Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
File: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer (raw, json)
Hash identifier: /QSPJDgPN5mW6ZME4hqOFTD0jrZydfemmbdvjCj0Eb0=
Subject key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C7A34DEDFF08A13FBF8ACAE1CD0431BFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Feb 2026 08:40:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 16247
AS: 42973
IP: 37.191.96.0 -- 37.191.126.255
IP: 45.146.144.0/22
IP: 51.179.128.0 -- 51.179.176.255
IP: 51.179.178.0 -- 51.179.191.255
IP: 77.75.184.0/21
IP: 77.243.178.0/23
IP: 77.243.182.0/24
IP: 77.243.186.0/24
IP: 77.243.188.0/24
IP: 77.243.190.0/24
IP: 81.92.208.0/21
IP: 83.143.241.0/24
IP: 83.143.243.0 -- 83.143.244.255
IP: 84.39.117.0/24
IP: 85.199.216.0 -- 85.199.247.255
IP: 85.199.249.0 -- 85.199.254.255
IP: 89.238.130.0/24
IP: 89.238.133.0/24
IP: 89.238.135.0/24
IP: 89.238.137.0 -- 89.238.138.255
IP: 89.238.141.0 -- 89.238.142.255
IP: 89.238.144.0/23
IP: 89.238.147.0 -- 89.238.149.255
IP: 89.238.152.0/24
IP: 89.238.159.0/24
IP: 89.238.161.0 -- 89.238.162.255
IP: 89.238.164.0/24
IP: 89.238.166.0/24
IP: 89.238.168.0/24
IP: 89.238.171.0 -- 89.238.173.255
IP: 89.238.175.0/24
IP: 89.238.179.0/24
IP: 89.238.181.0 -- 89.238.182.255
IP: 89.238.184.0/24
IP: 89.238.187.0/24
IP: 89.238.190.0/24
IP: 89.249.68.0/22
IP: 89.249.74.0 -- 89.249.79.255
IP: 91.102.66.0 -- 91.102.71.255
IP: 91.232.150.0/23
IP: 92.42.144.0/21
IP: 109.111.192.0 -- 109.111.196.255
IP: 109.111.198.0 -- 109.111.223.255
IP: 148.252.192.0 -- 148.252.204.255
IP: 148.252.206.0 -- 148.252.250.255
IP: 148.252.252.0/22
IP: 164.39.0.0 -- 164.39.95.255
IP: 176.10.81.0 -- 176.10.83.255
IP: 176.10.85.0 -- 176.10.86.255
IP: 185.12.200.0/22
IP: 185.14.220.0/22
IP: 185.94.194.0/23
IP: 193.108.244.0/22
IP: 194.79.28.0/23
IP: 194.187.248.0/24
IP: 195.12.48.0/23
IP: 195.242.215.0/24
IP: 217.64.112.0/24
IP: 217.64.114.0 -- 217.64.122.255
IP: 217.64.124.0/24
IP: 217.113.160.0 -- 217.113.170.255
IP: 217.113.172.0/22
IP: 217.138.8.0/23
IP: 217.138.12.0/23
IP: 217.138.15.0 -- 217.138.28.255
IP: 217.138.30.0 -- 217.138.52.255
IP: 217.138.54.0 -- 217.138.70.255
IP: 217.138.72.0/21
IP: 217.138.81.0 -- 217.138.83.255
IP: 217.138.85.0 -- 217.138.88.255
IP: 217.138.90.0 -- 217.138.93.255
IP: 217.138.95.0 -- 217.138.102.255
IP: 217.138.106.0 -- 217.138.110.255
IP: 217.138.112.0 -- 217.138.132.255
IP: 217.138.136.0/21
IP: 217.138.145.0 -- 217.138.154.255
IP: 217.138.156.0 -- 217.138.161.255
IP: 217.138.163.0 -- 217.138.191.255
IP: 217.138.224.0 -- 217.138.251.255
IP: 217.151.97.0/24
IP: 217.151.100.0 -- 217.151.111.255
IP: 2a02:710::/32
IP: 2a0a:c200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:34:de:df:f0:8a:13:fb:f8:ac:ae:1c:d0:43:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 20 08:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:1e:22:30:9b:6e:db:45:ec:27:1d:4d:43:
60:be:cf:1a:8f:49:75:9c:41:b9:9d:67:ee:86:55:
95:96:dd:61:fe:09:e8:e1:44:b5:98:ce:6a:ee:d7:
01:c3:b5:03:97:84:a7:f6:f1:ad:62:c8:d2:89:c1:
3a:13:4d:cc:47:79:ab:69:b8:a0:13:ce:85:9a:8b:
b9:f9:7e:aa:b4:4f:62:bd:c5:89:2b:ea:7f:d1:83:
13:c0:ad:b2:04:03:7c:de:89:d5:68:c4:da:73:2b:
28:80:66:07:5e:90:dc:d1:4e:be:88:a0:6d:f5:08:
8c:b4:23:7a:a1:57:5a:dd:ef:cd:dc:09:1d:4b:47:
4e:f4:7a:59:2c:21:d9:d4:d8:75:31:4f:2c:9b:1c:
7f:b8:db:d0:e7:a8:0e:c8:2b:f4:c7:aa:71:f0:7a:
df:e1:ae:b3:ef:4c:b6:ac:5b:56:41:7a:09:59:ae:
28:c6:80:58:e9:31:eb:c7:5f:8b:80:3e:c3:4d:44:
37:9f:30:78:4c:39:d3:26:fc:5e:0f:78:ba:71:66:
d9:2c:4d:39:1b:28:3f:ae:f0:0b:9d:05:a1:f5:14:
09:7c:4a:87:e6:e5:8d:02:ea:b0:30:ba:74:ef:d1:
f5:b3:c0:d8:f6:2d:ae:bf:51:ef:94:50:45:08:88:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.191.96.0-37.191.126.255
45.146.144.0/22
51.179.128.0-51.179.176.255
51.179.178.0-51.179.191.255
77.75.184.0/21
77.243.178.0/23
77.243.182.0/24
77.243.186.0/24
77.243.188.0/24
77.243.190.0/24
81.92.208.0/21
83.143.241.0/24
83.143.243.0-83.143.244.255
84.39.117.0/24
85.199.216.0-85.199.247.255
85.199.249.0-85.199.254.255
89.238.130.0/24
89.238.133.0/24
89.238.135.0/24
89.238.137.0-89.238.138.255
89.238.141.0-89.238.142.255
89.238.144.0/23
89.238.147.0-89.238.149.255
89.238.152.0/24
89.238.159.0/24
89.238.161.0-89.238.162.255
89.238.164.0/24
89.238.166.0/24
89.238.168.0/24
89.238.171.0-89.238.173.255
89.238.175.0/24
89.238.179.0/24
89.238.181.0-89.238.182.255
89.238.184.0/24
89.238.187.0/24
89.238.190.0/24
89.249.68.0/22
89.249.74.0-89.249.79.255
91.102.66.0-91.102.71.255
91.232.150.0/23
92.42.144.0/21
109.111.192.0-109.111.196.255
109.111.198.0-109.111.223.255
148.252.192.0-148.252.204.255
148.252.206.0-148.252.250.255
148.252.252.0/22
164.39.0.0-164.39.95.255
176.10.81.0-176.10.83.255
176.10.85.0-176.10.86.255
185.12.200.0/22
185.14.220.0/22
185.94.194.0/23
193.108.244.0/22
194.79.28.0/23
194.187.248.0/24
195.12.48.0/23
195.242.215.0/24
217.64.112.0/24
217.64.114.0-217.64.122.255
217.64.124.0/24
217.113.160.0-217.113.170.255
217.113.172.0/22
217.138.8.0/23
217.138.12.0/23
217.138.15.0-217.138.28.255
217.138.30.0-217.138.52.255
217.138.54.0-217.138.70.255
217.138.72.0/21
217.138.81.0-217.138.83.255
217.138.85.0-217.138.88.255
217.138.90.0-217.138.93.255
217.138.95.0-217.138.102.255
217.138.106.0-217.138.110.255
217.138.112.0-217.138.132.255
217.138.136.0/21
217.138.145.0-217.138.154.255
217.138.156.0-217.138.161.255
217.138.163.0-217.138.191.255
217.138.224.0-217.138.251.255
217.151.97.0/24
217.151.100.0-217.151.111.255
IPv6:
2a02:710::/32
2a0a:c200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16247
42973
Signature Algorithm: sha256WithRSAEncryption
a9:e5:d2:f7:e2:58:f7:82:80:1c:a8:be:82:b5:c0:d9:4e:72:
69:61:62:ee:67:50:aa:cb:69:b7:61:89:27:69:34:16:4f:71:
83:e8:c0:19:4c:dd:ed:bd:7f:42:34:3e:dd:25:e4:66:7d:0e:
68:38:f6:92:7a:f1:7c:c8:ad:6b:77:62:34:ab:89:56:74:3c:
29:f1:56:aa:65:06:00:4a:cb:4f:54:11:4c:1a:7f:f6:da:59:
05:a6:aa:04:d4:b0:ae:d0:8a:86:0f:e4:36:b3:f6:19:ce:18:
81:af:e7:f2:f0:9e:69:70:ea:04:77:38:8d:ae:71:60:6b:ed:
c7:0b:ca:f7:4b:3a:28:eb:77:f3:44:0f:7b:51:27:26:c2:91:
45:9d:24:b7:97:ff:91:a1:e0:9a:ce:03:cd:76:d6:b3:6c:a9:
68:59:f9:d5:b1:e1:7d:fb:d9:d6:c2:6f:00:39:80:99:37:fa:
7c:e5:88:97:4f:47:53:77:77:49:dc:22:bd:e4:26:1d:2b:8f:
a1:c9:a6:37:4c:c5:5e:8d:a6:c4:f3:de:54:b8:f6:18:13:d7:
4b:25:90:73:38:0b:3c:c2:3c:fa:b4:5c:34:00:dd:44:55:b1:
6c:87:66:95:7b:54:9d:43:cd:db:eb:cc:7b:f3:95:e3:fe:93:
ef:76:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:02 2026 by rpki-client