Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
File: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer (raw, json)
Hash identifier: 5V8G9msUqXCCZp49dGSpXzRzZbA7tPrNXEZVVJrj1xc=
Subject key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D76FF257A092412BCC7FD7BD16DCC64DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Apr 2026 10:45:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215427
IP: 31.41.248.0/24
IP: 37.140.244.0/24
IP: 45.88.224.0/23
IP: 62.68.80.0/24
IP: 91.190.154.0/24
IP: 91.212.216.0/24
IP: 91.239.216.0/23
IP: 94.103.177.0/24
IP: 146.255.189.0/24
IP: 176.97.212.0/24
IP: 178.211.159.0/24
IP: 185.115.160.0/22
IP: 185.130.89.0/24
IP: 185.145.235.0/24
IP: 185.167.253.0/24
IP: 193.9.16.0/24
IP: 193.25.167.0/24
IP: 193.104.33.0/24
IP: 193.109.252.0/23
IP: 194.69.163.0/24
IP: 195.66.101.0/24
IP: 212.46.33.0/24
IP: 212.46.35.0/24
IP: 2001:3080::/29
IP: 2001:3180::/29
IP: 2001:3280::/29
IP: 2001:3380::/29
IP: 2a0b:3e00::/29
IP: 2a0c:8340::/29
IP: 2a0e:a780::/29
IP: 2a10:6c40::/29
IP: 2a10:9600::/29
IP: 2a11:ad80::/29
IP: 2a13:1880::/29
IP: 2a13:8000::/29
IP: 2a13:b640::/29
IP: 2a13:b840::/29
IP: 2a13:bfc0::/29
IP: 2a13:c040::/29
IP: 2a13:c0c0::/29
IP: 2a13:c140::/29
IP: 2a13:d240::/29
IP: 2a13:d2c0::/29
IP: 2a13:ddc0::/29
IP: 2a13:de40::/29
IP: 2a14:35c0::/29
IP: 2a14:5740::/29
IP: 2a14:5840::/29
IP: 2a14:58c0::/29
IP: 2a14:6ac0::/29
IP: 2a14:6b40::/29
IP: 2a14:6bc0::/29
IP: 2a14:72c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:ff:25:7a:09:24:12:bc:c7:fd:7b:d1:6d:cc:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 10 10:45:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:b7:f1:21:3f:de:e9:97:ce:60:4c:93:63:
88:2f:10:1f:f0:ec:2f:a5:16:b2:2f:f5:27:7e:20:
f4:74:61:49:15:b2:7b:17:f6:e4:9b:3f:45:6b:81:
62:6f:64:45:6b:d4:fb:e4:fa:f9:14:e0:ab:fc:7a:
19:c5:ae:c7:13:97:9c:cd:c1:e3:54:43:5c:ba:19:
73:74:01:21:d3:e0:49:7a:07:44:6f:76:c4:b2:80:
3a:89:52:53:19:33:9a:b1:df:c9:68:b9:d4:f5:b0:
35:9e:1d:3f:21:7a:87:44:8b:66:d9:3c:34:15:eb:
e8:69:d6:53:80:04:5a:8f:e8:f1:20:73:d1:bb:c9:
a5:c7:29:20:4c:da:99:c6:00:24:ac:9d:24:09:3e:
b7:9f:b6:01:e2:26:8c:e2:7e:e3:a9:40:39:95:0e:
8d:11:a6:06:f5:83:5e:c4:2f:3d:5d:b4:ac:44:7a:
66:28:26:00:7d:49:23:9b:02:8b:de:4b:d9:d5:d1:
f7:d2:1f:52:f2:ef:d3:ec:12:de:18:8f:75:9e:71:
d7:fb:ee:64:36:ff:40:ea:27:30:fc:13:1c:f0:31:
4c:9b:46:5c:99:19:f0:ad:85:a3:3f:a7:64:44:ca:
65:f3:7d:e0:51:2f:ed:26:fe:cf:bf:b2:09:b5:44:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.248.0/24
37.140.244.0/24
45.88.224.0/23
62.68.80.0/24
91.190.154.0/24
91.212.216.0/24
91.239.216.0/23
94.103.177.0/24
146.255.189.0/24
176.97.212.0/24
178.211.159.0/24
185.115.160.0/22
185.130.89.0/24
185.145.235.0/24
185.167.253.0/24
193.9.16.0/24
193.25.167.0/24
193.104.33.0/24
193.109.252.0/23
194.69.163.0/24
195.66.101.0/24
212.46.33.0/24
212.46.35.0/24
IPv6:
2001:3080::/29
2001:3180::/29
2001:3280::/29
2001:3380::/29
2a0b:3e00::/29
2a0c:8340::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a11:ad80::/29
2a13:1880::/29
2a13:8000::/29
2a13:b640::/29
2a13:b840::/29
2a13:bfc0::/29
2a13:c040::/29
2a13:c0c0::/29
2a13:c140::/29
2a13:d240::/29
2a13:d2c0::/29
2a13:ddc0::/29
2a13:de40::/29
2a14:35c0::/29
2a14:5740::/29
2a14:5840::/29
2a14:58c0::/29
2a14:6ac0::/29
2a14:6b40::/29
2a14:6bc0::/29
2a14:72c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215427
Signature Algorithm: sha256WithRSAEncryption
78:b5:b5:6a:1c:66:28:cd:db:10:8d:27:d6:68:33:f1:80:dc:
88:dc:b2:19:9a:0f:0f:a5:24:64:bd:f7:ae:f4:c9:da:5e:66:
5c:71:b4:5e:1a:95:44:30:50:9a:87:37:9d:e1:8e:96:e7:3d:
98:59:c6:02:dc:a2:3d:4e:94:26:58:98:02:eb:cb:38:b5:c0:
36:b6:e6:42:53:7c:9c:04:02:c8:23:05:cb:22:b3:ae:92:45:
64:28:19:17:0c:c6:f6:1e:44:ae:65:4e:83:20:7e:92:f3:5f:
f2:52:6b:8c:cf:9e:cc:79:4f:ce:0c:47:f4:d7:cb:89:a0:34:
58:c0:2a:51:e5:bc:43:66:3a:53:57:a9:e5:62:a6:b1:af:ca:
ed:2f:c1:85:c1:37:35:aa:06:3a:c4:08:14:ea:3f:72:ff:a3:
74:61:7e:b8:fa:e1:b0:31:b9:17:aa:42:00:a5:f3:8e:ed:32:
e6:5c:b3:d4:9e:3e:29:2f:77:7d:6f:c2:76:ef:15:4a:32:e6:
4b:2a:21:6d:54:e7:13:ad:13:6b:ca:3c:50:a2:e8:bd:30:72:
5d:89:e7:d5:0f:8c:5d:34:5f:b9:13:b5:6b:e7:f2:2f:52:ec:
f4:c7:ff:5d:de:02:14:3e:28:47:70:fe:a1:91:ed:e1:1c:50:
85:10:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:20:46 2026 by rpki-client