Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
File: PRH7pD9XqwRF5UL87suHaBZXzPM.cer (raw, json)
Hash identifier: dY0w3cZv3ejv8gjONELUOB1D3QiOxpRqXnukFvegLDQ=
Subject key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C80C0BF158EDAA98C333C004EC13141
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62026
IP: 45.143.188.0/22
IP: 178.211.156.0/24
IP: 2a12:f380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:c0:bf:15:8e:da:a9:8c:33:3c:00:4e:c1:31:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:2c:18:35:d1:e4:82:0f:5e:16:7c:84:23:
04:88:f2:a3:fd:a1:1f:9a:15:c6:32:13:7a:95:ac:
b6:87:12:44:f4:5a:2b:5e:1f:38:fb:68:58:0b:2a:
d0:a0:c5:b3:45:f5:a8:f0:db:14:de:de:c0:52:41:
28:ff:39:88:4a:ee:f5:18:fa:16:7f:a9:99:10:c7:
a2:a5:03:55:be:2c:37:95:9c:7e:5e:2d:d7:11:d8:
e6:1f:4b:0e:3f:65:6f:6c:78:72:cc:b5:c7:98:9c:
c8:e7:d7:35:cc:de:5c:d6:24:ec:c8:46:14:f5:24:
59:fd:89:26:15:ef:2c:15:5f:a2:2a:e7:6e:82:a7:
04:ad:09:d9:d1:8e:ed:29:8c:13:28:49:12:66:f7:
e8:31:57:69:86:00:0a:03:dc:65:bc:b3:06:41:59:
bf:f9:d5:eb:21:46:c4:a5:c4:69:a3:48:25:57:3b:
ab:24:b6:a7:e6:69:36:2b:b5:3c:11:e5:92:b4:5e:
ec:5e:66:79:43:b2:5a:da:4b:f5:11:f2:d3:7e:5a:
d4:0a:83:21:b5:02:55:aa:9b:16:36:06:bb:a0:07:
de:b3:e2:84:e8:16:5c:e1:ac:67:d9:6c:dd:95:bc:
5f:01:60:98:17:3b:c4:3a:47:30:2e:90:82:6d:43:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.188.0/22
178.211.156.0/24
IPv6:
2a12:f380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62026
Signature Algorithm: sha256WithRSAEncryption
40:0f:e6:f3:dc:f3:67:98:9f:65:7e:7e:38:a1:7e:89:c4:1c:
fb:45:b4:0d:a2:18:3d:9f:9c:30:57:68:c9:3a:6f:0d:43:5a:
99:d1:d8:c7:e5:04:f5:5c:81:01:8f:93:c4:4d:e3:ef:62:74:
31:cf:17:1a:38:11:79:94:91:fb:d5:3b:8a:34:da:bc:a9:62:
c4:ba:f3:33:1f:a4:05:a8:ff:c0:7e:0a:57:ef:27:04:09:21:
a4:ea:44:00:25:e2:3b:2a:1f:45:ec:81:fe:1b:53:17:ba:f4:
e3:e5:98:f8:3b:f4:71:b4:4c:9f:5b:46:29:dc:a2:f9:94:cf:
e9:63:05:27:08:e2:dc:1e:bb:c6:ac:80:f9:b6:40:eb:f3:85:
47:83:d3:31:ab:21:7a:f3:0b:3b:f5:8b:0b:88:db:de:4e:f0:
f8:2a:f7:46:79:40:a3:80:c7:ad:22:83:af:31:f4:48:a0:77:
dd:bd:c7:e4:62:2c:0c:35:1a:34:97:a3:1d:fa:0c:28:d7:0a:
39:24:9d:dc:69:07:fa:07:64:95:4f:41:62:46:d7:f5:70:de:
7d:f2:17:58:c0:bd:06:9c:36:53:97:04:cf:da:9f:18:6b:cc:
0e:1e:7f:cf:1b:c3:16:cd:67:4f:a1:cb:3c:f1:fc:36:ad:4b:
ea:26:be:21
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZt8gMC/FY7aqYwzPABOwTFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDExZmJhNDNmNTdhYjA0NDVlNTQyZmNlZWNiODc2ODE2NTdjY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofYsGDXR5IIPXhZ8hCMEiPKj/aEf
mhXGMhN6lay2hxJE9ForXh84+2hYCyrQoMWzRfWo8NsU3t7AUkEo/zmISu71GPoW
f6mZEMeipQNVviw3lZx+Xi3XEdjmH0sOP2VvbHhyzLXHmJzI59c1zN5c1iTsyEYU
9SRZ/YkmFe8sFV+iKudugqcErQnZ0Y7tKYwTKEkSZvfoMVdphgAKA9xlvLMGQVm/
+dXrIUbEpcRpo0glVzurJLan5mk2K7U8EeWStF7sXmZ5Q7Ja2kv1EfLTflrUCoMh
tQJVqpsWNga7oAfes+KE6BZc4axn2WzdlbxfAWCYFzvEOkcwLpCCbUM8GwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzQ3M2Fk
ZS1iNTA0LTRiMTAtYWVkNi1jNWRkMzg1N2E0ZDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNDczYWRl
LWI1MDQtNGIxMC1hZWQ2LWM1ZGQzODU3YTRkMi8xL1BSSDdwRDlYcXdSRjVVTDg3
c3VIYUJaWHpQTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCLY+8AwQAstOcMA0EAgACMAcDBQMqEvOAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDySjANBgkqhkiG9w0BAQsFAAOCAQEAQA/m
89zzZ5ifZX5+OKF+icQc+0W0DaIYPZ+cMFdoyTpvDUNamdHYx+UE9VyBAY+TxE3j
72J0Mc8XGjgReZSR+9U7ijTavKlixLrzMx+kBaj/wH4KV+8nBAkhpOpEACXiOyof
ReyB/htTF7r04+WY+Dv0cbRMn1tGKdyi+ZTP6WMFJwji3B67xqyA+bZA6/OFR4PT
MashevMLO/WLC4jb3k7w+Cr3RnlAo4DHrSKDrzH0SKB33b3H5GIsDDUaNJejHfoM
KNcKOSSd3GkH+gdklU9BYkbX9XDeffIXWMC9Bpw2U5cEz9qfGGvMDh5/zxvDFs1n
T6HLPPH8Nq1L6ia+IQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:45:59 2026 by rpki-client