Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
File: P6LWhQu8RyBVepF03LyXYK7MCxo.cer (raw, json)
Hash identifier: Ev4BVbzIKUJhkfalgJP0SNYV5tRsh7Vp1DCQ97aFY78=
Subject key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5B2E048A9D829DDFC952802F50EAFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:19:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49275
IP: 91.199.239.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:2e:04:8a:9d:82:9d:df:c9:52:80:2f:50:ea:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:28:20:54:2a:f8:bc:d8:99:95:a9:9d:10:
42:85:36:52:64:1a:b5:b6:48:13:e2:65:c8:a7:e1:
21:8d:32:70:e1:eb:ba:b4:9d:9d:56:9d:0e:4b:2a:
6e:ae:0f:df:a8:07:c1:ef:c6:49:75:32:c6:a2:e3:
79:7a:e7:52:47:68:fe:18:fd:2e:f1:54:9a:97:3f:
a4:24:e3:20:e5:2b:76:67:ec:51:9b:5a:74:51:20:
4a:ef:85:48:02:dc:17:d4:6a:a8:39:36:a9:85:c9:
97:24:82:9e:f7:c0:bd:4a:d3:c2:15:3a:90:2a:6e:
38:ce:cd:15:42:06:4c:67:98:57:fb:8c:8b:e3:7a:
73:70:6f:97:0b:08:89:c1:20:91:b5:0a:ab:4e:f6:
bf:d0:8d:4b:3a:89:a5:0d:b3:32:2f:69:fb:bc:1e:
1b:97:4c:a7:cb:78:71:13:30:f6:30:53:5f:87:fa:
57:0f:96:d9:15:c7:33:f9:ea:80:8e:c0:ba:2b:c4:
9d:c3:32:3d:16:95:da:f1:f9:81:b8:aa:6e:93:d8:
bf:11:81:64:42:8f:8f:16:fc:a8:95:57:63:58:4e:
a4:82:a7:84:bd:c6:ef:09:d1:7b:a2:74:13:a8:b0:
d3:b9:ab:5c:db:1f:ec:cd:3a:55:cc:e2:87:7e:be:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.239.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49275
Signature Algorithm: sha256WithRSAEncryption
12:ee:a8:7c:5d:e2:75:49:1e:06:9e:68:4f:04:ac:b4:ac:19:
a0:3c:3a:7a:76:25:23:49:8c:8d:dc:be:8d:b1:50:88:32:66:
d1:f4:41:59:e7:0a:8c:bf:e1:b3:5a:cb:48:1a:0b:e1:3f:b5:
58:7d:ee:4f:78:7a:d1:15:54:fa:63:61:52:50:8f:b7:5e:aa:
3f:4e:9a:8b:a0:74:aa:11:4b:eb:64:39:74:a9:d8:64:3b:77:
b2:75:fe:53:13:d0:fa:d2:1d:ed:a7:51:ba:ea:f5:b3:78:fd:
ab:ac:20:8f:0f:63:1d:e4:48:d4:2c:6c:77:d3:46:a6:1c:38:
c8:9c:d6:32:d0:a0:03:ad:fc:72:ed:2a:e5:ad:69:ea:d3:65:
56:01:15:0d:ef:6d:74:47:07:b0:50:06:21:89:aa:74:93:db:
4b:89:d7:a0:9f:f7:f6:bf:5a:1e:c9:fc:94:95:7c:c3:9c:53:
68:b6:4b:e2:3b:8f:4e:89:c6:97:df:e0:80:f0:3f:a3:96:0d:
b5:02:3e:e8:6b:9e:75:3b:61:b2:d5:13:bf:8f:b9:eb:36:20:
d8:ff:fb:69:0c:80:47:5e:f4:9b:56:1c:a1:52:5c:b2:c7:82:
1d:98:8d:3f:72:4d:0b:c8:33:3c:b5:a8:4a:c9:df:36:ae:da:
78:36:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:48:21 2026 by rpki-client