Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
File: d92irQmMangU-yWLRpsNhM4kxKc.cer (raw, json)
Hash identifier: /qa1IEcOxy77prci21PZmGTbn+dE1xk/oitt/BlP63w=
Subject key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F17F586856AF8136839D6B52D59062007
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 09:56:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197648
IP: 91.217.246.0/24
IP: 91.223.208.0/24
IP: 185.106.100.0/22
IP: 185.205.184.0/22
IP: 193.164.222.0/23
IP: 2a06:3c80::/29
IP: 2a0c:5cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f5:86:85:6a:f8:13:68:39:d6:b5:2d:59:06:20:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 09:56:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:cf:a5:e3:b8:ce:16:c2:87:47:a2:fc:2b:
ca:d8:ff:52:d2:81:ca:d4:b8:97:9e:8a:87:da:45:
26:fc:e2:92:cb:21:9b:85:40:7f:0e:d6:a9:b0:ff:
b6:ca:64:cb:47:4e:c4:e1:8a:90:2a:a9:2c:5d:a9:
04:26:92:e4:e9:3f:c5:96:4a:9d:70:63:04:3f:2c:
97:cc:f6:02:ec:3e:8d:23:45:a5:40:d8:34:82:26:
cc:3f:6b:20:69:23:f4:b0:80:38:f9:b8:85:ab:2a:
1e:69:da:5b:1f:88:50:ce:91:3d:f9:0e:ab:a7:99:
56:90:38:92:ad:0e:d8:54:09:e2:cf:ed:c5:26:0b:
a7:74:d4:7c:fe:74:a9:23:70:91:9c:7d:8b:a1:84:
1b:a7:65:1f:6d:6a:12:eb:7b:2a:97:c8:df:cf:12:
2a:fe:7d:b5:36:81:e8:4c:86:a4:92:95:69:5c:af:
f9:6d:d6:48:58:26:a4:c0:5d:a9:d1:2f:53:1c:e6:
15:c0:2e:b5:ff:d3:70:a4:17:c4:8d:02:94:07:db:
6b:8f:c6:8a:25:78:25:5f:29:c5:e3:70:da:ba:65:
18:28:b7:e5:ff:36:43:46:e8:32:a6:38:93:d4:16:
4c:95:4e:e5:29:62:32:f3:20:a0:3a:00:73:60:46:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.246.0/24
91.223.208.0/24
185.106.100.0/22
185.205.184.0/22
193.164.222.0/23
IPv6:
2a06:3c80::/29
2a0c:5cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197648
Signature Algorithm: sha256WithRSAEncryption
87:1e:47:39:34:21:bf:29:d4:b5:d0:cb:06:4a:5f:d1:c8:c4:
ab:ab:c4:14:64:8a:a1:85:26:89:8a:fa:b7:a5:9d:32:2c:0e:
9d:42:eb:54:79:c8:e6:a1:93:4f:00:69:df:6b:8e:fa:9f:ae:
58:10:6f:56:1b:54:c5:21:2b:4a:e6:ae:63:fb:b8:35:56:1a:
6c:67:7c:40:a2:01:94:0c:0e:d0:a0:fc:65:7f:b1:28:cf:bf:
0d:40:c8:40:a0:0a:8d:d7:d6:33:46:1f:57:aa:ac:a3:e5:51:
62:d1:17:ab:83:5e:b1:ae:dc:8b:f0:29:6a:20:4f:16:6c:f0:
6a:fa:0c:7d:53:68:79:99:fb:94:44:9e:f9:83:a0:65:86:f7:
98:76:2d:c1:06:75:07:72:aa:fa:e1:db:c9:0c:17:a5:71:57:
25:df:b2:e4:73:aa:c7:e0:e3:5a:a3:0d:27:dc:c2:e9:17:07:
b6:91:0c:29:ce:c6:72:6b:4a:76:cd:05:1d:bf:64:99:93:b3:
e3:42:0b:e4:aa:ef:0c:36:a5:c5:c2:03:cd:af:1c:3c:e1:e5:
0f:48:0f:13:5e:40:0b:90:57:9d:d2:76:6a:f5:8e:37:09:39:
f6:14:e1:b6:71:eb:f1:8e:59:8b:f4:eb:36:d0:ab:c7:10:66:
bc:a6:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:43:23 2026 by rpki-client