Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
File: Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer (raw, json)
Hash identifier: eZr2VV77dkwDxoeyYBvwllTTW/yUN5EGNoTEr8pp7JM=
Subject key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA206972A31FDD5178460AA37A5ECD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29650
AS: 31122
AS: 31458
AS: 35226
AS: 41736
AS: 44451
AS: 62455
AS: 197853
IP: 45.139.240.0/22
IP: 46.183.104.0/23
IP: 78.137.128.0/18
IP: 78.143.128.0/18
IP: 79.140.128.0/20
IP: 80.93.16.0/20
IP: 82.195.128.0/19
IP: 83.147.128.0/18
IP: 84.51.224.0/21
IP: 84.51.236.0 -- 84.51.255.255
IP: 84.203.0.0/16
IP: 89.16.64.0/19
IP: 89.184.32.0/22
IP: 89.184.40.0 -- 89.184.57.255
IP: 89.234.64.0/18
IP: 91.142.96.0/20
IP: 92.51.192.0/20
IP: 92.51.216.0/21
IP: 92.51.240.0/21
IP: 93.92.8.0/21
IP: 94.247.48.0/21
IP: 109.106.96.0 -- 109.106.119.255
IP: 109.106.124.0/22
IP: 176.52.216.0 -- 176.52.221.255
IP: 185.47.144.0/22
IP: 185.53.32.0/24
IP: 185.53.35.0/24
IP: 185.179.40.0/22
IP: 185.182.72.0/22
IP: 185.205.228.0/22
IP: 185.233.176.0/22
IP: 185.242.236.0/23
IP: 212.78.224.0 -- 212.78.241.255
IP: 212.78.252.0/22
IP: 212.84.40.0/21
IP: 212.126.32.0/19
IP: 217.78.0.0/20
IP: 2001:1bd8::/32
IP: 2a00:15b8::/32
IP: 2a01:258::/32
IP: 2a01:8aa0::/32
IP: 2a02:220::/32
IP: 2a0a:e780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:20:69:72:a3:1f:dd:51:78:46:0a:a3:7a:5e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:87:b7:d1:31:5b:f9:36:54:e3:1a:e6:52:
3b:c7:fc:88:9e:c8:83:9b:41:65:89:7e:4d:ed:77:
62:6c:8f:87:fd:c4:04:68:bf:6d:36:e3:37:d2:0c:
d3:11:ce:c2:6e:f4:33:9f:ad:49:59:e0:c5:4c:f4:
b3:d0:c2:1f:90:68:92:80:21:50:0b:69:9e:ee:85:
1b:73:81:18:72:46:8f:19:7a:d2:50:fe:a4:07:60:
b6:f0:7a:ae:66:ab:93:57:dd:ec:de:c4:56:27:85:
7b:12:e4:28:96:5f:3e:f1:88:66:b2:2d:9d:e7:68:
01:b3:46:92:db:a0:4f:ce:12:54:ea:35:8e:4d:8e:
ce:30:30:54:b3:09:b3:f6:de:b2:76:54:51:ee:c9:
44:2f:09:14:66:c8:32:6f:77:06:4c:d4:ae:5e:b3:
fd:d0:1e:56:68:cd:4e:47:24:69:77:b5:6e:53:54:
6b:d5:05:f5:99:81:43:1a:5b:1d:03:81:f2:d4:b9:
e4:8e:ba:b2:c2:c4:e2:4e:51:f9:2f:15:e3:2a:26:
50:0a:1d:90:93:40:47:4a:e0:10:dd:b5:45:42:d4:
65:e0:f8:57:d7:3f:9b:f3:46:b4:46:9b:ff:23:84:
80:6d:27:1d:ac:e7:41:d8:ee:94:cb:fb:ee:85:81:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.240.0/22
46.183.104.0/23
78.137.128.0/18
78.143.128.0/18
79.140.128.0/20
80.93.16.0/20
82.195.128.0/19
83.147.128.0/18
84.51.224.0/21
84.51.236.0-84.51.255.255
84.203.0.0/16
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
89.234.64.0/18
91.142.96.0/20
92.51.192.0/20
92.51.216.0/21
92.51.240.0/21
93.92.8.0/21
94.247.48.0/21
109.106.96.0-109.106.119.255
109.106.124.0/22
176.52.216.0-176.52.221.255
185.47.144.0/22
185.53.32.0/24
185.53.35.0/24
185.179.40.0/22
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
185.242.236.0/23
212.78.224.0-212.78.241.255
212.78.252.0/22
212.84.40.0/21
212.126.32.0/19
217.78.0.0/20
IPv6:
2001:1bd8::/32
2a00:15b8::/32
2a01:258::/32
2a01:8aa0::/32
2a02:220::/32
2a0a:e780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29650
31122
31458
35226
41736
44451
62455
197853
Signature Algorithm: sha256WithRSAEncryption
8b:0d:e9:5f:a6:93:96:88:17:c8:c3:c7:58:24:ac:a4:ac:84:
3d:d9:ee:17:3c:6a:c0:a5:1e:00:c7:a9:7c:9e:3a:9c:71:42:
65:15:8a:a8:be:bb:2d:79:99:66:f6:ea:0d:1d:f3:c1:e6:0c:
56:fb:ff:b3:03:25:dc:9a:49:57:a6:93:01:e9:c8:49:cc:91:
6c:55:93:ec:50:d1:57:9c:14:0e:86:1f:3c:dd:de:99:ad:cd:
1c:0e:34:16:97:7c:16:bf:a6:76:57:3c:c0:4d:d4:50:39:6e:
f1:6d:a2:6a:12:30:5d:cf:25:60:ae:d5:71:e4:e7:bb:60:f0:
db:73:83:ac:0b:2e:4d:91:62:ad:b3:b9:8e:7c:f1:c3:e8:27:
b2:d8:96:d4:9d:7c:b1:c0:dd:29:03:6b:21:8d:12:66:40:b7:
23:dd:8b:cd:a5:db:09:ba:97:fa:2e:e5:38:cf:f9:d2:18:59:
e8:1c:a3:2c:46:a1:b5:9e:96:50:74:ac:7d:02:27:3a:7b:8a:
c7:b4:04:6b:91:f2:61:94:e0:0c:80:a9:05:9d:b2:e2:1e:2e:
73:0e:a0:41:54:d1:18:4d:62:4f:9b:86:5f:a4:a7:37:1f:ab:
4b:a5:87:df:d3:b7:15:7a:da:db:6f:29:2e:ca:b3:42:a8:03:
02:9f:8f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:53 2026 by rpki-client