Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
File: n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer (raw, json)
Hash identifier: vC+clRprhlD5lU2kc8DMA+qXYP3MPTO9TcTev1LeUtM=
Subject key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBC5B6588F5C143AF1DF225F37B74A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 28709
AS: 47541 -- 47542
AS: 62243
AS: 207581
IP: 79.137.132.0/24
IP: 79.137.139.0/24
IP: 79.137.164.0/24
IP: 79.137.167.0/24
IP: 79.137.180.0/24
IP: 87.240.128.0/18
IP: 93.186.224.0/20
IP: 95.142.192.0/20
IP: 95.213.0.0/17
IP: 185.29.128.0/22
IP: 185.32.248.0/22
IP: 2a00:bdc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:c5:b6:58:8f:5c:14:3a:f1:df:22:5f:37:b7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:a8:5a:db:7a:33:f1:d0:a8:32:5a:a0:3f:
97:df:7c:d9:1a:c7:02:df:a4:e3:07:dc:ed:16:1c:
ce:cf:bc:65:e1:96:d7:41:66:f1:92:47:15:8b:25:
3e:84:af:32:4a:98:07:ad:dc:03:c7:91:1b:e1:b1:
7e:bc:88:0a:1d:21:2b:3c:fb:fe:45:ab:cc:5f:c4:
cf:17:67:9e:55:1c:06:f5:30:ce:c4:81:48:f1:f9:
bc:60:86:a8:0c:82:34:73:4e:a1:fd:54:1e:12:8f:
f6:86:32:c8:f1:c2:5d:9e:1a:f4:05:2f:c1:9f:af:
5c:fd:1d:85:55:57:d7:cb:ac:e5:e8:09:0b:39:92:
a2:3d:3f:e0:59:a4:35:2a:8a:7b:9e:5c:d3:cc:54:
62:ce:37:36:88:b5:0c:a9:f4:73:a3:a0:04:2d:84:
af:5b:df:c0:3a:bf:ec:be:5a:13:25:8d:5f:26:b9:
13:0a:cd:54:f2:7a:80:12:36:57:06:f9:de:88:ce:
06:ad:46:03:00:cc:bf:67:39:2b:43:d5:b8:7c:05:
4d:5e:80:8c:58:b5:65:3f:16:30:f9:02:bd:ab:a4:
6e:a3:c7:0f:e2:8c:bd:fb:9e:ff:3c:d0:15:4c:82:
c7:5d:b0:99:a7:d1:be:c2:5a:76:09:8d:b2:60:2f:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.132.0/24
79.137.139.0/24
79.137.164.0/24
79.137.167.0/24
79.137.180.0/24
87.240.128.0/18
93.186.224.0/20
95.142.192.0/20
95.213.0.0/17
185.29.128.0/22
185.32.248.0/22
IPv6:
2a00:bdc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28709
47541-47542
62243
207581
Signature Algorithm: sha256WithRSAEncryption
63:52:a7:4b:c5:24:24:d8:a7:e7:79:f7:0e:a6:76:c2:d9:a7:
d5:1b:39:ac:cd:b6:76:c8:66:cd:ed:6d:16:24:95:84:87:31:
fa:c0:29:2e:b6:9c:3e:5c:2d:5d:80:10:a6:39:7f:47:69:05:
6f:ab:4b:46:4b:63:13:eb:97:09:30:3b:a2:3e:18:73:7d:05:
bb:f9:7a:8a:e5:ba:6b:b8:20:77:67:52:36:a1:79:c3:e3:f5:
61:84:84:9a:87:b2:83:d6:ed:8f:9e:89:d7:f3:43:79:f8:d1:
4c:9f:44:4f:de:5e:d5:11:12:19:37:ed:6a:0f:8c:9f:ec:c9:
6c:da:4b:85:d4:77:c5:d8:a2:e5:2d:6c:a8:df:53:43:fc:00:
58:79:16:88:9e:8c:8a:5f:51:cf:c4:4e:4a:68:bb:fe:af:ad:
b2:3b:23:28:5b:8e:19:df:1f:ab:a3:ce:16:4d:78:86:3b:eb:
ca:5c:bf:5e:82:ad:9e:65:96:49:cd:ae:33:aa:1e:f3:7c:a6:
54:72:fd:a5:5d:e2:71:61:49:35:33:58:f3:81:6b:06:ea:bf:
89:4a:bf:04:6d:14:1d:d8:71:d0:5a:9b:9b:4c:df:85:02:41:
53:87:0b:2c:71:ed:3d:7c:25:ba:aa:e2:12:c2:78:d8:f5:fb:
d9:a3:14:fd
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgISAZ8Y+8W2WI9cFDrx3yJfN7dKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Zjg1ZDE0NzYwZjk4NjYyYjk4OTg5M2Q4YTFlNWUwNWNkM2ExM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX+oWtt6M/HQqDJaoD+X33zZGscC
36TjB9ztFhzOz7xl4ZbXQWbxkkcViyU+hK8ySpgHrdwDx5Eb4bF+vIgKHSErPPv+
RavMX8TPF2eeVRwG9TDOxIFI8fm8YIaoDII0c06h/VQeEo/2hjLI8cJdnhr0BS/B
n69c/R2FVVfXy6zl6AkLOZKiPT/gWaQ1Kop7nlzTzFRizjc2iLUMqfRzo6AELYSv
W9/AOr/svloTJY1fJrkTCs1U8nqAEjZXBvneiM4GrUYDAMy/ZzkrQ9W4fAVNXoCM
WLVlPxYw+QK9q6Ruo8cP4oy9+57/PNAVTILHXbCZp9G+wlp2CY2yYC9/YQIDAQAB
o4IDADCCAvwwHQYDVR0OBBYEFJ+F0Udg+YZiuYmJPYoeXgXNOhPkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzE4MTNi
YS01MDZlLTQ0NGUtOWNhNC1mMDkzZTE3YjI3ZWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMTgxM2Jh
LTUwNmUtNDQ0ZS05Y2E0LWYwOTNlMTdiMjdlZi8xL240WFJSMkQ1aG1LNWlZazlp
aDVlQmMwNkUtUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF
BwEHAQH/BFswWTBIBAIAATBCAwQAT4mEAwQAT4mLAwQAT4mkAwQAT4mnAwQAT4m0
AwQGV/CAAwQEXbrgAwQEX47AAwQHX9UAAwQCuR2AAwQCuSD4MA0EAgACMAcDBQMq
AL3AMC8GCCsGAQUFBwEIAQH/BCAwHqAcMBoCAnAlMAoCAwC5tQIDALm2AgMA8yMC
AwMq3TANBgkqhkiG9w0BAQsFAAOCAQEAY1KnS8UkJNin53n3DqZ2wtmn1Rs5rM22
dshmze1tFiSVhIcx+sApLracPlwtXYAQpjl/R2kFb6tLRktjE+uXCTA7oj4Yc30F
u/l6iuW6a7ggd2dSNqF5w+P1YYSEmoeyg9btj56J1/NDefjRTJ9ET95e1RESGTft
ag+Mn+zJbNpLhdR3xdii5S1sqN9TQ/wAWHkWiJ6Mil9Rz8ROSmi7/q+tsjsjKFuO
Gd8fq6POFk14hjvryly/XoKtnmWWSc2uM6oe83ymVHL9pV3icWFJNTNY84FrBuq/
iUq/BG0UHdhx0Fqbm0zfhQJBU4cLLHHtPXwluqriEsJ42PX72aMU/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:37:40 2026 by rpki-client