Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.cer (raw, json)
Hash identifier: DLXSGyDGU1STUPdXKltgZrnPCfz6+PD8Pc671JW0t40=
Subject key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F14FDF5BB5FF6779AA0F80BD584A6AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:20:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50557
IP: 193.105.110.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:fd:f5:bb:5f:f6:77:9a:a0:f8:0b:d5:84:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:49:74:2d:a3:57:e7:eb:7d:ca:48:61:b9:
d3:b8:89:9d:62:5c:af:ba:9f:51:1d:91:a6:e7:ca:
f8:54:53:ff:33:85:7d:33:c6:80:bc:86:f1:23:07:
f2:29:26:9a:89:3e:e5:73:8d:40:d8:9c:36:91:26:
0e:39:f7:09:c2:3b:ea:31:b2:1d:de:3a:fe:f6:ca:
83:e7:e0:99:95:ee:23:f9:be:a9:e1:f4:85:27:d3:
01:e0:d1:f3:01:fd:e6:ad:56:97:b6:76:51:b7:fd:
b1:72:2f:d1:fc:83:a0:91:e1:b6:f9:c4:5e:85:de:
d5:61:f3:e0:b1:9e:95:b9:69:b2:dc:28:9e:c0:ef:
81:95:97:c1:20:6d:b7:6c:d7:7a:c2:35:84:8f:51:
5b:5c:16:10:c9:31:23:c1:0a:c3:b5:7e:ab:b8:6e:
8e:b5:2a:06:c6:08:2e:4f:31:ac:97:1e:7d:8c:4d:
29:22:a9:3c:a5:71:5e:75:c1:51:b9:6b:a5:2c:8b:
00:cd:b9:91:cd:ad:77:73:5f:3d:99:b3:51:13:1d:
40:0b:71:2b:9b:4d:29:c6:dc:ec:13:c8:7f:0a:34:
f0:c2:88:b1:b3:63:2c:9a:07:d1:63:0d:8c:e8:28:
0f:21:11:dc:b9:45:3d:af:b6:4a:32:58:fe:af:71:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.110.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50557
Signature Algorithm: sha256WithRSAEncryption
13:bc:3d:26:c6:62:6e:51:0d:65:5b:86:fd:5b:2f:61:7b:ea:
89:01:79:91:44:c0:0f:14:f4:f7:e6:41:ae:bc:9a:1e:dd:e5:
35:77:b3:43:7a:91:f4:fe:86:23:3a:ff:dc:d3:39:3e:b8:f8:
17:59:22:cd:b5:a6:0d:54:54:04:29:ab:b6:02:d3:50:11:92:
d0:7b:69:7f:bf:a4:38:26:ce:35:a0:97:ed:09:50:5d:10:96:
1d:1e:b2:13:f4:15:ca:95:f2:7f:10:5a:6a:4e:cd:06:0b:d1:
88:64:eb:2b:b2:d2:49:59:e1:1d:ca:08:c1:52:12:f8:4f:5f:
43:b4:b1:f3:b5:e9:f2:1e:6b:eb:8b:f6:9e:5b:87:64:7c:ca:
5f:b7:a3:9e:5c:3f:53:b3:0c:60:e2:43:65:68:eb:49:09:c6:
71:a3:e6:7c:ed:a0:5e:06:b4:a0:da:bf:fb:a6:d1:5a:c7:72:
9b:ae:fc:88:f6:77:ae:7f:27:e5:9a:1f:c4:41:1f:bb:9a:1c:
da:e8:31:49:36:2f:71:a8:21:f3:71:a2:ad:e0:93:c9:d3:3a:
20:6a:14:44:c0:db:6a:0b:71:5d:52:e3:bb:c3:d9:96:cd:fa:
74:96:a0:e6:8c:3b:34:5c:bc:e6:0b:6e:ff:f2:7e:fe:6b:e7:
15:24:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:48:53 2026 by rpki-client