Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer (raw, json)
Hash identifier: C21ePvsay9Bkkj9sZSw7voTiAD790Uynx6nXEFI19Es=
Subject key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DC94AACD711877617C4163D9CCCA469
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:18:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42395
IP: 91.192.96.0/22
IP: 91.198.46.0/24
IP: 185.90.224.0/22
IP: 2a05:e540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:4a:ac:d7:11:87:76:17:c4:16:3d:9c:cc:a4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:91:8d:7d:27:97:8f:50:a3:9d:50:bb:fe:
26:f0:52:65:ad:21:02:66:97:24:b6:ff:85:09:4a:
58:e3:01:1f:92:02:99:af:12:22:c8:87:c4:ab:c8:
04:d8:e6:c7:6b:1c:56:b4:66:71:0d:70:9a:4f:6c:
93:9e:bb:55:df:e5:34:94:ea:60:45:11:71:01:ad:
75:97:4b:b4:35:3a:a0:e3:24:45:d7:42:bd:63:a1:
39:a5:bc:78:6e:0a:6f:ea:82:89:2e:87:b6:af:98:
51:25:bb:6e:78:5f:5a:0d:50:27:b8:58:64:e0:6e:
40:f8:7f:ad:dc:b2:52:51:05:f4:56:89:eb:79:ec:
4c:43:cf:f4:99:37:1f:9b:49:31:ee:7b:5d:28:88:
bb:44:56:07:a5:20:6b:eb:20:9c:f2:d0:17:11:57:
c1:0a:79:7b:bb:5c:00:1f:61:cf:81:fd:38:ae:53:
ec:35:30:5f:59:83:d0:08:87:d7:4b:cf:aa:ae:2a:
f3:ff:01:31:df:9b:4d:68:32:a4:99:4e:fc:9b:64:
2e:ec:2e:be:49:a6:46:cd:f3:ce:ce:f3:02:a4:78:
28:97:6f:58:21:3a:00:2a:1e:de:ae:e1:f6:4d:8a:
ab:9a:ef:c8:60:a7:95:3f:84:76:db:f5:74:bb:99:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.96.0/22
91.198.46.0/24
185.90.224.0/22
IPv6:
2a05:e540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42395
Signature Algorithm: sha256WithRSAEncryption
9a:4f:a6:30:7d:73:ef:f0:f5:bb:5c:97:9c:15:62:71:ce:21:
99:03:20:0c:91:18:14:ea:17:55:df:b1:ff:e6:8e:ae:87:bb:
28:ae:5e:57:cf:4c:30:1c:fb:3a:0d:f4:3a:7c:06:f3:47:3f:
d3:d5:e7:5f:cf:91:84:3a:6a:6a:fe:cc:a3:d1:32:8b:ee:1a:
e2:94:ee:84:07:f0:8b:f8:ba:58:db:0d:c2:6b:62:99:d4:84:
18:d6:6d:ea:fb:9e:b1:2d:c4:29:df:cc:e6:a9:71:d3:64:eb:
bc:ef:5b:fe:39:f1:95:b8:3f:80:ff:40:43:48:53:33:25:8d:
43:19:7a:3a:55:e2:71:2f:39:33:db:58:41:2e:27:e9:6c:41:
28:14:ff:ed:0e:44:fe:78:46:7e:99:d6:e9:bb:de:97:7b:de:
c6:23:54:cc:a0:0f:4f:dc:88:88:77:93:41:0e:af:5d:0f:03:
50:78:7a:ce:20:88:a4:69:e0:58:43:d7:2c:35:aa:45:e3:2a:
2d:c4:0c:14:ab:f8:a5:30:2e:62:af:9b:81:05:67:8d:9a:d1:
00:19:ab:df:50:df:be:12:b1:0a:01:e4:46:25:9c:17:bf:9c:
1f:3f:13:c8:8f:2c:20:16:7d:80:1a:c9:ca:86:d3:47:05:c3:
7b:f1:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:58 2026 by rpki-client