Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-v9nqS68ECBnAz9fLNwdIkcNik.cer
File: m-v9nqS68ECBnAz9fLNwdIkcNik.cer (raw, json)
Hash identifier: v9gc5XBTO6FKrgqXVAxUwu4vVQKc4w7m1tYqao1w+gk=
Subject key identifier: 9B:EB:FD:9E:A4:BA:F0:40:81:9C:0C:FD:7C:B3:70:74:89:1C:36:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE801F5714BAAF2027147F4248F54461C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Mar 2026 16:22:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203802
IP: 155.212.232.0/24
IP: 2a11:6800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:01:f5:71:4b:aa:f2:02:71:47:f4:24:8f:54:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 16:22:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bebfd9ea4baf040819c0cfd7cb37074891c3629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:d7:e0:87:fb:0a:d8:ef:c9:9b:12:4a:78:
0a:77:50:23:30:7c:f8:bf:61:d1:62:b0:8f:95:e2:
6c:5d:e2:3e:eb:73:6d:8b:b6:d0:94:0b:c6:8e:4f:
21:2f:b7:36:fc:ac:a2:a6:09:01:d9:1f:99:67:a6:
8d:4e:1c:36:33:7c:62:ec:67:8d:55:27:75:f6:32:
78:13:9c:21:59:7b:62:fb:39:d8:7c:00:c5:cd:f3:
e9:83:b2:92:94:65:20:e1:de:be:15:db:cf:b7:98:
58:3a:4c:71:ff:cf:69:a2:ca:43:b4:7f:f5:3a:d0:
3b:00:17:f3:1b:55:93:27:cf:46:5d:10:1c:d4:a1:
3b:81:00:79:35:cf:2a:e0:93:d2:7e:6b:78:27:ae:
71:24:f8:ff:3c:20:42:61:d0:12:63:e4:33:6c:ab:
16:68:8f:6c:0b:8d:2e:10:79:ef:e1:74:bc:31:49:
dc:66:9e:67:cf:98:d2:e5:28:d1:30:d8:f7:3f:8a:
10:36:44:18:96:4b:b4:d2:43:b5:de:dd:1f:87:da:
e3:75:94:4e:a0:19:a9:8a:52:13:4a:a1:09:d9:01:
28:fe:cb:dd:2c:67:69:01:2d:57:d9:97:57:56:63:
79:ff:d5:c3:bc:87:36:91:4b:56:28:a7:15:09:10:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:FD:9E:A4:BA:F0:40:81:9C:0C:FD:7C:B3:70:74:89:1C:36:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.212.232.0/24
IPv6:
2a11:6800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203802
Signature Algorithm: sha256WithRSAEncryption
8d:99:c8:9b:46:f6:53:96:a6:67:6c:c5:1e:43:13:8e:6c:85:
04:42:71:3e:92:f0:fc:f3:27:ad:50:a7:0a:f6:de:b5:a1:03:
a2:51:fc:f7:f2:8f:36:cb:10:94:ec:7c:e1:f1:18:ac:a9:87:
f0:4c:6b:38:78:23:08:53:06:11:5a:51:39:2d:08:6f:07:c0:
ac:d8:3b:99:f6:56:3f:11:37:79:c8:e7:e0:fc:fb:54:fb:88:
e3:3f:2e:32:3a:26:32:81:f7:95:3e:fe:b4:3a:d9:d2:dc:f2:
82:7f:90:e3:c8:0c:b0:82:9c:b4:8c:9c:2e:cd:8c:b1:07:75:
c4:d7:7b:ea:cb:e8:1a:78:32:5f:a6:87:b4:ae:d4:26:eb:18:
2b:bc:4f:31:81:40:71:0b:36:90:8d:4e:32:f0:ca:da:5f:99:
b1:46:db:a4:4b:ec:33:9d:bc:4a:83:d2:b0:ee:78:72:85:f3:
b0:10:fd:19:35:d5:a1:10:28:11:95:89:16:50:dc:04:00:c9:
cf:a7:c4:73:46:3e:90:f0:0d:dc:9e:1e:ba:ca:93:93:77:35:
9b:31:ac:d6:4d:65:b4:4d:2e:86:70:a3:d3:85:c9:7f:72:22:
b9:46:23:78:71:73:06:cb:18:32:a0:85:e7:e4:c7:24:ab:51:
a4:00:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:23 2026 by rpki-client