Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
File: C9MR-KZ36gSWjt3jRk-zMmDw3io.cer (raw, json)
Hash identifier: I8uyeHKGowzbbOmOVyEgOn9kX+/B4hWUrYW+KEsOW9s=
Subject key identifier: 0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EB171722A3FEFF73FFD7F59A56F73AD51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 12:11:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.241.79.0/24
IP: 185.237.44.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:71:72:2a:3f:ef:f7:3f:fd:7f:59:a5:6f:73:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 12:11:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:8b:53:6b:e2:2d:60:9f:82:cb:85:19:19:
43:d7:12:0e:85:99:08:4c:fb:32:52:d5:82:26:37:
fb:46:df:a7:f0:7a:1c:51:ab:2a:93:1e:db:1a:69:
ea:3a:0d:48:09:85:ad:90:73:ef:ee:a6:d9:c8:2e:
81:bc:fe:94:3f:15:76:08:c9:87:74:65:92:c2:f0:
fe:bb:77:f7:5b:c4:be:19:2b:ff:a6:cb:7a:16:c8:
37:cc:e3:e4:bc:ad:72:38:ee:66:ed:92:b8:7f:3c:
f5:88:de:ec:1e:32:0b:82:99:9c:34:b1:2e:f1:0e:
c8:bb:ba:3d:f0:bd:2c:b7:1b:3e:3e:f0:f7:86:da:
43:04:f4:c0:a0:32:2e:cc:bf:6a:f7:d6:d8:94:5a:
2d:30:57:c1:1b:dd:62:c4:5e:99:22:80:8d:04:85:
9e:34:c9:5d:bf:89:42:2f:83:aa:d9:1c:68:ec:3e:
4c:21:c8:e2:d7:0d:e0:75:fe:9b:f3:83:bf:66:e5:
c4:0a:87:be:4d:4a:cd:81:95:04:9c:00:f9:af:b0:
c5:ef:81:72:83:61:14:6a:34:d2:34:35:59:fb:46:
0c:10:c8:14:d3:c3:36:6a:a7:2b:8d:b4:db:ce:54:
80:6d:c7:64:f3:f0:24:b0:4c:81:2f:36:78:c4:0c:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.79.0/24
185.237.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:27:4e:bd:64:47:fe:d5:b8:eb:5c:74:a7:03:1f:2a:3a:b7:
7d:91:c9:8f:20:61:56:f6:2e:3f:d8:fc:ee:dc:65:83:79:2f:
f1:ae:33:c7:7e:5f:a2:d3:f5:b0:00:63:dd:45:a3:65:a0:82:
4e:68:a4:d5:e6:8f:d6:41:5d:93:50:17:86:2d:7f:2b:b2:6a:
7f:9c:41:ec:f3:b2:c0:2c:e1:8a:6b:5c:12:e7:e5:26:00:1b:
f4:50:9d:f1:2a:15:32:31:fb:1b:5b:76:1b:c1:22:77:4d:57:
38:dd:85:72:40:76:00:d5:d1:dd:6b:c8:4f:1c:fa:28:ae:9f:
f8:50:47:2d:20:27:80:6c:5f:4d:4d:3f:28:60:39:07:51:a3:
08:30:ff:87:4c:e1:fd:56:1a:d4:04:d9:13:b5:22:af:97:35:
ec:ca:23:4c:6a:04:44:d7:24:5b:2a:a9:f6:cb:8f:f1:c5:47:
9c:7b:af:cf:11:c0:d2:fc:cd:10:69:f8:49:5e:cb:f5:98:25:
73:55:c5:f8:6b:62:75:12:de:60:ef:f7:5d:91:6d:5a:95:b1:
8d:cc:d2:b6:19:4c:41:fa:42:be:2b:6f:a7:11:28:31:6c:d8:
a3:47:6a:97:62:ab:5c:e3:99:40:80:69:94:e0:f7:23:0c:7a:
66:d7:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:58:55 2026 by rpki-client