Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
File: CmhbcVcgw2L0zL11CmEz0z6pzUg.cer (raw, json)
Hash identifier: d3VmDMTKICImDCf8JTbC17u2yJ2YRxEgNFX5y+S4R+4=
Subject key identifier: 0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB28CBC8EAC033F0C6261EB32935E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 58083
IP: 91.238.141.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:28:cb:c8:ea:c0:33:f0:c6:26:1e:b3:29:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:69:b0:ca:41:c6:f8:fd:8e:9a:0e:9b:88:
e2:b5:5a:77:37:94:f1:05:68:50:bd:c3:5f:f1:02:
37:31:4a:1f:a4:51:11:a6:45:71:8c:0e:5c:ca:e5:
fd:3c:fd:2f:40:c4:e5:fb:9e:d7:ca:63:a2:95:5d:
f8:5c:74:2d:f8:67:c4:e1:f4:74:02:1c:1f:d9:f8:
23:79:f5:f0:dd:ba:a1:80:22:bb:d4:0a:ee:c7:a2:
b8:7a:d9:5e:f8:f6:af:f2:68:99:c2:b9:e1:da:63:
0b:58:5b:a7:47:74:19:b7:11:88:ea:f8:6e:7a:6b:
61:2c:c8:84:3d:d0:47:c4:8a:50:d1:c0:ad:1f:94:
63:f1:8f:bb:71:f7:42:7a:73:dc:02:3b:86:c7:96:
3d:92:dd:5f:bf:00:59:e9:f9:d7:ca:ed:d1:5f:d5:
50:7b:28:81:e2:74:2a:f8:1c:a4:1d:36:ec:cf:e7:
61:0b:45:12:7b:b5:00:ad:2c:c9:51:fb:2b:68:a4:
62:5c:84:80:47:de:c5:34:bf:8d:df:05:a4:d5:f5:
c5:05:88:89:c7:de:7e:41:08:a7:56:c4:b8:ea:df:
3c:1c:ae:2b:28:f0:e0:9b:0b:f1:7b:13:7c:fb:f7:
96:51:26:17:a7:8e:d5:3f:21:f0:78:6c:8d:ea:94:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.141.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58083
Signature Algorithm: sha256WithRSAEncryption
73:b5:84:11:ed:21:b0:57:bd:2a:64:d7:0a:eb:d3:34:82:65:
bb:f9:14:24:69:02:1f:ed:8e:34:74:41:2b:94:4d:b1:e1:96:
9d:21:06:4c:43:eb:34:8f:56:f8:be:02:70:5a:9b:2b:8b:6c:
58:6d:44:8e:8a:13:3c:15:59:45:64:05:43:a3:73:1e:16:81:
d9:8b:c1:4e:74:f8:94:6c:e6:98:7c:f5:89:d5:bb:35:0b:85:
ec:d5:da:75:fc:89:1e:24:6e:5e:5c:92:69:89:ab:94:8c:bb:
17:77:33:cf:1a:82:5a:b4:20:4f:3b:b3:d4:42:47:fc:b7:79:
10:0a:92:3f:5d:d1:d3:e4:dc:ad:59:b1:6b:1e:80:4e:9b:b0:
3d:b7:19:01:71:91:e7:18:79:c3:7e:92:a6:59:5f:46:f2:be:
2a:d1:32:03:84:83:1b:ac:03:77:31:3b:1b:8a:8c:e2:23:73:
11:0e:23:5f:9e:85:87:76:61:63:8e:db:4e:26:2c:ca:2e:4a:
58:80:cc:64:6f:a9:18:0e:70:03:0a:2f:d4:7e:88:c2:43:0b:
e7:58:ec:15:77:08:d7:f5:74:37:d5:f5:6f:5c:e9:ee:92:4a:
86:eb:d7:67:89:3a:4f:14:38:09:dd:53:a4:3c:b1:86:70:5c:
05:ea:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:01 2026 by rpki-client