Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
File: i42FmAZNtajts6YIQGTNKhrYxuM.cer (raw, json)
Hash identifier: gk1XiRNXZbd3c1Cok11H2U9cV/nKCGV0FJAn0a4PlGo=
Subject key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C08D7111389FB74983913C9921DE8B579
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Jan 2026 08:20:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51801
AS: 210943
IP: 95.141.248.0/24
IP: 2a13:4880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:08:d7:11:13:89:fb:74:98:39:13:c9:92:1d:e8:b5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 29 08:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:14:1b:1e:c4:ce:d0:fa:29:6c:04:1d:bb:
c2:cb:6d:94:71:c4:c2:77:e3:5f:c2:89:62:13:92:
e2:d5:ee:02:4b:7a:41:27:58:85:4c:18:67:fa:22:
ae:76:21:c8:8e:f5:42:51:02:54:7b:b1:c7:a1:bf:
95:94:22:bd:04:4e:46:9a:18:82:9f:36:85:f7:8a:
bf:71:27:28:0a:80:16:d1:9a:06:2e:2f:41:91:26:
2e:8f:c2:1c:78:54:ed:36:3a:73:ff:89:25:7a:c9:
9d:d7:6a:3f:4d:9c:06:fd:bb:98:90:d7:9d:fa:fb:
04:33:ed:b3:82:8b:60:12:ef:d9:55:37:58:ad:c7:
8d:fd:23:9f:da:82:95:e5:00:1d:30:b5:0c:ef:4d:
30:73:ee:0c:cb:0b:72:c3:49:08:86:13:bf:dd:34:
16:ef:63:dd:e7:cb:92:92:e2:fe:57:c0:c0:79:60:
fa:15:c8:87:22:f1:1c:42:2a:ed:8b:04:fe:dc:fb:
18:1a:e5:79:8e:22:7f:dc:a8:b3:2e:4b:d7:7b:04:
11:86:3c:c1:21:92:93:91:d1:a9:d2:a5:8f:34:c3:
50:a0:ea:5b:97:d8:fc:60:97:ab:d6:14:cd:8e:f7:
7e:93:03:72:8c:3d:bc:14:22:ba:b7:27:ce:a5:75:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.248.0/24
IPv6:
2a13:4880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51801
210943
Signature Algorithm: sha256WithRSAEncryption
7c:e1:5b:ab:ee:83:ce:e3:ff:0c:0a:42:33:0e:99:67:18:2e:
a4:a1:ba:f8:a2:81:e5:d0:1d:f8:da:fe:71:b3:02:e8:ef:6f:
34:77:a8:91:3e:37:3b:e8:28:5e:4a:03:5f:46:2c:f4:8e:1a:
d8:ab:64:80:ff:02:65:e8:b4:3a:8e:5d:c2:ef:a7:b5:78:43:
ac:36:cf:16:20:a1:47:c8:9e:e4:c8:d5:41:1c:52:6b:ff:5f:
6a:6e:01:a2:e8:0c:39:c4:67:d6:d1:ff:11:12:b7:4d:e1:1f:
44:da:05:77:33:96:a3:bd:81:6a:8c:d9:e1:ae:0d:4e:8e:ca:
fd:a1:63:75:be:cf:2c:24:d5:cb:af:19:ec:0c:5c:81:6e:3e:
98:41:89:fe:0a:39:e3:09:38:49:dd:1e:67:c7:86:cb:c9:52:
78:c6:ea:1e:48:9f:fb:66:43:cc:e0:e4:f9:c6:bb:e4:3f:f8:
dd:3f:06:5d:6e:d6:06:72:fd:e6:06:b3:4d:32:93:a3:36:b0:
8a:34:c9:95:27:f1:08:4a:57:1e:ca:79:52:f3:91:2d:47:85:
7b:49:1b:ca:36:de:a5:be:fe:03:2b:6e:70:c9:7a:0c:58:51:
df:37:e3:8c:68:54:57:ec:e3:f5:3a:6e:fd:ea:85:ae:0e:a4:
53:02:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:56:11 2026 by rpki-client