Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
File: acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer (raw, json)
Hash identifier: 9mRj4pAXtd+mCHFSE+v/P1AWJfSL9GsFUlVTtCSxTCo=
Subject key identifier: 69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA74C70E6E798E98D032628D46B84D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.193.55.0/24
IP: 185.224.30.0/24
IP: 2a12:8d40::/29
IP: 2a12:e6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:74:c7:0e:6e:79:8e:98:d0:32:62:8d:46:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69c466d582ec558e4beaaee650be5007709c589f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:30:f0:2e:0d:93:ab:59:24:a4:26:07:22:
9f:0e:df:f5:ed:b2:c7:a9:b6:34:ad:04:d8:fd:33:
b7:4e:7a:c8:e8:0c:ad:43:6c:b9:12:4f:c6:6a:c8:
71:82:81:71:b5:d5:ac:27:b6:ee:e3:5a:92:5d:56:
3b:f7:26:7d:3c:9d:5a:d3:77:bb:ea:0b:d1:52:eb:
33:fe:5f:59:95:ae:91:0a:84:5e:71:6c:cb:f3:84:
92:c1:2a:db:31:46:26:39:b1:7b:53:39:0d:d0:5e:
02:f4:47:d7:3c:00:c9:1d:75:86:99:5c:fc:db:f9:
e8:76:79:4c:dd:ef:80:51:56:09:e8:ca:82:9c:c3:
07:fe:ca:fe:d0:d4:fe:0c:52:f4:60:c7:a4:3c:80:
f8:c2:9d:06:e9:04:25:c8:f7:e8:a8:9f:6f:26:3b:
5b:16:70:fe:b7:26:08:63:99:0a:cf:7b:1c:65:d3:
5b:f0:38:72:ee:87:04:24:00:bc:6d:51:cd:32:31:
e4:6d:6f:c4:c4:40:c4:51:15:81:fa:d3:70:e9:74:
96:1f:f7:e1:7e:e8:0d:de:dc:2d:50:33:5e:5c:7b:
c5:40:04:8f:c1:96:ed:a1:35:a6:a2:9c:c1:c3:bc:
50:f7:0b:cf:ea:81:f7:e5:a2:34:c8:0d:c4:72:0e:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.55.0/24
185.224.30.0/24
IPv6:
2a12:8d40::/29
2a12:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:4a:ce:ed:5d:fd:6d:7c:fc:16:dc:6d:7c:71:d5:4f:bf:5f:
73:6c:35:c3:16:d4:2b:bb:f0:b2:be:62:90:b7:fa:44:b0:f0:
d7:33:fb:94:5c:89:42:0c:52:02:35:85:46:29:9f:cd:2e:59:
b1:13:49:a5:35:88:6d:36:f7:f0:24:0e:cc:9a:9b:a9:62:2f:
5a:44:32:89:10:34:a8:aa:58:95:ab:0c:0e:c6:bb:3e:5e:6a:
09:4e:ea:b8:16:5d:f0:3e:6a:10:b9:2f:f9:36:32:d1:45:04:
19:33:67:1d:78:c1:c9:b6:cf:0e:42:ff:e7:e0:5a:c1:3d:81:
a9:14:53:8c:19:1e:94:aa:26:c6:3c:eb:1f:91:f7:44:07:bb:
8f:ba:cf:f1:90:ca:39:14:e7:d5:97:7a:1a:b3:29:52:ce:49:
bf:c6:b1:19:9b:dc:64:ac:d6:de:c7:26:93:20:99:a1:cb:2d:
f9:19:e7:5d:e4:61:ef:b0:94:1c:28:a9:d4:9c:04:60:3e:c3:
8e:48:93:da:14:96:fb:0f:a2:f5:76:2c:4f:c9:98:52:60:64:
32:0a:4a:55:d5:dd:89:69:ee:04:aa:2f:8c:aa:1e:0f:df:11:
ff:b8:29:cb:28:f7:58:9c:8d:ae:89:a1:1b:5a:ad:95:bd:64:
98:9c:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:34:54 2026 by rpki-client