Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
File: 5b15I6_brofQeyMI3TidnPCC7W0.cer (raw, json)
Hash identifier: uJQS+S4tSIS7jrRvHI2oPVAOKbUNheMP6eeCdUYT4Tk=
Subject key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A04351E1E724DF0D9196593A814B38FE8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Aug 2026 13:03:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25052
AS: 44709
IP: 5.100.248.0/21
IP: 5.180.180.0/22
IP: 31.133.100.0/22
IP: 45.83.40.0/22
IP: 45.91.168.0/22
IP: 45.93.92.0/22
IP: 45.248.36.0/23
IP: 63.250.56.0/21
IP: 79.108.160.0/21
IP: 80.47.208.0/20
IP: 81.28.4.0/22
IP: 83.229.68.0 -- 83.229.75.255
IP: 83.229.80.0/21
IP: 91.202.168.0/22
IP: 91.223.106.0/24
IP: 91.223.169.0/24
IP: 91.223.236.0/24
IP: 91.226.72.0/24
IP: 91.226.76.0/24
IP: 91.228.126.0/23
IP: 93.93.205.0/24
IP: 103.13.208.0/22
IP: 103.45.244.0/22
IP: 103.240.144.0/22
IP: 103.241.64.0/22
IP: 109.207.76.0/22
IP: 185.28.152.0/22
IP: 185.47.172.0/22
IP: 185.53.208.0/22
IP: 185.56.72.0/22
IP: 185.127.16.0/22
IP: 185.139.228.0/24
IP: 185.139.230.0/23
IP: 185.144.156.0/22
IP: 185.159.72.0/22
IP: 185.162.124.0/22
IP: 185.181.8.0/22
IP: 185.220.204.0/22
IP: 185.227.108.0/22
IP: 185.237.12.0/22
IP: 185.237.96.0/22
IP: 185.241.4.0/22
IP: 185.247.116.0/22
IP: 185.253.72.0/23
IP: 185.253.75.0/24
IP: 188.191.147.0/24
IP: 193.168.172.0/22
IP: 193.218.207.128/25
IP: 194.36.88.0/22
IP: 194.37.80.0/22
IP: 194.146.24.0/23
IP: 194.146.38.0/23
IP: 195.28.180.0/23
IP: 195.238.120.0/22
IP: 212.80.204.0/22
IP: 212.86.104.0/23
IP: 2a00:9f60::/32
IP: 2a01:92e0::/32
IP: 2a02:40a0::/32
IP: 2a02:41e0::/32
IP: 2a04:d980::/29
IP: 2a06:c5c0::/29
IP: 2a07:3b80::/29
IP: 2a0a:b880::/29
IP: 2a0c:a600::/29
IP: 2a0c:c040::/29
IP: 2a0d:1240::/29
IP: 2a0d:be80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:51:e1:e7:24:df:0d:91:96:59:3a:81:4b:38:fe:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 27 13:03:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:46:11:ae:b5:ba:22:01:3b:c6:93:9e:49:
dd:53:d6:c1:eb:20:3f:3e:a8:3e:bd:4f:cb:a6:6e:
6b:0c:a4:30:58:31:71:03:99:ff:e1:60:53:7c:b1:
29:bc:82:dc:ba:ef:93:00:2f:c7:d9:4e:ed:7c:9d:
3b:71:7f:00:d3:d4:ba:fc:fc:3c:d8:85:38:5e:e7:
e7:e7:9a:90:26:6e:8c:46:66:f4:4d:f0:e9:ce:64:
75:a2:50:bb:86:6a:7d:b1:1b:9e:48:ef:73:8a:21:
78:45:b0:ce:7e:c8:fe:a9:26:a7:23:3c:aa:42:76:
63:ff:ce:75:eb:35:53:b3:73:4f:eb:13:e9:db:e8:
28:35:50:9d:b2:c6:95:22:c1:a1:69:1c:55:cb:0e:
ba:1d:30:92:09:45:f8:9a:3c:ab:94:3c:ef:9f:ef:
f8:fb:5e:c5:2d:eb:3c:f1:5f:a9:ab:54:ea:7a:84:
dc:7b:0c:18:ab:3a:dd:53:3d:bb:ea:f9:aa:96:fb:
a1:5e:f7:05:25:85:f0:44:55:1d:32:b2:cd:d9:a8:
9f:76:22:30:9b:cc:f4:fa:6d:ea:02:1a:3e:c1:db:
40:24:0c:5c:07:b0:fc:cc:ba:87:37:18:2b:57:74:
17:ca:8c:e7:a0:c3:13:bd:c6:c1:0d:08:21:34:0d:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.248.0/21
5.180.180.0/22
31.133.100.0/22
45.83.40.0/22
45.91.168.0/22
45.93.92.0/22
45.248.36.0/23
63.250.56.0/21
79.108.160.0/21
80.47.208.0/20
81.28.4.0/22
83.229.68.0-83.229.75.255
83.229.80.0/21
91.202.168.0/22
91.223.106.0/24
91.223.169.0/24
91.223.236.0/24
91.226.72.0/24
91.226.76.0/24
91.228.126.0/23
93.93.205.0/24
103.13.208.0/22
103.45.244.0/22
103.240.144.0/22
103.241.64.0/22
109.207.76.0/22
185.28.152.0/22
185.47.172.0/22
185.53.208.0/22
185.56.72.0/22
185.127.16.0/22
185.139.228.0/24
185.139.230.0/23
185.144.156.0/22
185.159.72.0/22
185.162.124.0/22
185.181.8.0/22
185.220.204.0/22
185.227.108.0/22
185.237.12.0/22
185.237.96.0/22
185.241.4.0/22
185.247.116.0/22
185.253.72.0/23
185.253.75.0/24
188.191.147.0/24
193.168.172.0/22
193.218.207.128/25
194.36.88.0/22
194.37.80.0/22
194.146.24.0/23
194.146.38.0/23
195.28.180.0/23
195.238.120.0/22
212.80.204.0/22
212.86.104.0/23
IPv6:
2a00:9f60::/32
2a01:92e0::/32
2a02:40a0::/32
2a02:41e0::/32
2a04:d980::/29
2a06:c5c0::/29
2a07:3b80::/29
2a0a:b880::/29
2a0c:a600::/29
2a0c:c040::/29
2a0d:1240::/29
2a0d:be80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25052
44709
Signature Algorithm: sha256WithRSAEncryption
51:cf:4c:dd:10:b8:2c:a9:e6:ed:b6:56:d4:76:15:20:3e:40:
3d:8a:65:1e:43:9a:25:80:25:75:de:fa:14:74:29:5e:84:ba:
d2:a4:84:29:19:cb:60:25:cd:bf:f3:5b:64:4e:64:ab:25:2b:
1c:d4:da:5c:d8:31:b0:4e:48:91:cd:c0:fa:4d:0c:53:d9:22:
e9:fb:9c:01:52:6a:05:62:9f:9b:83:f9:bd:91:5b:fd:2a:87:
d7:a0:21:d6:38:43:c2:76:07:22:3e:3b:25:69:1e:b8:97:d2:
8d:21:ba:3a:9a:66:8a:11:c2:5b:b9:fd:50:ee:d2:77:bf:98:
ba:c7:62:fc:ce:03:83:ab:fa:7f:65:a2:f0:30:c5:50:a1:d9:
c9:13:64:c7:75:a2:58:ee:4e:f0:af:62:2b:58:51:27:50:1d:
ab:1c:ea:4e:cd:d8:d0:cb:2a:8e:9c:c4:de:4b:d3:83:d9:90:
08:e3:6c:08:29:3b:39:6f:1a:e8:47:b7:33:29:02:fa:a8:10:
fb:4d:4e:24:cc:53:8a:a1:31:0f:01:ed:8c:cb:de:e2:41:3f:
e2:04:86:e9:8b:64:13:75:14:c6:56:85:4b:03:39:dc:b5:b2:
08:d4:45:7e:06:20:a2:35:71:72:38:9e:fc:76:61:d9:f2:72:
7c:f8:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:42:23 2026 by rpki-client