Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
File: 51B9sIinyBoNvsjxrdtS-VvRAUM.cer (raw, json)
Hash identifier: OQmPL7/GvGwM7mlB0or2SZNdtg8OWgo9wYAzWa5Ovzw=
Subject key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C952C45CDE0E639D3207B08D84F19B71D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 14:20:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.141.28.0/22
IP: 91.199.167.0/24
IP: 2a0e:c9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:2c:45:cd:e0:e6:39:d3:20:7b:08:d8:4f:19:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 14:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:80:44:f8:df:85:f1:d6:bf:3a:cb:0f:cf:
78:31:2a:d9:47:1b:52:23:3a:70:9f:75:00:4d:86:
30:1c:e3:f2:05:7d:b9:fe:89:9b:69:05:07:4f:65:
fc:ae:a2:51:89:72:b8:28:5c:09:e4:1f:2c:ee:8a:
1d:f0:3f:6f:f2:2c:bb:ac:98:45:51:d1:d7:f3:a7:
7a:6e:8f:cf:d6:4a:4a:a2:26:2e:b9:cb:7c:14:23:
81:58:af:83:64:a2:ce:6f:a2:1b:90:cb:27:9d:4f:
06:21:14:46:29:87:40:66:25:c3:1b:b6:24:36:93:
d4:e7:e5:03:7f:30:a6:c8:5f:bd:e0:a8:71:f1:b2:
ed:c6:40:1e:e2:2d:24:56:6c:63:91:26:09:a0:e2:
4d:8c:84:f9:c6:13:ff:96:05:ae:ad:32:58:7e:1a:
29:29:9b:e8:c5:76:62:e0:f7:cb:bc:cd:37:96:03:
b2:2a:b7:58:b1:d1:21:f4:66:ba:9b:ec:3b:c2:32:
47:1a:84:72:9b:2b:29:0b:ea:53:6a:68:1d:a9:4e:
c0:d2:a4:3e:b2:5e:96:30:16:b2:30:ef:05:20:7f:
cd:99:40:1a:99:ad:0a:3f:20:87:9c:44:32:94:dd:
ae:d4:55:2a:56:f0:19:0d:49:f3:d5:0c:77:e9:ce:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.28.0/22
91.199.167.0/24
IPv6:
2a0e:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:f2:57:1d:6a:f0:67:06:1f:d8:2f:83:5e:ea:f0:4d:25:85:
8e:84:0c:63:3f:48:6c:ef:2a:21:f4:23:87:b7:45:62:10:3b:
f8:6c:64:d1:57:07:07:1f:88:d8:31:5d:ad:c8:35:f8:ff:34:
86:8b:72:14:fc:79:89:4c:a9:a6:c7:b0:05:2c:93:fa:38:44:
b7:8d:c1:1b:b8:49:a6:3a:0f:e4:f9:be:23:af:97:3b:b5:0f:
d1:fc:9d:cb:bb:d7:a8:33:9e:4f:12:4c:b4:2e:6f:43:f2:53:
cb:7d:ef:db:57:2d:2f:00:aa:50:e4:a0:fa:50:a5:38:4e:ea:
48:ab:c1:04:b9:31:1b:40:93:81:cf:12:3e:27:9f:94:21:06:
68:db:16:cd:f5:20:49:8b:3d:40:41:0c:26:76:29:d9:de:03:
5d:f6:c9:6e:c6:51:72:63:c7:3e:76:1f:ed:b1:78:f8:96:e2:
2c:4c:1c:f0:9c:e7:8e:d8:28:c6:ba:2a:c9:04:0c:cf:71:4e:
c7:b8:b8:b4:04:f3:eb:54:1c:71:2d:f3:2f:55:4c:a5:5c:d4:
ff:06:75:fd:c4:55:83:5a:d6:77:e0:e8:cf:42:f5:18:2d:9a:
cb:af:1d:3d:3c:1f:c8:ec:ca:8f:92:9c:c7:32:5e:f9:1a:0b:
d1:72:12:e6
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZyVLEXN4OY50yB7CNhPGbcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjI1MTQyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzUwN2RiMDg4YTdjODFhMGRiZWM4ZjFhZGRiNTJmOTViZDEwMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IaARPjfhfHWvzrLD894MSrZRxtS
Izpwn3UATYYwHOPyBX25/ombaQUHT2X8rqJRiXK4KFwJ5B8s7ood8D9v8iy7rJhF
UdHX86d6bo/P1kpKoiYuuct8FCOBWK+DZKLOb6IbkMsnnU8GIRRGKYdAZiXDG7Yk
NpPU5+UDfzCmyF+94Khx8bLtxkAe4i0kVmxjkSYJoOJNjIT5xhP/lgWurTJYfhop
KZvoxXZi4PfLvM03lgOyKrdYsdEh9Ga6m+w7wjJHGoRymyspC+pTamgdqU7A0qQ+
sl6WMBayMO8FIH/NmUAama0KPyCHnEQylN2u1FUqVvAZDUnz1Qx36c7jFwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFOdQfbCIp8gaDb7I8a3bUvlb0QFDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2Y0MTNj
Mi1jMmVjLTQxZjEtOWQ4NS01ZDg2MzRhYjdkOTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvZjQxM2My
LWMyZWMtNDFmMS05ZDg1LTVkODYzNGFiN2Q5MS8xLzUxQjlzSWlueUJvTnZzanhy
ZHRTLVZ2UkFVTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCLY0cAwQAW8enMA0EAgACMAcDBQMqDsnAMA0G
CSqGSIb3DQEBCwUAA4IBAQA98lcdavBnBh/YL4Ne6vBNJYWOhAxjP0hs7yoh9COH
t0ViEDv4bGTRVwcHH4jYMV2tyDX4/zSGi3IU/HmJTKmmx7AFLJP6OES3jcEbuEmm
Og/k+b4jr5c7tQ/R/J3Lu9eoM55PEky0Lm9D8lPLfe/bVy0vAKpQ5KD6UKU4TupI
q8EEuTEbQJOBzxI+J5+UIQZo2xbN9SBJiz1AQQwmdinZ3gNd9sluxlFyY8c+dh/t
sXj4luIsTBzwnOeO2CjGuirJBAzPcU7HuLi0BPPrVBxxLfMvVUylXNT/BnX9xFWD
WtZ34OjPQvUYLZrLrx09PB/I7MqPkpzHMl75GgvRchLm
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:59:29 2026 by rpki-client