Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
File: PabmnmXdClQFmXA-0MkkdMsg6Tk.cer (raw, json)
Hash identifier: 8ynFecEZxVJgIM7Z90a5oeyVEXBX5NDXZxVcmTJaqtw=
Subject key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5AC6271535A510956232FD04F26DEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12611
IP: 5.149.224.0/20
IP: 46.227.96.0/21
IP: 80.209.192.0/19
IP: 81.27.160.0/20
IP: 88.133.176.0/20
IP: 88.133.232.0/21
IP: 91.106.120.0/21
IP: 95.130.160.0/21
IP: 130.185.0.0/18
IP: 185.119.92.0/22
IP: 212.77.160.0/19
IP: 217.74.0.0/21
IP: 2001:16e0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:c6:27:15:35:a5:10:95:62:32:fd:04:f2:6d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:be:5a:7c:7d:a4:11:7d:d5:64:3e:3d:15:
f4:89:51:f8:c7:81:d4:8e:ab:58:8f:7e:41:4a:27:
9c:90:8e:2b:15:aa:b5:50:0e:65:15:0b:0d:5c:28:
70:6c:70:3c:bd:ac:6a:38:78:28:d7:ee:f0:e5:a1:
1d:4c:fd:82:50:06:b8:8a:37:4c:0b:be:bb:bd:0a:
fe:d8:07:5e:43:a1:e7:00:04:1f:4e:af:e8:af:b0:
a6:ea:47:9d:dc:a9:bf:be:57:12:73:3c:8d:7b:43:
6e:5d:a0:0e:f4:d7:cf:d2:c6:ed:8f:2c:f7:a0:ed:
f2:83:73:84:62:f2:5d:6b:ae:d6:76:23:1b:1e:e8:
ea:f7:70:18:d9:f6:e7:97:78:f9:31:cf:8f:f6:e1:
c6:88:f5:f3:b1:36:f5:46:c4:c8:6c:67:54:ed:b2:
39:58:3e:38:be:4c:26:cc:24:86:35:7d:29:c5:31:
52:db:09:76:90:9a:bd:e7:3f:d9:ac:79:ea:fb:b2:
a5:21:e1:a4:4d:2f:e1:2f:73:86:a8:33:95:30:b1:
0a:ff:8f:aa:b9:d0:b1:2f:45:81:cb:11:0e:6b:ee:
13:b3:ab:d4:7b:26:95:a7:f5:fa:ba:cc:f7:29:d4:
bd:38:3e:56:7a:5f:b1:ad:2f:20:53:80:fd:a0:85:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.224.0/20
46.227.96.0/21
80.209.192.0/19
81.27.160.0/20
88.133.176.0/20
88.133.232.0/21
91.106.120.0/21
95.130.160.0/21
130.185.0.0/18
185.119.92.0/22
212.77.160.0/19
217.74.0.0/21
IPv6:
2001:16e0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12611
Signature Algorithm: sha256WithRSAEncryption
1e:7b:ad:d8:8e:e5:84:a9:2d:1d:23:ca:8d:87:9f:da:68:e3:
91:73:4f:a9:2c:45:4f:db:45:99:a9:fa:f0:05:8b:56:5c:99:
c9:a1:e3:80:b7:67:e0:58:cf:26:db:54:d1:e8:fa:39:60:7d:
d3:59:27:ec:f0:8f:9c:45:e0:70:75:39:25:3c:48:48:7c:db:
40:d1:cc:db:66:86:67:a8:52:77:b7:2b:52:b4:b7:13:18:16:
9d:ad:86:bf:bb:55:e5:10:a8:fd:2d:25:4f:d5:a0:61:65:99:
22:69:4b:eb:47:d5:43:77:42:a2:fe:07:fd:fd:56:f1:98:0a:
7c:87:ce:42:51:ff:1a:8a:c2:90:ec:29:95:48:35:ee:b4:0e:
4c:41:64:bb:e1:e7:41:f5:58:79:6b:14:23:86:6e:5e:8f:46:
5c:ec:94:9e:71:ac:3d:35:64:b8:90:36:ca:13:b6:60:3c:47:
ac:88:90:26:d7:2c:d5:9b:fa:9b:b7:af:49:aa:ba:bd:6f:56:
00:19:42:89:ad:1e:41:9a:29:2b:ad:a6:e2:53:bd:55:a6:ee:
9c:0a:4d:9a:83:c5:41:78:45:16:4c:c5:d5:9a:a9:95:87:49:
28:75:23:75:1a:2c:60:1d:5f:e8:0c:ff:69:d1:e0:80:39:12:
30:0d:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:17:12 2026 by rpki-client