Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XU74K4IEWvnTUQYV7QM3a2MU_e4.cer
File: XU74K4IEWvnTUQYV7QM3a2MU_e4.cer (raw, json)
Hash identifier: PLT8cXwliNwXCOKelbjr/QdDvQnne5SDox5GD9VCwLo=
Subject key identifier: 5D:4E:F8:2B:82:04:5A:F9:D3:51:06:15:ED:03:37:6B:63:14:FD:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C99FD4D3A45019978688D086BFF4DD7F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Feb 2026 12:47:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197920
IP: 91.228.100.0/24
IP: 185.50.124.0/22
IP: 2a01:a8e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:fd:4d:3a:45:01:99:78:68:8d:08:6b:ff:4d:d7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 12:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d4ef82b82045af9d3510615ed03376b6314fdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:41:2b:40:d6:24:6a:dc:fe:62:ed:9d:66:
0e:31:fc:c9:2e:a0:58:ed:6e:f8:60:b5:2a:53:12:
7d:2f:80:0c:5a:4d:7b:df:2b:b7:f6:f0:31:8b:77:
6e:f4:4a:66:86:cd:56:77:d0:56:32:64:7f:79:0f:
de:bc:06:03:66:81:07:68:09:d3:55:ee:f6:91:e2:
7a:8f:7f:6e:46:73:10:50:a0:d5:d6:5e:14:54:c1:
03:47:a4:48:92:ca:62:0b:5f:3b:0b:89:3f:bc:fc:
e5:a8:9c:4d:33:5e:08:4a:7c:74:fa:3a:c6:5f:b6:
18:cd:73:60:d4:c9:a2:b6:68:90:f4:7a:0d:de:76:
bb:20:1c:6c:71:12:7a:40:ae:2d:c4:72:f5:57:bd:
c5:01:e7:90:db:ad:c1:f0:9b:49:8e:6d:fa:3d:ae:
b9:08:91:59:14:51:87:61:1b:87:6b:3d:66:c5:d9:
58:ba:8a:cf:c5:3a:51:2e:d0:f4:f8:66:09:4f:24:
fe:f1:8d:80:41:bc:fd:06:ff:71:f6:3b:d0:d7:ee:
26:d2:3e:87:8c:4e:e9:b9:07:f7:f4:24:cc:61:5b:
bb:2c:fd:22:cb:9c:96:16:5b:81:ce:5f:6e:72:9a:
05:5c:e9:3b:8f:b2:34:d1:c6:3d:83:8d:17:9d:62:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4E:F8:2B:82:04:5A:F9:D3:51:06:15:ED:03:37:6B:63:14:FD:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.100.0/24
185.50.124.0/22
IPv6:
2a01:a8e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197920
Signature Algorithm: sha256WithRSAEncryption
47:5d:44:37:79:96:82:08:6f:3e:1d:c6:83:45:b8:cd:56:ff:
8d:2d:05:ca:ec:ef:6d:ad:a0:f8:e6:56:14:f7:50:2e:37:bf:
63:7a:13:10:ac:c9:90:a5:76:6c:70:43:47:b5:3c:93:f1:a5:
d7:59:a1:60:63:03:35:03:8f:c9:a1:1b:fa:f4:73:4b:fe:39:
f4:bb:21:86:a9:f5:cf:0b:be:89:54:ab:8f:fa:66:1c:ee:e1:
86:8e:f4:a6:58:44:3b:90:85:17:72:fe:6b:35:f7:b1:13:75:
fe:e3:bc:4f:b2:d4:f6:41:f3:7f:dc:cc:7b:e5:0f:51:a5:94:
bf:de:41:2b:eb:9f:b3:f4:39:e6:ba:d0:af:e4:4b:7d:af:cc:
50:f9:70:e2:c8:bb:4c:a3:6f:60:f8:a2:ec:88:f5:54:f5:fa:
52:93:4f:36:39:20:f1:8f:ce:00:64:6e:c2:20:79:bb:62:be:
ed:85:5e:38:0f:23:d5:0e:0f:b1:03:08:72:88:02:9b:2d:c7:
8a:cd:b4:56:cb:c2:10:46:7a:6c:9a:ce:c6:ac:fe:ae:c1:b3:
8f:c2:98:39:40:93:6c:f7:d7:5b:c8:f0:a9:91:3f:91:d0:a7:
68:28:90:37:d8:71:04:49:21:a3:18:c6:27:11:9f:e1:ed:ab:
34:4b:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:26:55 2026 by rpki-client