Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer (raw, json)
Hash identifier: VCDj2EJtD7xdCeOO/49t+tNWV/WPifWwEpyIMZgp3Hc=
Subject key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F13A2F0A2229F118A1EBB5919F7BE11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:19:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39834
AS: 196792
IP: 79.173.0.0/18
IP: 91.217.98.0/23
IP: 2a02:f740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:a2:f0:a2:22:9f:11:8a:1e:bb:59:19:f7:be:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2841262acd62c90e68081a6f777375df2c3713c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:63:4c:35:d9:94:fb:7c:75:1d:5e:08:3a:
5d:72:62:9c:a3:2e:fc:15:a8:14:c8:06:0e:07:99:
dc:1a:0e:76:68:0c:3b:59:f3:77:22:21:d8:9d:14:
1d:a6:d4:c0:26:ca:59:c3:72:26:47:7c:b4:81:d2:
4a:78:fb:5b:61:26:e8:bf:2b:af:fa:11:59:bf:a4:
7a:d9:a3:38:0f:39:07:ab:bc:f8:2d:a5:d0:41:0f:
bc:f5:19:6b:5a:af:3d:32:04:da:a1:fe:70:d0:c1:
5c:fc:2f:2f:e0:a7:ec:f5:7a:68:7d:ae:ee:b2:98:
31:7b:de:f3:46:bf:9b:dc:1d:97:86:38:cf:76:80:
49:b9:08:7d:9a:4a:19:ff:69:c1:53:78:21:87:8a:
ca:9d:fa:15:f7:b2:cd:db:82:c9:f6:8b:4f:17:c2:
7b:46:88:ab:7d:db:08:c5:c8:00:ab:b7:d3:d0:5a:
8a:a6:00:04:e8:28:22:58:e0:52:ac:48:10:90:20:
9a:00:79:4f:37:09:86:7a:14:8f:e8:08:30:34:34:
e4:3c:03:3c:78:87:ad:7e:af:df:a2:09:aa:25:4a:
5d:da:9e:52:14:b8:e4:55:d8:fe:92:c3:34:d3:43:
71:8b:e5:d1:8b:86:58:1a:bc:d5:d9:f8:56:38:b6:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.0.0/18
91.217.98.0/23
IPv6:
2a02:f740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39834
196792
Signature Algorithm: sha256WithRSAEncryption
31:0d:f4:1a:97:f3:48:3c:88:78:1f:bb:bb:b7:dd:b5:ed:51:
5f:69:21:bd:cf:9e:cd:81:84:f3:2e:51:7b:51:be:06:e8:5b:
9f:ee:af:e4:b8:38:e3:4e:19:c4:8c:f0:9d:84:0c:b2:38:ff:
c9:eb:14:e5:af:67:91:e0:9a:b4:7f:d7:09:c9:fd:ef:c7:b1:
d3:7e:99:71:d2:67:fa:0b:d2:7e:0d:a4:c9:45:8a:5e:8b:df:
e5:d3:97:bf:b8:eb:d9:64:3e:e3:c6:7e:9d:44:9b:4d:fd:7a:
99:fa:7b:e4:93:7a:e0:9d:cd:f9:4a:28:9e:78:ce:a9:64:e4:
c7:ff:6f:78:cf:20:9e:11:c3:57:26:38:cd:3b:94:e4:fa:30:
61:46:6e:03:95:ae:9a:4f:49:9b:d0:12:38:d2:a9:42:6b:71:
de:ac:b0:ac:7d:1d:74:59:57:39:a2:18:c7:da:a6:1a:f4:a5:
bc:f9:a5:4b:e1:29:ae:07:40:0d:bb:97:06:51:b9:56:e1:65:
40:0b:eb:9d:22:fc:ed:f7:1d:07:1b:c4:1d:16:60:db:e6:83:
75:e9:3f:1d:15:4d:f1:68:8f:38:31:15:53:bd:7a:b6:5b:fe:
81:dd:42:47:e3:c7:cd:2c:5b:d3:62:17:98:a8:6c:0c:5b:29:
26:3f:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:29 2026 by rpki-client