Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
File: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer (raw, json)
Hash identifier: YdYYxLJs4n+eX9Kpe5XwvymzOMlirnim89MyIsqyxYA=
Subject key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F3CE1CE91BE9E6D09A0864DD5AF761143
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Jul 2026 14:00:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43969
IP: 45.91.92.0/22
IP: 45.132.74.0/23
IP: 83.138.53.0/24
IP: 85.155.176.0/20
IP: 91.190.155.0/24
IP: 109.205.61.0/24
IP: 167.104.96.0/20
IP: 167.104.160.0/20
IP: 167.254.240.0/22
IP: 185.223.207.0/24
IP: 188.93.140.0/24
IP: 188.244.117.0/24
IP: 194.29.100.0/23
IP: 194.29.186.0/23
IP: 212.52.0.0/24
IP: 2a0a:c880::/32
IP: 2a0e:dc0::/30
IP: 2a10:9b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:e1:ce:91:be:9e:6d:09:a0:86:4d:d5:af:76:11:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 14:00:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:1f:b3:ea:a8:a0:07:05:4e:74:10:f4:64:
25:be:5a:f8:af:32:32:27:ca:f8:f9:ff:f7:5c:5a:
de:d3:25:ef:e1:5b:94:76:f4:72:b7:3c:0e:7a:cd:
52:11:88:c1:fb:cb:9a:88:23:49:3a:74:29:3c:2d:
33:a4:54:81:07:54:72:7a:c2:b0:e1:f0:e5:b0:97:
4f:c4:e3:60:d9:b4:0c:bd:33:99:5c:fb:73:88:5a:
54:98:ad:63:e1:6b:d5:36:7a:74:66:5a:6d:ad:d1:
86:cd:80:58:74:62:07:31:24:11:ce:64:51:1f:31:
0b:6c:45:b6:ad:fb:f8:83:d8:ce:db:bb:bb:0b:6d:
b9:15:ef:33:46:be:77:65:ac:4a:b2:c8:54:48:05:
7b:ce:29:dc:8e:47:3c:7e:43:0f:14:43:08:89:7f:
d1:e7:ba:70:ea:fb:e0:d3:2e:6d:99:f2:b0:57:3c:
09:46:d8:8b:bd:7d:5f:58:94:2b:56:52:5c:0d:71:
7b:31:b6:db:57:6c:9b:52:59:43:d4:e3:e0:e8:26:
ba:26:1b:87:29:91:3c:ce:e4:17:34:5b:05:b0:9e:
63:83:14:a1:e6:19:fe:bb:6f:3a:e8:45:a6:48:a8:
b4:a1:0c:14:bf:b0:84:f2:4f:5c:90:ea:6a:b5:37:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
45.132.74.0/23
83.138.53.0/24
85.155.176.0/20
91.190.155.0/24
109.205.61.0/24
167.104.96.0/20
167.104.160.0/20
167.254.240.0/22
185.223.207.0/24
188.93.140.0/24
188.244.117.0/24
194.29.100.0/23
194.29.186.0/23
212.52.0.0/24
IPv6:
2a0a:c880::/32
2a0e:dc0::/30
2a10:9b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43969
Signature Algorithm: sha256WithRSAEncryption
5f:cb:46:59:14:cd:58:42:ed:a0:44:8d:03:9d:6d:63:68:fe:
57:e0:5c:1e:2a:2c:e5:1e:f7:dc:14:b4:e3:d9:a3:26:44:39:
fd:00:40:10:d3:ea:15:18:25:88:2d:dd:55:91:cb:f8:da:aa:
c0:b1:4d:ad:97:c1:40:0d:fa:d0:46:48:bb:19:85:99:a8:79:
16:45:fc:f3:00:c3:6e:75:c1:4b:74:da:3c:6b:50:ea:c6:ee:
73:c0:55:95:8c:7f:3b:de:38:3d:3c:e9:9d:37:ee:e2:81:c8:
75:b6:94:3d:7f:66:66:3f:1b:18:4a:cd:72:f2:83:46:71:3f:
8c:6e:43:99:43:d4:dd:25:cb:60:f9:30:54:45:0a:a5:80:73:
a3:55:08:4c:53:7a:fa:90:3b:53:32:19:d7:63:ba:63:7c:c9:
4c:93:a5:3a:96:e1:78:1c:ab:9f:ab:53:f4:46:72:55:f5:0c:
cd:f4:c1:9c:b5:44:15:4e:5e:5d:8c:f3:a6:6a:7d:9c:7a:4c:
ba:9c:3c:af:76:63:0c:75:77:13:ab:77:82:91:c5:e2:ad:eb:
38:68:d4:10:e2:d3:54:52:7f:f7:6c:d8:cc:ab:52:2f:35:98:
3c:77:5a:c4:b2:58:61:ad:9f:e6:0f:23:c5:1b:ab:b9:04:8b:
91:24:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:49 2026 by rpki-client