:84:4a:5d:77:a2:
f0:44:0c:86:c1:a0:e7:07:c4:2b:b1:1d:cf:52:70:39:67:d0:
d2:59:77:a9:dc:2f:fb:44:02:a7:ae:26:18:08:54:df:03:d5:
96:44:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:20:12 2026 by rpki-client