Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
File: 9U47eX9Lo36_cYmkwU8FINfPMNc.cer (raw, json)
Hash identifier: na4VIQiZIToy/lj1cysgO6dnM6esLd5RUUFURWH+xQ0=
Subject key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C93B92BEAA88CDC8101588A042FA4B6C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 07:35:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213943
IP: 193.3.234.0/23
IP: 193.163.131.0/24
IP: 2001:678:11bc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:b9:2b:ea:a8:8c:dc:81:01:58:8a:04:2f:a4:b6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 07:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:a7:9f:8d:d0:a2:41:a4:8e:31:6d:cc:c0:
46:80:18:54:6c:ed:b3:69:bb:3d:1b:94:80:a6:ff:
59:2f:7c:d8:f5:30:ce:c0:bf:ac:da:1f:6c:15:19:
d3:78:0c:74:48:f4:f2:6a:bd:9b:7a:25:94:a2:a9:
75:4e:dc:e1:0a:b6:ed:f9:cb:be:fa:3f:47:c1:ff:
a6:8b:b9:dc:e1:db:c7:4d:6e:aa:37:17:99:ad:d1:
32:4b:3e:0f:b3:a0:4b:89:cc:8e:4d:f7:61:b2:04:
71:10:07:69:67:e4:1e:4f:4c:87:29:c4:74:0e:0d:
9c:41:8d:c4:00:28:db:1d:60:2e:4c:d5:a8:57:87:
27:60:af:4f:7d:9f:69:fa:d3:3a:1b:15:5f:d6:d5:
7e:0f:91:d9:67:74:03:86:e6:e5:64:a2:cd:39:27:
0b:cf:99:08:3b:28:2b:9c:7b:f2:73:fd:8d:fc:83:
82:1b:93:3d:37:47:21:64:bf:db:46:e5:6e:e4:df:
46:08:3a:a9:30:f0:51:54:04:72:bf:6b:fd:f7:bf:
ff:ff:16:d7:0d:1d:a9:cb:2e:19:c9:ee:b3:ea:9b:
1c:a5:25:14:ca:7d:7e:74:a1:f1:ff:6c:13:dd:c0:
25:07:02:51:50:e8:0d:64:b6:92:d0:02:ea:fe:c1:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.234.0/23
193.163.131.0/24
IPv6:
2001:678:11bc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213943
Signature Algorithm: sha256WithRSAEncryption
8f:8b:61:ee:c2:ce:5f:45:9a:ff:51:71:00:f6:9f:2b:b4:22:
13:ce:aa:17:79:5a:e6:19:4b:c6:5d:6a:cf:3e:18:2e:72:ee:
43:ef:92:ff:16:f5:1f:64:42:41:ea:f8:2a:2b:fd:1e:59:84:
1c:42:57:bc:24:a1:00:35:45:5d:15:50:ee:ac:65:90:69:f3:
c7:b5:90:b7:03:17:68:05:d5:d1:8b:99:1d:47:3b:f8:a6:84:
e4:9a:4a:24:bb:31:db:2e:ce:34:d3:b8:ba:05:2d:62:9a:7d:
8f:47:7e:13:c7:1a:bc:70:55:10:42:33:f9:3a:98:54:d8:49:
79:19:a9:ed:74:3b:71:e5:69:f1:d8:fd:8f:ca:91:1e:3f:65:
b4:32:e1:47:9f:59:1b:e2:a0:80:71:68:ec:15:e4:7b:3f:48:
da:94:f1:f4:ea:1e:c3:b6:2d:4c:f5:ab:ac:be:c3:84:7e:07:
c3:d4:b9:21:f9:1d:3f:bf:75:f4:1e:a8:4d:4a:11:39:19:f7:
11:22:ec:e0:06:e0:16:fd:3e:90:56:98:7a:6b:9c:2e:ce:d5:
ee:0a:4d:84:7b:e2:a1:a2:1c:a0:a0:d9:95:72:4f:b4:ab:1d:
de:a5:7e:5c:7c:7f:0a:aa:9e:c8:ec:48:21:8c:0b:12:93:b9:
80:46:32:98
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAZyTuSvqqIzcgQFYigQvpLbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjI1MDczNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTRlM2I3OTdmNGJhMzdlYmY3MTg5YTRjMTRmMDUyMGQ3Y2YzMGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU2nn43QokGkjjFtzMBGgBhUbO2z
abs9G5SApv9ZL3zY9TDOwL+s2h9sFRnTeAx0SPTyar2beiWUoql1TtzhCrbt+cu+
+j9Hwf+mi7nc4dvHTW6qNxeZrdEySz4Ps6BLicyOTfdhsgRxEAdpZ+QeT0yHKcR0
Dg2cQY3EACjbHWAuTNWoV4cnYK9PfZ9p+tM6GxVf1tV+D5HZZ3QDhublZKLNOScL
z5kIOygrnHvyc/2N/IOCG5M9N0chZL/bRuVu5N9GCDqpMPBRVARyv2v997///xbX
DR2pyy4Zye6z6pscpSUUyn1+dKHx/2wT3cAlBwJRUOgNZLaS0ALq/sHTlQIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFPVOO3l/S6N+v3GJpMFPBSDXzzDXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzI1OTg3
OS03YjFlLTQ1NDQtODAxMy0xNWU0MWM0MGFlYzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvMjU5ODc5
LTdiMWUtNDU0NC04MDEzLTE1ZTQxYzQwYWVjOS8xLzlVNDdlWDlMbzM2X2NZbWt3
VThGSU5mUE1OYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQBwQPqAwQAwaODMA8EAgACMAkDBwAgAQZ4Ebww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0O3MA0GCSqGSIb3DQEBCwUAA4IBAQCP
i2Huws5fRZr/UXEA9p8rtCITzqoXeVrmGUvGXWrPPhgucu5D75L/FvUfZEJB6vgq
K/0eWYQcQle8JKEANUVdFVDurGWQafPHtZC3AxdoBdXRi5kdRzv4poTkmkokuzHb
Ls4007i6BS1imn2PR34Txxq8cFUQQjP5OphU2El5GantdDtx5Wnx2P2PypEeP2W0
MuFHn1kb4qCAcWjsFeR7P0jalPH06h7Dti1M9ausvsOEfgfD1Lkh+R0/v3X0HqhN
ShE5GfcRIuzgBuAW/T6QVph6a5wuztXuCk2Ee+KhohygoNmVck+0qx3epX5cfH8K
qp7I7EghjAsSk7mARjKY
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:30 2026 by rpki-client