Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer
File: r9WY8p3VxWKY8usFdd4n_DuiCVE.cer (raw, json)
Hash identifier: JbW8Ex53qR8wUYdflc/ZMZyI4lgEfwoeJ/7JdxWRdHQ=
Subject key identifier: AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7834C899ADCF1907C7740E9CC48F5E50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211006
IP: 95.133.248.0/23
IP: 2a10:7ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:c8:99:ad:cf:19:07:c7:74:0e:9c:c4:8f:5e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afd598f29dd5c56298f2eb0575de27fc3ba20951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:ce:e8:f5:65:36:8f:3e:f6:61:02:97:19:
f9:bb:02:8a:02:b5:c6:c6:7b:39:65:75:a4:c6:f6:
84:ed:6c:a3:81:ed:f0:ab:17:93:e4:7d:21:67:66:
e2:d4:93:20:14:88:5e:95:5b:d4:56:f7:de:b6:cf:
80:ce:a7:64:84:bd:6e:ba:60:4b:b7:a2:31:b7:18:
36:36:a7:65:a0:78:53:ad:2f:32:43:7a:71:4a:6e:
e4:b3:b3:16:b9:8e:8e:60:42:bc:bb:f2:da:47:0b:
6c:f2:3b:94:56:52:10:a6:2a:b4:e5:a4:d2:64:89:
92:db:5d:f6:63:d1:d6:34:0c:7d:d1:77:19:18:72:
0e:85:d8:5b:3b:f1:d1:53:ee:53:85:0b:a0:88:4f:
66:d0:c7:82:f9:b0:6d:ec:61:bd:19:d1:96:5d:68:
6a:ce:49:27:d2:89:61:d9:db:d4:ed:1c:5b:c2:cf:
e4:37:bc:c1:ad:55:79:e4:fe:8c:bb:f9:36:27:e1:
64:10:d8:94:d2:e4:71:e0:39:e5:89:5f:2f:cb:ae:
87:1e:06:42:07:84:67:2d:20:31:3b:bf:c0:13:6e:
65:30:f8:87:08:87:5f:45:9b:46:b5:6f:dd:28:67:
66:d1:4c:45:92:66:7a:1f:0a:3d:69:c7:e7:d5:6b:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.133.248.0/23
IPv6:
2a10:7ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211006
Signature Algorithm: sha256WithRSAEncryption
6b:1d:94:7a:1f:e8:ef:19:99:ea:44:23:35:fb:f2:90:9c:c2:
67:81:97:11:46:5f:f8:5f:93:5e:8a:8e:67:81:07:b8:c6:88:
17:5b:12:ea:0f:94:ae:66:59:38:4d:d0:7a:75:90:94:5e:7c:
cc:19:84:83:f5:dd:bb:ce:65:24:c7:c8:2a:85:09:b8:50:74:
e5:8f:6a:73:a1:a7:18:46:db:59:ae:37:4a:f3:14:a2:1b:64:
83:cc:2e:d6:85:55:0f:7d:43:88:d0:9e:27:cd:9f:ae:e6:28:
e0:fa:d7:12:2a:db:9a:f8:65:3a:16:8f:83:09:e2:93:02:1c:
24:13:16:1f:50:8c:4a:dd:e4:58:48:35:23:85:43:4e:93:be:
fb:64:32:d1:03:de:4a:76:bf:d7:83:28:08:95:f9:8e:83:14:
9d:82:6c:fa:d0:a6:52:d4:f9:10:76:23:c0:24:e4:7a:79:d6:
33:42:1b:9c:d9:eb:3b:fa:e0:58:cc:a9:42:42:10:7a:be:11:
73:83:9a:a9:e5:de:a3:ba:24:58:06:80:5c:56:c6:04:d2:c8:
91:0a:77:62:f5:46:01:c3:7a:5b:07:ea:19:8c:83:6f:fa:51:
2b:56:41:e7:da:28:ab:7a:52:18:6a:70:02:c3:e5:76:52:fd:
94:67:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:24 2026 by rpki-client