Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer (raw, json)
Hash identifier: KIT+UOvxQqcWso4zmU7svSyuIdNiKnZPikeJHBaPY8I=
Subject key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F83D44D2810E499ED8E033D06145C0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:21:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43947
IP: 91.198.219.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:d4:4d:28:10:e4:99:ed:8e:03:3d:06:14:5c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:cd:a5:95:99:b5:83:51:17:d4:04:27:1f:
63:3e:33:c7:da:3a:68:88:9b:a9:f2:d6:ef:fb:3b:
5c:70:d4:c3:87:11:db:83:4d:b0:6c:d0:ee:3d:23:
fb:fe:fc:b6:e1:62:6c:a4:89:a6:05:c3:86:86:18:
99:5b:9d:6e:94:c3:17:27:87:29:77:cb:01:78:bc:
be:1f:bd:2d:41:09:95:fd:cf:43:fe:53:ee:4f:8a:
4b:c8:1b:16:60:81:0a:4d:44:7e:1f:f9:9a:09:5d:
bf:6c:0d:e1:11:92:41:65:70:9b:b2:e2:41:47:21:
c3:32:7a:2d:b8:c3:b0:fb:83:d4:35:c2:a6:f3:3b:
17:7b:48:9c:cc:61:13:2f:5c:bc:59:24:05:d8:e8:
62:ba:30:f4:79:fd:52:d0:fe:c4:74:14:f7:32:d5:
26:25:28:cd:f6:90:34:2a:b3:9a:97:ed:33:54:8b:
84:89:ac:f5:7c:af:b7:78:13:7e:ef:3a:4a:e2:e3:
ef:4f:95:ca:98:c7:34:d2:38:83:9e:68:a9:7b:30:
60:6f:fd:ab:4b:49:3b:e2:4c:3f:5f:88:45:04:4d:
9e:d6:bc:e0:f7:26:05:af:98:04:bb:2d:ce:5b:df:
70:7f:60:0c:d0:1d:d7:d5:52:cb:e4:cb:ae:b3:7d:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.219.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43947
Signature Algorithm: sha256WithRSAEncryption
96:c0:d1:ee:a5:1d:f4:6e:fa:7d:ec:21:f2:b2:30:1b:25:83:
ef:5f:ef:0a:ee:23:3c:19:71:cf:25:d0:c5:e4:fe:a9:8e:83:
ac:c6:b7:65:25:db:e4:8c:6f:65:71:7a:2b:94:e3:a1:7c:ce:
30:d9:b2:a7:64:be:18:4b:3b:b3:5e:04:d8:35:81:0c:d3:f9:
9e:7e:55:63:83:25:a9:6d:2f:d4:bb:24:c5:3e:bc:0f:18:cc:
7e:11:9e:67:fe:c5:a5:bc:01:82:cc:c5:97:9e:59:a8:93:5b:
c9:fb:f0:58:1e:3b:07:6d:90:b5:43:8d:cc:7f:cc:3a:ad:34:
47:9b:b9:8a:6c:0f:6e:15:eb:62:4f:53:1f:ef:62:56:4f:9e:
2f:ca:e8:e7:d4:35:e7:22:89:ea:f6:a3:4e:dd:5e:d2:78:5c:
e7:a1:d8:24:44:6d:b6:04:97:67:4a:58:e7:52:0a:32:c8:fa:
45:0c:6e:07:44:29:ee:57:1b:34:83:8b:7e:be:0a:8c:69:29:
a3:71:86:fe:c8:fe:30:04:71:31:1b:b7:fd:04:09:c1:6f:48:
4d:05:61:90:a5:70:61:85:62:5e:6c:6c:5c:12:a3:06:ab:e4:
59:3d:90:69:10:f7:ec:20:1b:dc:5b:8c:a5:87:07:3c:af:0f:
8b:db:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:17 2026 by rpki-client