Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
File: m9LNu_XMLYOp2PExgRJx8DLSFFA.cer (raw, json)
Hash identifier: cj5MjXw4cHoufpmnaPEKjl4aHwURrg1uiJePES/k3iU=
Subject key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CF5C5549B9301E96B3E695FFDBA5CDBCC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Mar 2026 08:31:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202356
IP: 185.159.109.0/24
IP: 2a10:eb40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:c5:54:9b:93:01:e9:6b:3e:69:5f:fd:ba:5c:db:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 08:31:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:0e:ff:14:e2:7d:df:14:49:c1:a6:73:0f:
08:8e:11:80:c9:7a:23:a4:bf:96:03:d3:2c:dd:d5:
26:4f:99:cb:44:33:ef:40:bb:d2:10:ce:19:75:b0:
6c:40:17:2f:c8:fb:6c:69:0b:3d:6e:b0:83:be:b4:
e7:cd:2a:97:f5:ac:29:de:d2:9b:dc:50:72:09:5f:
60:c1:68:de:a7:4c:9f:99:73:28:c1:85:c2:32:4d:
ee:f5:09:f3:fb:13:60:24:0d:cf:a4:8d:6f:ca:09:
48:48:35:f1:91:92:34:25:d9:a6:d1:d0:77:18:6a:
69:37:76:06:72:b8:5a:ee:c8:88:b3:f7:94:9c:db:
ab:a5:72:0c:15:98:09:27:e4:8e:cd:50:fb:95:ec:
f3:a0:a6:a6:a0:eb:6f:ba:d9:2a:0d:33:2f:7f:d5:
8d:43:3e:13:9b:e9:db:dc:15:5a:7e:01:56:16:aa:
5d:f0:2f:3a:7e:fd:63:41:1b:91:6f:73:40:23:35:
ed:46:6a:29:59:1d:36:97:cd:28:a5:77:b2:1f:07:
d3:b4:85:48:0f:cb:61:ae:02:9c:2a:d6:26:d4:07:
63:6f:a3:63:5e:d3:66:4c:5a:60:34:9a:ef:6d:6d:
f5:5a:6b:1f:18:04:ef:2f:1b:e7:72:0a:f8:90:ba:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.109.0/24
IPv6:
2a10:eb40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202356
Signature Algorithm: sha256WithRSAEncryption
2f:ff:62:e3:ae:5b:ff:36:47:b3:03:13:5b:d4:78:76:75:7f:
12:12:7d:6f:fc:61:cc:93:a7:48:98:a4:1c:3f:f4:3f:e6:dd:
ec:32:eb:ba:f1:e6:db:f6:5b:0f:97:18:d0:8b:40:63:31:c1:
47:2b:dd:1f:3c:4b:b3:69:07:79:c1:7b:89:7a:2e:c8:9f:43:
0f:c6:b1:bd:a7:d7:6c:4f:79:24:a0:20:5a:a1:b4:ba:d6:85:
28:4b:90:3a:4d:cd:4f:77:bd:3c:33:aa:97:f3:aa:e9:c1:8b:
35:cf:07:8e:09:be:7d:e2:e3:8e:4e:77:98:b8:04:28:6f:11:
0d:ac:a7:5e:ff:d1:9e:24:6d:72:1b:01:62:8f:53:46:0c:0e:
18:f1:9e:6c:01:ce:22:11:75:57:bc:1a:55:53:6d:34:4b:85:
e9:07:69:26:60:46:c2:5e:20:8e:df:fa:b9:20:d5:1c:4f:9b:
ac:92:f3:f3:0a:60:84:7f:59:41:da:43:05:0a:31:a5:f2:85:
8d:9d:ec:b3:82:8a:3b:8c:ae:0f:74:3c:35:23:eb:25:bf:19:
3b:05:90:09:a6:5f:3b:28:2b:6f:81:0d:0c:03:f1:e4:6f:71:
64:2d:d9:1a:cf:93:12:13:41:10:3c:29:db:bd:f3:86:db:b3:
34:7b:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:12:10 2026 by rpki-client