Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
File: K-U9NAqL9Hwb800yVeEC77GBrRk.cer (raw, json)
Hash identifier: hB5kESgClL3XysE1EtbNZ0k4so3BVCMHD5frUpIC4b4=
Subject key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C481A69BC5B8A68262B6FDA63D0FE0E3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Feb 2026 15:10:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 46.236.0.0/18
IP: 81.29.64.0/19
IP: 89.151.64.0/18
IP: 178.236.144.0/20
IP: 185.68.112.0/22
IP: 194.164.114.0/24
IP: 2a02:16f8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:1a:69:bc:5b:8a:68:26:2b:6f:da:63:d0:fe:0e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 15:10:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:c0:93:7f:c2:76:3e:4a:ad:f6:a4:22:52:
a8:44:d6:6d:45:62:2b:03:7a:11:d8:3a:50:3b:65:
01:7e:b7:0e:ef:11:5a:c4:86:df:07:4c:99:64:d1:
50:5d:29:ea:38:94:40:d1:70:81:c3:e5:11:bb:1c:
b8:a9:8e:b8:e7:32:98:12:dc:43:a1:6a:ba:31:48:
fd:28:53:f0:95:63:bf:97:4b:41:3a:e6:a3:a2:90:
8c:3c:d7:0b:cf:5e:4f:90:dd:f9:2c:bf:29:7b:c1:
b3:38:40:c1:15:81:f3:e8:13:69:e0:bc:71:3c:6a:
4b:9a:1f:66:16:a7:c4:b6:c2:88:f1:2c:d7:ad:a4:
a6:19:1c:a5:21:fd:75:55:6b:5e:77:aa:09:37:69:
5d:7b:2d:4b:cd:0d:e5:3b:b3:a2:17:00:06:bc:fd:
75:11:d0:03:17:a3:df:46:a1:d2:ee:b6:95:31:0d:
99:de:d8:6d:77:d7:6c:96:ec:97:d7:e3:50:3b:88:
2c:c7:7d:73:61:44:92:61:c9:45:c6:0c:01:bb:71:
c7:88:01:37:4a:9f:89:30:61:98:4a:a8:9c:31:55:
c1:6f:cf:e0:7c:31:e6:65:7e:bc:9d:8f:a1:89:73:
70:d2:f8:a0:e9:bb:96:c2:77:34:09:da:98:70:7b:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.0.0/18
81.29.64.0/19
89.151.64.0/18
178.236.144.0/20
185.68.112.0/22
194.164.114.0/24
IPv6:
2a02:16f8::/32
Signature Algorithm: sha256WithRSAEncryption
2f:56:7c:a5:f6:fa:a2:ce:8f:bb:49:1e:b7:a0:2c:a6:c6:4e:
09:92:80:cd:b1:8f:a9:3b:91:3f:a2:f4:49:e0:7e:a3:3e:8a:
4b:82:c4:2d:16:df:d6:54:dc:ec:33:e2:05:df:6b:af:26:e1:
56:94:12:95:ff:bb:53:6d:f1:e3:1f:07:61:e6:89:5e:8b:8b:
0a:68:ef:39:69:e5:c7:ed:62:3f:b5:f5:16:12:b6:7a:b6:30:
39:fd:2d:bf:16:62:33:1e:dd:49:1e:5e:6d:3c:9d:80:ec:b5:
01:dc:c6:0d:37:22:06:5e:65:eb:77:b8:72:20:1e:6e:05:6a:
68:27:81:d8:6f:5c:93:95:58:f7:f7:aa:27:2d:71:56:58:da:
36:e3:b0:08:78:d0:e6:c7:b9:83:73:7e:dd:c8:17:77:ce:1e:
c5:fb:56:55:36:e0:97:cb:05:4b:30:07:7b:53:fa:76:9b:ea:
09:71:2d:15:9b:7e:ad:f1:91:19:a3:26:fc:cf:0c:83:49:38:
7f:df:1d:bc:39:56:8d:6c:9f:90:11:e9:97:7a:dc:42:54:67:
3e:25:9b:35:be:11:e7:a1:5f:0a:45:d2:08:64:8c:cb:ea:3b:
42:83:28:f9:9f:ce:3c:58:27:85:28:f1:86:73:58:0f:d0:bc:
04:1e:74:c1
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZxIGmm8W4poJitv2mPQ/g4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjEwMTUxMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmU1M2QzNDBhOGJmNDdjMWJmMzRkMzI1NWUxMDJlZmIxODFhZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7fAk3/Cdj5KrfakIlKoRNZtRWIr
A3oR2DpQO2UBfrcO7xFaxIbfB0yZZNFQXSnqOJRA0XCBw+URuxy4qY645zKYEtxD
oWq6MUj9KFPwlWO/l0tBOuajopCMPNcLz15PkN35LL8pe8GzOEDBFYHz6BNp4Lxx
PGpLmh9mFqfEtsKI8SzXraSmGRylIf11VWted6oJN2ldey1LzQ3lO7OiFwAGvP11
EdADF6PfRqHS7raVMQ2Z3thtd9dsluyX1+NQO4gsx31zYUSSYclFxgwBu3HHiAE3
Sp+JMGGYSqicMVXBb8/gfDHmZX68nY+hiXNw0vig6buWwnc0CdqYcHtinQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFCvlPTQKi/R8G/NNMlXhAu+xga0ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2Y3MjU2
Mi00NWY1LTQwMTktODNhMS03NGYwYzNlNjYzY2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvZjcyNTYy
LTQ1ZjUtNDAxOS04M2ExLTc0ZjBjM2U2NjNjYi8xL0stVTlOQXFMOUh3YjgwMHlW
ZUVDNzdHQnJSay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQGLuwAAwQFUR1AAwQGWZdAAwQEsuyQAwQCuURw
AwQAwqRyMA0EAgACMAcDBQAqAhb4MA0GCSqGSIb3DQEBCwUAA4IBAQAvVnyl9vqi
zo+7SR63oCymxk4JkoDNsY+pO5E/ovRJ4H6jPopLgsQtFt/WVNzsM+IF32uvJuFW
lBKV/7tTbfHjHwdh5olei4sKaO85aeXH7WI/tfUWErZ6tjA5/S2/FmIzHt1JHl5t
PJ2A7LUB3MYNNyIGXmXrd7hyIB5uBWpoJ4HYb1yTlVj396onLXFWWNo247AIeNDm
x7mDc37dyBd3zh7F+1ZVNuCXywVLMAd7U/p2m+oJcS0Vm36t8ZEZoyb8zwyDSTh/
3x28OVaNbJ+QEemXetxCVGc+JZs1vhHnoV8KRdIIZIzL6jtCgyj5n848WCeFKPGG
c1gP0LwEHnTB
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:12:04 2026 by rpki-client