Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer (raw, json)
Hash identifier: OAWvGnpXLDqEz7rnP+FUSvf6q9YPv4KodNGXVyqDHZo=
Subject key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F154AE5A48B8FA2B163295AA43A74FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42035
IP: 185.57.25.0 -- 185.57.27.255
IP: 185.199.140.0/22
IP: 2a00:1890::/29
IP: 2a0b:2b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:4a:e5:a4:8b:8f:a2:b1:63:29:5a:a4:3a:74:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:69:6d:07:e1:6d:ed:da:41:6a:78:17:5f:
b1:90:d8:61:13:84:cd:a4:5e:57:6e:4a:1f:c6:a7:
4a:a4:c4:e8:49:76:fc:fc:10:23:ff:83:f8:45:fc:
89:db:a6:96:00:bf:07:c4:a1:2c:b5:43:8b:89:5c:
80:18:54:28:6f:6e:4b:74:dc:62:90:02:6d:a6:01:
fc:fc:e2:db:3f:0f:97:16:47:dc:3b:a5:f1:41:15:
44:68:34:bb:e6:17:ff:f5:4e:c5:4d:b3:3c:fd:2a:
2a:b4:45:60:64:17:44:5c:32:c7:0b:6e:4b:25:c1:
3d:12:53:c5:9e:64:46:b8:da:85:8f:a0:0b:b5:86:
90:c0:34:cf:c4:6b:92:1c:2b:6b:b6:0d:54:92:e2:
86:f3:3b:ee:69:2c:d5:f1:e5:fd:89:ac:8b:c1:64:
c7:81:00:e5:b4:72:87:fb:17:32:95:29:38:b8:52:
c0:04:7f:d6:f9:c2:7a:c1:b7:77:c9:8a:35:cb:2c:
ac:5b:bf:16:cb:89:e2:aa:f4:fe:c1:30:29:98:3c:
a7:e0:03:b3:e7:30:ae:0d:9d:bf:b0:4f:a3:c3:5e:
51:15:30:5f:20:c0:21:a8:fc:c8:a6:4d:fc:96:8c:
80:14:ee:27:eb:3d:22:d0:0b:42:27:aa:70:4c:85:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.25.0-185.57.27.255
185.199.140.0/22
IPv6:
2a00:1890::/29
2a0b:2b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42035
Signature Algorithm: sha256WithRSAEncryption
1c:12:f7:67:ef:84:5a:2a:c0:fd:a1:82:54:03:e2:da:7d:cd:
8b:b5:5b:52:d0:ca:a3:33:29:2c:e2:f4:ff:54:23:58:22:82:
14:72:55:c5:2a:71:cc:4f:bf:e1:c4:c2:db:3d:53:75:3a:1e:
70:0d:6e:8f:11:79:a5:43:71:d3:f7:17:98:41:1f:51:aa:b3:
d3:78:79:eb:b5:df:ef:d7:70:18:1b:47:aa:b6:8c:7f:a4:51:
b6:dd:4d:00:c1:bd:58:05:b5:dc:34:89:65:ce:3c:fe:9f:c3:
89:3e:90:37:53:8a:29:ba:41:41:62:c9:1c:da:ad:1b:9c:1d:
cd:1e:d9:90:1d:39:25:c7:7a:e8:25:37:23:85:e2:37:23:42:
74:df:dc:43:20:48:56:62:37:11:4e:81:95:37:53:58:3c:12:
c4:9e:39:06:1b:d5:3d:c9:2e:9f:80:f0:68:18:19:2a:ab:ff:
98:9a:ee:38:b0:f2:af:88:9c:a0:c2:48:74:10:4c:1c:9a:71:
f6:05:28:d3:4b:76:c8:dc:02:63:f8:dd:98:8e:5b:68:52:a7:
1b:f6:85:3a:f1:46:35:6a:8e:4f:43:4d:93:54:10:02:2b:cb:
2c:41:52:69:ec:c2:c5:13:75:b7:8b:15:8c:96:99:6f:4b:07:
67:46:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:26:13 2026 by rpki-client