Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.cer (raw, json)
Hash identifier: JuEx0npEFNt9wDdOgPuST3Q6rJSOPnfLdVYwsiLEgtU=
Subject key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CAED09BB9C9CE8A083549FBC848591778
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:50:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43858
IP: 79.108.144.0/21
IP: 91.198.199.0/24
IP: 91.244.246.0/24
IP: 146.255.168.0/21
IP: 185.11.160.0/22
IP: 185.80.176.0/22
IP: 2a03:39c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d0:9b:b9:c9:ce:8a:08:35:49:fb:c8:48:59:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 13:50:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:4d:af:1e:b7:84:6a:03:e1:aa:41:99:b8:
b8:a1:d6:91:92:85:99:c5:75:f9:48:bb:62:54:7e:
00:55:78:80:d2:4c:e6:77:9d:4e:dc:3e:85:ac:92:
0f:5f:8c:0f:e7:23:62:e4:9c:03:69:d2:25:da:7d:
b6:50:67:c9:a8:39:7d:38:17:34:75:ef:f1:88:02:
86:a5:57:4e:6f:a3:37:32:03:4c:7d:dc:78:6a:08:
ae:03:a9:c5:5d:0a:b9:77:d7:0f:3e:ce:de:9a:61:
97:86:34:53:e2:72:85:a6:90:b3:2d:23:c6:fb:45:
7b:34:16:c8:cf:48:8d:82:9f:9f:08:0d:6a:cc:de:
d7:35:92:7d:46:82:df:8d:97:f4:73:25:08:8e:3b:
3e:06:4d:36:2f:d6:de:6c:88:0c:92:eb:81:4b:ea:
7c:15:b7:a8:73:4f:89:13:76:14:0a:b3:23:b4:73:
02:c7:15:16:b6:60:1e:39:b2:18:5c:69:a4:d6:37:
2e:af:8d:9c:47:27:fd:30:01:a0:3a:5c:d8:43:cd:
7f:05:5a:a9:27:54:ec:2b:1f:1a:b4:e4:6a:39:cd:
35:b9:b1:c5:1d:31:db:b4:12:6b:9a:35:92:13:94:
26:b8:b6:4f:75:e7:51:35:a1:2a:cb:56:6d:40:5a:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.108.144.0/21
91.198.199.0/24
91.244.246.0/24
146.255.168.0/21
185.11.160.0/22
185.80.176.0/22
IPv6:
2a03:39c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43858
Signature Algorithm: sha256WithRSAEncryption
4f:91:4e:36:5c:bb:e7:92:81:c4:4d:54:65:ac:cf:5a:3d:57:
74:43:6d:6e:de:d3:16:76:92:07:6a:6f:1a:c1:12:87:7a:bc:
02:6d:f3:43:28:32:aa:8e:3c:49:3c:a6:5f:4c:c5:b4:be:40:
0d:29:a2:13:c5:6b:bc:70:74:37:5c:a4:15:24:b1:2a:8c:27:
ec:3b:70:cf:17:61:5e:f9:e2:6f:d3:cd:6d:64:35:b6:5c:1d:
ba:44:06:c6:ea:7f:f0:0b:20:a4:5d:fe:81:d3:00:b5:0e:c7:
b3:1d:33:50:8e:93:88:3a:b3:bc:00:ca:b6:16:7a:e5:a6:6b:
a4:0c:30:b2:b8:f6:4b:af:e5:e1:41:04:96:81:be:7b:9a:b6:
5d:9c:25:6c:2f:92:13:04:5a:4e:9e:c4:49:e9:30:cc:74:bc:
06:3a:d8:53:f6:30:90:26:5b:15:79:d3:9f:27:e0:4b:4c:24:
0e:74:e0:ba:e5:b7:52:ea:37:75:2b:f4:4d:da:e1:25:f2:82:
46:6f:fe:6a:62:02:44:97:9a:ff:a1:f8:dc:22:41:a1:a2:92:
26:24:73:a0:c5:0d:dc:7f:aa:e6:ac:be:34:bb:b4:2b:91:17:
ab:12:18:6d:0f:7c:51:8c:bc:eb:53:de:55:3b:e7:c2:73:a7:
28:1e:c9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:36 2026 by rpki-client