Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
File: SVbzCE2TEO-hvAfvMfk0spQfED4.cer (raw, json)
Hash identifier: EZdmNkbxcejPMsufTliBqWVTppeth/eVZ1zG/dzh02s=
Subject key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6721B5A89CC9CABD0CCE96958AD8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 6798
IP: 94.136.96.0/20
IP: 185.96.100.0/22
IP: 194.177.128.0/19
IP: 2a00:12e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:72:1b:5a:89:cc:9c:ab:d0:cc:e9:69:58:ad:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:5a:e7:3d:fc:68:5d:6b:e6:61:a3:7b:80:
25:ef:45:68:06:70:2f:13:22:ce:97:fd:71:29:5b:
4a:bf:e4:18:ba:37:bf:40:5d:22:79:c6:1b:f8:cb:
72:78:28:a5:03:d4:d0:41:51:5c:77:de:c2:ea:97:
e7:fe:72:3a:2f:60:42:0b:08:16:e6:d7:64:8a:0d:
54:5c:ae:80:7b:e3:2a:0d:30:f1:60:31:e8:05:a4:
02:d6:dd:0c:89:35:c1:62:5f:9f:59:5d:e5:91:fd:
b6:a2:91:0e:5b:1f:47:b4:47:70:cb:59:e7:e7:16:
45:e7:5f:f9:73:0d:68:4f:94:ab:c5:f7:eb:e4:21:
59:9c:e9:b8:3f:f8:0d:86:c3:95:72:93:00:a4:8a:
cb:90:96:9d:d1:73:71:ca:e5:9c:64:22:38:a1:b1:
71:79:9c:79:9d:db:f9:24:07:95:0d:dc:38:e2:63:
8a:a2:11:c6:50:a3:dd:06:77:42:a3:28:96:e1:22:
0c:de:ba:54:c5:86:bd:c5:0d:a6:ef:fd:a4:85:c1:
e5:af:cf:c6:f2:0e:2b:47:d2:77:8f:e2:ed:54:56:
db:ba:e0:4b:45:74:fd:39:4f:be:26:f8:40:7b:75:
7d:e6:64:ff:92:bc:60:55:68:da:e5:5d:90:ea:2a:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.96.0/20
185.96.100.0/22
194.177.128.0/19
IPv6:
2a00:12e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6798
Signature Algorithm: sha256WithRSAEncryption
7e:ac:af:cf:0b:8b:5d:af:2d:31:03:77:75:e3:0b:2f:77:cf:
a3:45:77:56:58:13:a7:ed:fb:7f:50:7f:1d:86:13:4a:4b:e2:
01:2a:1b:14:01:97:5c:3a:3b:6c:67:8d:e5:9e:a7:fe:21:5d:
a1:12:e3:01:2e:11:04:8c:72:5c:5f:82:37:46:4a:70:da:48:
21:88:d4:71:b7:01:b5:11:1b:9a:08:16:14:de:2d:bc:7a:90:
aa:12:ed:8e:71:d8:b1:22:13:d3:33:99:3a:fc:e8:41:9e:cb:
9a:d9:b6:ce:62:22:e6:e9:c2:69:62:18:c2:67:1c:ba:cd:21:
de:e7:ab:10:aa:81:94:20:a8:f0:21:08:ce:2d:c5:9c:c8:ac:
c3:df:d8:8b:e5:53:9f:b8:e6:49:8c:73:69:1b:fd:5b:b0:16:
14:de:ac:47:35:ad:87:5c:eb:41:63:7d:9e:d5:56:5a:dd:8e:
13:29:e9:66:eb:1c:4e:8d:fa:a4:9e:0f:08:d4:72:ef:1f:3a:
54:d0:8f:2f:a8:a2:9d:23:de:c6:f5:56:5a:5a:71:97:a9:bc:
0d:52:9e:ab:7e:e7:f8:2b:51:36:e9:c0:74:56:c0:24:ca:ce:
f4:e3:bd:c0:4b:d9:63:26:7a:2c:c5:c1:2d:12:e5:46:1e:94:
b4:ba:a0:53
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZt3xnIbWonMnKvQzOlpWK2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTU2ZjMwODRkOTMxMGVmYTFiYzA3ZWYzMWY5MzRiMjk0MWYxMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDBa5z38aF1r5mGje4Al70VoBnAv
EyLOl/1xKVtKv+QYuje/QF0iecYb+MtyeCilA9TQQVFcd97C6pfn/nI6L2BCCwgW
5tdkig1UXK6Ae+MqDTDxYDHoBaQC1t0MiTXBYl+fWV3lkf22opEOWx9HtEdwy1nn
5xZF51/5cw1oT5Srxffr5CFZnOm4P/gNhsOVcpMApIrLkJad0XNxyuWcZCI4obFx
eZx5ndv5JAeVDdw44mOKohHGUKPdBndCoyiW4SIM3rpUxYa9xQ2m7/2khcHlr8/G
8g4rR9J3j+LtVFbbuuBLRXT9OU++JvhAe3V95mT/krxgVWja5V2Q6ipgaQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFElW8whNkxDvobwH7zH5NLKUHxA+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzRhZjg5
OC0yMWNiLTRkOGQtYTYzZi0xZGM5NjdkNTY0MDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvNGFmODk4
LTIxY2ItNGQ4ZC1hNjNmLTFkYzk2N2Q1NjQwOS8xL1NWYnpDRTJURU8taHZBZnZN
Zmswc3BRZkVENC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQEXohgAwQCuWBkAwQFwrGAMA0EAgACMAcDBQAq
ABLgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhqOMA0GCSqGSIb3DQEBCwUAA4IB
AQB+rK/PC4tdry0xA3d14wsvd8+jRXdWWBOn7ft/UH8dhhNKS+IBKhsUAZdcOjts
Z43lnqf+IV2hEuMBLhEEjHJcX4I3Rkpw2kghiNRxtwG1ERuaCBYU3i28epCqEu2O
cdixIhPTM5k6/OhBnsua2bbOYiLm6cJpYhjCZxy6zSHe56sQqoGUIKjwIQjOLcWc
yKzD39iL5VOfuOZJjHNpG/1bsBYU3qxHNa2HXOtBY32e1VZa3Y4TKelm6xxOjfqk
ng8I1HLvHzpU0I8vqKKdI97G9VZaWnGXqbwNUp6rfuf4K1E26cB0VsAkys70473A
S9ljJnosxcEtEuVGHpS0uqBT
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:27:35 2026 by rpki-client