Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer (raw, json)
Hash identifier: BZD/KJQgAn9tWx1KCzClnRDNlPR2YVJBJg8Yj2+0i1A=
Subject key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A2F8813538A7BC943CF452E8A6A79E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.213.41.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:f8:81:35:38:a7:bc:94:3c:f4:52:e8:a6:a7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:bb:e2:a7:55:09:21:19:3a:f7:49:78:ed:
d1:ee:5b:5a:46:24:5f:f9:6c:38:c4:e7:20:2a:a5:
69:87:af:dd:d6:49:e8:36:ab:98:95:9b:58:ed:78:
e8:a6:87:75:8d:71:3b:27:f3:e2:6c:03:f3:77:ea:
bf:62:04:36:07:66:78:27:6d:51:8c:cb:41:d4:b5:
7e:42:56:a8:7d:ca:92:fc:3b:2b:a5:59:5e:40:ca:
63:51:1d:4f:1a:3a:27:9d:62:86:40:4a:80:f1:2a:
6c:74:fc:c0:09:b2:03:c4:10:00:fa:33:21:83:06:
9c:00:a7:29:62:fc:76:dc:b7:1f:3b:ba:74:4c:4b:
0f:fd:fa:b9:e6:77:72:63:54:95:c6:b3:fb:a4:79:
b4:10:88:36:35:f9:15:00:98:b8:b2:db:38:f0:57:
5b:aa:d6:f5:51:8c:27:1b:56:0b:4a:d9:52:73:d9:
ae:0f:8a:bd:bf:d1:a5:2b:9d:ff:47:12:4a:17:31:
3f:c6:f8:2f:0e:d0:36:6b:89:39:fe:2b:ec:e2:b0:
28:ae:e1:b5:5a:86:50:a6:db:36:f9:25:21:96:9b:
ac:57:9a:97:e0:7a:f5:d6:2d:b5:80:1a:32:f0:7b:
92:30:ce:d3:22:ba:53:e8:c7:72:f5:2d:70:19:66:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.41.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7e:bc:09:3b:c8:cf:22:9f:8e:75:be:af:51:a6:1a:72:ad:
33:23:43:62:c6:8f:ab:6d:d3:87:fa:31:b5:37:a6:5d:6a:b5:
bb:fa:64:c1:6a:e4:c8:e9:2b:50:31:93:ec:05:2c:bb:05:8f:
e3:c6:3a:08:fa:cd:f9:be:1e:48:7c:64:34:5a:84:00:42:6b:
f4:67:fa:11:0f:e4:15:6c:da:ec:59:30:46:77:cb:99:f4:ac:
d1:54:3b:a8:b2:3c:58:85:b5:4d:ba:44:7f:58:e5:1a:b3:3e:
01:1c:6c:4f:56:03:df:e9:01:a9:97:69:11:ca:a2:78:59:20:
51:70:32:89:89:8e:01:36:86:38:a9:fe:30:ff:19:19:53:3a:
50:fb:97:60:71:cb:00:9f:bd:6a:89:3b:9e:2f:21:74:6d:af:
c6:51:ef:d6:44:ec:92:04:43:e0:08:bf:99:95:6f:30:c1:d5:
9e:56:32:f0:06:9a:bf:fe:67:40:50:c5:17:86:e5:a2:d5:5c:
a5:01:73:c7:ba:a7:62:d4:50:c9:4c:35:cb:ab:62:dd:b8:ba:
ae:bf:f0:e1:33:0a:5c:c0:6d:ca:d5:08:eb:95:77:82:ee:5a:
2d:3f:28:20:1a:a5:8f:53:d7:b9:5e:6e:b8:b8:fc:e4:02:ce:
5f:aa:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:10:33 2026 by rpki-client