Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
File: A9uVtDb1McTmAvOWEK1T4m_f8VM.cer (raw, json)
Hash identifier: vH7z+rbVtueZ8mw2lLiMyTie/GGuJIrURq0bgqUCZpU=
Subject key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A08B6E487697F38112F6083568F2B87EEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Sep 2026 13:07:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 77.91.64.0 -- 77.91.75.255
IP: 77.91.78.0/23
IP: 77.91.84.0 -- 77.91.95.255
IP: 77.105.146.0/23
IP: 91.209.135.0/24
IP: 92.42.96.0/24
IP: 185.149.144.0/22
IP: 185.157.120.0/24
IP: 185.225.200.0/23
IP: 195.10.205.0/24
IP: 212.192.246.0 -- 212.192.249.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:6e:48:76:97:f3:81:12:f6:08:35:68:f2:b8:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 13:07:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03db95b436f531c4e602f39610ad53e26fdff153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:0a:71:53:6f:18:88:62:3b:f9:bb:78:fa:
2e:42:6a:78:fa:f5:67:8c:ae:55:e1:26:c1:7e:2b:
3b:ab:9c:b5:6a:9a:08:4c:25:c2:cc:9f:a0:98:d2:
04:02:a7:42:f9:c0:8d:ec:de:bc:5d:0f:af:39:52:
e1:2a:1b:ac:e0:ea:17:b5:eb:97:34:0f:20:c8:7e:
c2:0e:59:24:57:25:4f:05:56:48:8a:01:84:8f:3a:
e8:ef:31:bb:30:4f:7e:63:ab:60:93:43:e0:77:26:
e2:c1:16:72:c2:88:4c:d0:b1:cc:2a:19:6b:ac:bb:
3d:13:f0:03:96:f4:9d:4e:c1:af:ff:b5:d1:5a:30:
93:b3:3d:c0:49:f9:6a:dc:47:03:ec:01:71:eb:36:
d1:df:f2:a8:a1:f4:00:2a:46:d9:d9:dd:2f:4e:be:
2e:9d:5b:64:56:bb:2f:4c:aa:52:69:85:48:24:7d:
ab:4c:4d:b7:5c:10:81:70:41:4b:0b:fe:35:df:37:
07:22:94:46:68:ad:98:2c:49:b7:17:5b:37:79:20:
94:30:b7:54:4a:5b:63:ad:d0:96:88:fa:1a:bf:70:
36:12:90:e1:c3:58:56:2f:e5:09:11:70:e1:cd:09:
9f:d9:01:e9:13:44:9b:4c:35:45:03:95:e9:23:52:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.64.0-77.91.75.255
77.91.78.0/23
77.91.84.0-77.91.95.255
77.105.146.0/23
91.209.135.0/24
92.42.96.0/24
185.149.144.0/22
185.157.120.0/24
185.225.200.0/23
195.10.205.0/24
212.192.246.0-212.192.249.255
Signature Algorithm: sha256WithRSAEncryption
67:1a:e9:f6:3e:76:4d:2c:81:78:27:d4:1e:a8:ee:14:ec:21:
aa:6d:79:5d:cb:b3:0b:d9:5d:58:c3:b3:f4:68:45:89:db:5a:
7d:28:a7:2c:10:c6:6c:7d:39:86:24:58:9f:1f:c8:c5:a8:cf:
62:29:41:3f:bd:45:7f:45:c3:ee:c1:52:6e:1b:88:4e:2c:56:
50:5e:b0:0e:23:2c:79:af:d0:40:42:0d:16:b4:6b:5b:a0:9b:
ce:9c:6c:c8:99:d3:69:c8:78:7b:a6:3c:aa:2d:90:c7:4e:37:
0d:34:12:77:5c:fc:3b:32:34:45:7e:07:33:55:22:72:6c:70:
17:24:01:70:75:86:62:5c:9c:75:3d:7a:b8:19:a6:b5:cb:72:
45:e6:18:27:ac:f7:ed:26:81:fa:14:f2:4a:33:04:aa:ab:1a:
06:57:71:48:6f:d5:cb:08:f8:a8:ba:a9:ae:8d:cf:e0:22:f9:
fc:ff:4f:9a:7b:ba:22:e3:a2:bd:ae:79:55:cc:4e:be:9f:cc:
db:be:50:7b:9d:7f:53:ea:1c:a7:34:f2:cc:92:b3:0a:ec:aa:
a3:fa:b2:fb:d5:51:07:f1:96:81:c8:08:a0:7d:39:06:5b:10:
62:3c:6e:8f:e5:85:e8:9a:3b:19:bb:47:8b:f6:fc:17:55:90:
02:98:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:47 2026 by rpki-client