Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
File: 9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer (raw, json)
Hash identifier: 1QDVDsIRPZM5ueZuJWDhBVnnW4wXdofRe3f5hPXIvRc=
Subject key identifier: F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78353F348D2FE2AD228B7218E08087CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212554
IP: 84.252.88.0/22
IP: 2a09:5b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:3f:34:8d:2f:e2:ad:22:8b:72:18:e0:80:87:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:7f:0a:2d:5a:7d:1e:55:e7:c1:04:53:2b:
f5:aa:da:36:d9:33:0a:e9:e7:08:31:56:11:a3:81:
88:62:14:a1:d8:c5:20:59:df:a9:99:e5:1c:7a:b5:
19:cb:21:80:66:79:19:0f:69:35:5d:09:44:a9:79:
70:4a:a7:e2:ef:f6:8f:46:3d:27:e8:8a:d4:04:2a:
c2:ae:ec:fc:bd:63:cf:8b:3d:a8:5a:ec:d9:cf:94:
47:6a:0e:a5:22:59:48:59:c9:43:00:ab:cf:e8:87:
68:7f:0b:7e:9a:5a:fc:e6:77:a5:97:d1:10:87:f4:
c3:f0:20:d7:36:75:af:8c:7b:4a:39:a7:33:4b:0e:
7d:a5:a1:d6:70:89:03:83:db:b8:ea:f3:22:84:86:
06:95:38:63:3f:70:10:cd:7e:0e:12:b7:6a:e5:58:
28:2d:93:1b:aa:bd:b4:b4:a5:da:47:c9:a7:03:02:
9c:07:a0:d4:4f:f6:46:44:bf:28:be:67:e4:38:fa:
3f:0c:1f:63:9c:c5:c6:ec:78:16:e5:eb:7d:2f:e8:
19:b3:61:4e:13:65:8a:3c:2c:fa:38:cf:92:82:9c:
78:cb:96:5f:eb:6d:92:2c:7e:da:f0:d6:79:d6:13:
82:3f:5a:d4:8c:5d:bb:4d:f9:89:5a:48:87:4d:bf:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.88.0/22
IPv6:
2a09:5b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212554
Signature Algorithm: sha256WithRSAEncryption
86:1f:a5:e8:39:2a:6e:0a:3f:33:d8:43:4c:2f:5a:c9:8a:6b:
55:49:f2:4b:73:47:cc:f3:4b:12:0e:e2:ed:fd:c9:04:a8:46:
bc:47:6c:00:27:7e:77:b5:be:ff:7c:30:d9:6f:62:22:36:f2:
7b:a9:f6:6c:72:b8:21:e5:92:00:8f:7c:c5:1c:5d:4e:5b:b1:
14:35:85:97:90:9a:ed:af:2c:fd:2c:c9:e9:28:c7:f7:30:6a:
43:f8:cf:a3:58:58:9d:9c:28:21:14:00:90:35:da:09:a8:c0:
7d:56:37:d2:87:43:68:84:94:0d:c9:b8:8a:99:4e:c2:0e:a0:
b7:a6:43:f4:27:89:cc:f9:6f:9f:31:3c:33:07:38:25:1a:ff:
fe:8d:61:6f:b9:94:e4:0c:2e:3e:ad:5f:87:e2:44:9b:34:7b:
ee:29:ed:c5:3f:07:fe:74:5d:ee:c0:b6:d5:7a:33:1b:8f:63:
24:12:09:20:e8:3c:62:b9:f2:59:89:44:49:3c:da:a5:39:8f:
24:49:05:94:98:ff:8c:9a:a3:e4:ec:c7:69:73:ac:8e:f3:63:
3d:1d:f7:b1:b6:42:db:ea:ed:4f:2d:30:7a:0d:e6:15:7a:b9:
25:ab:1f:86:2f:ec:4d:ac:f1:00:18:12:1f:88:f3:8b:13:99:
f6:ae:80:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:17:54 2026 by rpki-client