Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
File: Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer (raw, json)
Hash identifier: YCoMTYiRyiUbMNhzbc0db1UpWYHP+9TuNeVcDw+BKMk=
Subject key identifier: 0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAF30B726653A7455C836E8EA139AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48569
AS: 196816
IP: 94.143.24.0/21
IP: 185.21.32.0/22
IP: 2a01:4480::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:f3:0b:72:66:53:a7:45:5c:83:6e:8e:a1:39:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b1f41f96c58b25b634dec7d2aa5f516d2d85594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dc:47:63:6a:55:8b:d4:c6:20:ac:b7:92:dc:
b9:f0:b7:a0:b3:a8:fa:f5:74:28:bb:10:4b:76:4e:
c9:43:52:47:d1:5a:15:be:bf:ee:1e:a3:8d:28:58:
a1:5a:b2:c2:60:39:bc:f9:e1:04:d9:ca:5b:bc:b3:
86:77:4b:43:3e:15:09:d2:8c:ca:f7:73:d7:37:c9:
f2:d8:fc:4c:1c:9f:ee:1e:b7:05:fb:d9:7b:c8:80:
40:7e:e1:ae:6e:32:a1:84:c3:e8:46:8c:33:b0:4e:
eb:ee:bf:4b:60:8a:6f:5b:ae:bd:a6:25:08:b4:ee:
45:36:c9:3f:b8:fc:9e:50:2c:19:b8:2b:e7:1b:c7:
b0:dd:9f:b6:87:18:57:f2:72:e0:5b:5c:c6:3e:f8:
bd:f8:d1:e7:a3:bb:e0:df:a6:6f:c2:8f:c3:6e:b9:
5d:af:ec:d4:83:30:9b:3c:36:d1:52:c4:a0:d6:88:
9e:2f:e7:81:18:d0:b9:4a:00:b1:cf:f4:10:3e:40:
7f:be:f2:f8:3d:7a:5d:e7:08:b0:20:03:2c:3d:bf:
be:09:56:ef:99:0f:b9:c2:60:9b:2f:58:c7:fd:c1:
26:46:20:9d:ae:24:63:46:c0:6f:e3:e8:76:5a:6c:
d9:ab:bf:80:99:d0:70:5a:c0:f5:50:b9:1e:67:ae:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.24.0/21
185.21.32.0/22
IPv6:
2a01:4480::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48569
196816
Signature Algorithm: sha256WithRSAEncryption
0e:a8:cb:58:f2:77:6a:e1:6e:4a:15:e4:b8:1e:f7:fb:35:1c:
a3:4d:40:09:28:63:3d:5a:4b:2e:cb:61:fb:a4:65:95:f3:74:
66:64:93:8d:a1:5f:3a:b7:bc:8d:2a:35:24:0b:d6:b0:f5:79:
ec:eb:d6:3e:94:48:7c:e5:b9:f2:b8:3d:ab:38:9f:97:c8:46:
a5:89:2a:00:93:af:54:f3:74:c9:d8:cc:3f:05:d2:ba:5a:23:
3c:d5:81:4f:15:8e:55:47:32:b7:80:9c:57:45:c1:df:67:15:
61:7f:9b:75:ef:f0:50:e3:c4:0d:db:f1:9c:74:a5:ed:05:48:
20:3a:0d:c3:d1:7a:01:9f:62:01:33:c0:77:ec:a1:cf:ec:fc:
00:6c:67:a3:bf:dd:5b:3a:8c:a1:2c:cf:29:d6:a6:b6:07:ff:
46:2e:c0:fe:17:99:fc:f4:4d:1a:e3:ce:9b:77:71:90:d5:f4:
91:0a:a9:12:81:32:59:a8:b3:0b:ca:de:11:a4:9c:2d:78:05:
87:47:7e:99:85:c6:a2:45:0f:7a:d0:32:10:4e:04:5b:a6:b8:
2c:01:eb:4b:10:d9:9e:8c:7d:de:d3:1a:e5:9b:31:1d:ad:3f:
86:53:ed:c6:aa:63:fa:ea:5a:d3:d6:95:ef:ba:55:e3:b7:1e:
c5:c9:35:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:59 2026 by rpki-client